Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/hnlxw4au2YyEzlEEjZXGB_LXrSk.roa
File:                     hnlxw4au2YyEzlEEjZXGB_LXrSk.roa (raw, json)
Hash identifier:          IgqyIBaGjTjc9oN/YYZ+rnxKAngAnp93zSmrIJRr/k8=
Subject key identifier:   86:79:71:C3:86:AE:D9:8C:84:CE:51:04:8D:95:C6:07:F2:D7:AD:29
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       018962AA17B4F708A106B71A461C685499C9
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/hnlxw4au2YyEzlEEjZXGB_LXrSk.roa
Signing time:             Mon 17 Jul 2023 07:04:21 +0000
ROA not before:           Mon 17 Jul 2023 07:04:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25229
IP address blocks:        77.121.17.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          109.201.227.0/24 maxlen: 24
                          77.121.12.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          93.74.0.0/17 maxlen: 18
                          93.74.0.0/16 maxlen: 17
                          109.201.226.0/24 maxlen: 24
                          109.201.225.0/24 maxlen: 24
                          109.201.224.0/24 maxlen: 24
                          77.120.4.0/24 maxlen: 24
                          77.120.6.0/24 maxlen: 24
                          93.73.0.0/16 maxlen: 17
                          93.72.0.0/16 maxlen: 17
                          93.72.0.0/15 maxlen: 16
                          95.69.240.0/21 maxlen: 22
                          95.69.250.0/23 maxlen: 24
                          95.69.248.0/22 maxlen: 23
                          77.123.64.0/19 maxlen: 20
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.160.0/19 maxlen: 20
                          95.69.192.0/19 maxlen: 20
                          141.170.226.0/24 maxlen: 24
                          141.170.229.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          95.69.224.0/21 maxlen: 22
                          141.170.236.0/24 maxlen: 24
                          77.123.96.0/21 maxlen: 22
                          77.123.104.0/21 maxlen: 22
                          95.69.128.0/20 maxlen: 21
                          95.69.144.0/21 maxlen: 22
                          77.123.112.0/21 maxlen: 22
                          95.69.152.0/22 maxlen: 23
                          77.123.120.0/21 maxlen: 22
                          77.123.128.0/19 maxlen: 20
                          95.69.156.0/22 maxlen: 23
                          95.69.160.0/19 maxlen: 20
                          77.123.144.0/22 maxlen: 22
                          188.230.28.0/22 maxlen: 23
                          188.230.26.0/23 maxlen: 24
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.78.0/23 maxlen: 24
                          77.122.128.0/17 maxlen: 18
                          188.230.74.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          77.244.32.0/20 maxlen: 21
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.96.0/23 maxlen: 24
                          188.230.118.0/23 maxlen: 24
                          188.230.116.0/23 maxlen: 24
                          188.230.120.0/22 maxlen: 23
                          188.230.126.0/23 maxlen: 24
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.112.0/20 maxlen: 21
                          77.122.0.0/17 maxlen: 18
                          193.189.96.0/23 maxlen: 24
                          77.122.0.0/16 maxlen: 17
                          77.121.192.0/20 maxlen: 21
                          77.121.192.0/19 maxlen: 20
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 22
                          77.120.112.0/22 maxlen: 22
                          77.120.128.0/18 maxlen: 19
                          109.201.232.0/22 maxlen: 23
                          109.201.228.0/22 maxlen: 23
                          109.201.238.0/23 maxlen: 24
                          109.201.236.0/23 maxlen: 24
                          109.201.240.0/20 maxlen: 21
                          77.121.64.0/21 maxlen: 22
                          77.120.216.0/22 maxlen: 23
