Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/vD1uD-C4QDnDUG2bFGcxARbR6eE.roa
File:                     vD1uD-C4QDnDUG2bFGcxARbR6eE.roa (raw, json)
Hash identifier:          pciTLoP5AYvY0vMnRmdOJlwxTQqdugsSY6z0oOD/3yM=
Subject key identifier:   BC:3D:6E:0F:E0:B8:40:39:C3:50:6D:9B:14:67:31:01:16:D1:E9:E1
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       01889E58138DCF67C31D0876CCE08FF98BC8
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/vD1uD-C4QDnDUG2bFGcxARbR6eE.roa
Signing time:             Fri 09 Jun 2023 04:09:12 +0000
ROA not before:           Fri 09 Jun 2023 04:09:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25229
IP address blocks:        77.121.17.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          77.121.12.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          93.74.0.0/17 maxlen: 18
                          93.74.0.0/16 maxlen: 17
                          109.201.226.0/24 maxlen: 24
                          109.201.225.0/24 maxlen: 24
                          109.201.224.0/24 maxlen: 24
                          77.120.4.0/24 maxlen: 24
                          93.73.0.0/16 maxlen: 17
                          93.72.0.0/16 maxlen: 17
                          93.72.0.0/15 maxlen: 16
                          95.69.240.0/21 maxlen: 22
                          95.69.250.0/23 maxlen: 24
                          95.69.248.0/22 maxlen: 23
                          77.123.64.0/19 maxlen: 20
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.160.0/19 maxlen: 20
                          141.170.226.0/24 maxlen: 24
                          45.15.234.0/23 maxlen: 23
                          141.170.229.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          95.69.224.0/21 maxlen: 22
                          141.170.236.0/24 maxlen: 24
                          77.123.96.0/21 maxlen: 22
                          77.123.104.0/21 maxlen: 22
                          95.69.128.0/20 maxlen: 21
                          95.69.144.0/21 maxlen: 22
                          77.123.112.0/21 maxlen: 22
                          95.69.152.0/22 maxlen: 23
                          77.123.120.0/21 maxlen: 22
                          77.123.128.0/19 maxlen: 20
                          95.69.156.0/22 maxlen: 23
                          95.69.160.0/19 maxlen: 20
                          77.123.144.0/22 maxlen: 22
                          188.230.28.0/22 maxlen: 23
                          188.230.26.0/23 maxlen: 24
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.78.0/23 maxlen: 24
                          77.122.128.0/17 maxlen: 18
                          188.230.74.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          77.244.32.0/20 maxlen: 21
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.96.0/23 maxlen: 24
                          188.230.118.0/23 maxlen: 24
                          188.230.116.0/23 maxlen: 24
                          188.230.120.0/22 maxlen: 23
                          188.230.126.0/23 maxlen: 24
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.112.0/20 maxlen: 21
                          77.122.0.0/17 maxlen: 18
                          193.189.96.0/23 maxlen: 24
                          77.122.0.0/16 maxlen: 17
                          77.121.192.0/20 maxlen: 21
                          77.121.192.0/19 maxlen: 20
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 22
                          77.120.112.0/22 maxlen: 22
                          77.120.128.0/18 maxlen: 19
                          109.201.232.0/22 maxlen: 23
                          109.201.228.0/22 maxlen: 23
                          109.201.236.0/23 maxlen: 24
                          109.201.240.0/20 maxlen: 21
                          77.121.64.0/21 maxlen: 22
                          77.120.216.0/22 maxlen: 23
                          77.120.224.0/20 maxlen: 21
                          77.120.224.0/22 maxlen: 23
                          77.120.220.0/22 maxlen: 23
                          77.120.232.0/22 maxlen: 23
                          77.120.228.0/22 maxlen: 23
                          77.120.236.0/22 maxlen: 23
                          77.120.240.0/20 maxlen: 21
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          93.79.96.0/21 maxlen: 22
                          93.79.104.0/21 maxlen: 22
                          93.79.112.0/23 maxlen: 24
                          93.79.114.0/23 maxlen: 24
                          93.79.112.0/21 maxlen: 22
                          93.