                          77.120.224.0/20 maxlen: 21
                          77.120.220.0/22 maxlen: 23
                          77.120.240.0/20 maxlen: 21
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          93.79.96.0/21 maxlen: 22
                          93.79.104.0/21 maxlen: 22
                          93.79.112.0/21 maxlen: 22
                          93.79.120.0/21 maxlen: 22
                          93.79.64.0/19 maxlen: 20
                          77.120.52.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.60.0/22 maxlen: 23
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/22 maxlen: 23
                          77.120.80.0/20 maxlen: 21
                          77.120.84.0/22 maxlen: 23
                          77.120.88.0/22 maxlen: 23
                          77.120.92.0/22 maxlen: 23
                          77.120.96.0/19 maxlen: 20
                          77.120.0.0/20 maxlen: 21
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          93.78.128.0/17 maxlen: 18
                          93.78.128.0/18 maxlen: 19
                          93.79.0.0/18 maxlen: 19
                          93.79.0.0/19 maxlen: 20
                          93.79.32.0/19 maxlen: 20
                          93.78.192.0/18 maxlen: 19
                          93.77.192.0/19 maxlen: 20
                          93.77.224.0/19 maxlen: 20
                          93.77.128.0/19 maxlen: 20
                          93.78.32.0/20 maxlen: 21
                          93.78.48.0/21 maxlen: 22
                          93.78.56.0/21 maxlen: 22
                          93.78.0.0/19 maxlen: 20
                          93.77.0.0/19 maxlen: 20
                          93.76.160.0/19 maxlen: 20
                          95.69.232.0/24 maxlen: 24
                          141.170.244.0/22 maxlen: 23
                          141.170.250.0/23 maxlen: 24
                          141.170.248.0/23 maxlen: 24
                          95.69.253.0/24 maxlen: 24
                          95.69.252.0/24 maxlen: 24
                          95.69.255.0/24 maxlen: 24
                          95.69.254.0/24 maxlen: 24
                          93.76.192.0/18 maxlen: 19
                          93.77.64.0/18 maxlen: 19
                          82.144.192.0/19 maxlen: 20
                          93.77.32.0/20 maxlen: 21
                          93.77.48.0/21 maxlen: 22
                          93.77.56.0/21 maxlen: 22
                          93.76.0.0/19 maxlen: 20
                          93.76.32.0/20 maxlen: 21
                          93.76.48.0/20 maxlen: 21
                          93.75.224.0/19 maxlen: 20
                          93.76.112.0/20 maxlen: 21
                          93.76.128.0/19 maxlen: 20
                          141.170.226.0/23 maxlen: 24
                          141.170.224.0/23 maxlen: 24
                          45.15.234.0/24 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          93.76.64.0/20 maxlen: 21
                          93.76.80.0/21 maxlen: 22
                          93.76.88.0/21 maxlen: 22
                          93.76.96.0/21 maxlen: 22
                          93.76.104.0/21 maxlen: 22
                          93.75.64.0/21 maxlen: 22
                          93.75.72.0/21 maxlen: 22
                          93.75.80.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          188.230.76.0/24 maxlen: 24
                          93.75.88.0/21 maxlen: 22
                          188.230.73.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          93.75.0.0/19 maxlen: 20
                          188.230.7.0/24 maxlen: 24
                          93.75.32.0/19 maxlen: 20
                          93.75.160.0/21 maxlen: 22
                          93.75.168.0/21 maxlen: 22
                          93.75.176.0/21 maxlen: 22
                          93.75.184.0/21 maxlen: 22
                          93.75.192.0/19 maxlen: 20
                          93.75.192.0/18 maxlen: 19
                          93.75.96.0/19 maxlen: 20
                          188.230.98.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          188.230.100.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          93.75.128.0/19 maxlen: 20
                          188.230.115.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          188.230.124.0/24 maxlen: 24
                          93.74.128.0/17 maxlen: 18

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:62:aa:17:b4:f7:08:a1:06:b7:1a:46:1c:68:54:99:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Jul 17 07:04:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=867971c386aed98c84ce51048d95c607f2d7ad29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:64:02:4b:9d:64:35:07:9e:ae:0d:af:fe:
                    94:06:89:c1:06:62:f5:0d:10:f9:7b:ee:1c:d0:8c:
                    9a:50:61:6a:37:46:f3:21:d3:e7:ff:f7:94:ac:25:
                    84:59:2e:84:eb:63:37:d2:d0:31:05:21:77:1c:5d:
                    d4:84:3b:bf:41:40:0e:f3:8c:25:13:45:d3:72:a0:
                    4f:ff:04:14:bd:53:b7:c0:ae:3c:9b:60:22:df:5b:
                    2f:0d:1e:dd:6a:7e:ef:49:e1:46:54:c0:e5:9d:24:
                    37:a3:1f:df:5a:cd:67:9b:a9:9d:a5:6f:7b:dd:28:
                    a3:4b:b2:a1:24:fb:6f:72:06:fd:6d:2e:45:05:cb:
                    0e:46:b7:0c:e5:4b:81:30:c7:de:9f:eb:ea:08:c1:
                    e4:cc:5d:a6:4c:3a:a8:10:45:5d:77:06:38:cc:61:
                    2d:9e:32:40:e4:ba:9d:be:1a:c9:60:41:60:df:16:
                    a2:95:8d:5a:35:e1:dd:ad:f3:8d:ee:15:53:f1:4e:
                    76:9f:ac:5a:3f:1d:81:87:ff:64:45:55:e3:bc:4a:
                    3d:5e:3c:2f:d8:30:e8:85:03:eb:9b:74:63:a9:6c:
                    60:64:12:44:85:cc:5e:ee:4b:54:32:dd:3d:87:0f:
                    6c:b1:08:1a:fc:ac:19:bc:07:f4:f0:b6:e6:58:20:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:79:71:C3:86:AE:D9:8C:84:CE:51:04:8D:95:C6:07:F2:D7:AD:29
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/hnlxw4au2YyEzlEEjZXGB_LXrSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.234.0/24
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.120.191.255
                  77.120.200.0-77.121.13.255
                  77.121.15.0-77.121.26.255
                  77.121.28.0-77.121.30.255
                  77.121.64.0-77.123.191.255
                  77.244.32.0/20
                  82.144.192.0/19
                  93.72.0.0-93.77.159.255
                  93.77.192.0-93.78.63.255
                  93.78.128.0-93.79.127.255
                  95.69.128.0-95.69.232.255
                  95.69.240.0/20
                  109.201.224.0/19
                  141.170.224.0/22
                  141.170.229.0-141.170.236.255
                  141.170.238.0/24
                  141.170.240.0-141.170.251.255
                  188.230.0.0-188.230.91.255
                  188.230.94.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.124.255
                  188.230.126.0/23
                  193.189.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:e2:4c:fa:4d:c2:8b:b7:ea:2b:15:19:62:96:6f:5c:c3:c9:
         dc:9e:4f:4e:7c:06:ca:b2:40:4f:5a:e8:08:ad:a3:61:77:11:
         c1:d6:40:07:53:0b:58:6b:e5:fc:57:71:17:4d:f4:31:fd:4c:
         aa:d9:6f:6f:5a:30:3d:62:c4:f3:04:a5:d5:31:50:76:14:af:
         9e:7a:39:92:a7:17:6d:db:f6:26:e5:2e:14:58:6c:db:8c:43:
         8d:c7:50:92:dc:4a:ab:24:24:c5:04:67:53:74:05:cb:4a:e9:
         aa:de:91:01:d1:ee:af:0b:c8:53:53:06:9a:08:d1:2f:65:8a:
         79:34:ce:04:f5:93:4d:21:c7:49:33:ac:08:e1:2e:d5:e9:84:
         52:f6:72:20:20:82:c9:82:c0:b0:48:e8:b4:83:84:7c:07:45:
         d8:22:e2:8e:4c:1d:9e:6b:53:f9:44:a5:fd:27:6a:28:79:17:
         06:78:5f:40:a9:96:07:cc:e1:3e:ae:85:64:22:89:f1:1b:f5:
         f6:87:fa:fd:05:e8:b8:80:92:3b:45:5d:80:c6:ba:31:36:5e:
         84:4c:37:2b:cf:eb:27:9f:81:4a:e9:d5:d2:60:b7:5d:43:d5:
         f4:d2:cb:ce:4f:92:18:ee:65:83:ea:65:26:c6:13:f3:9d:b2:
         ec:df:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org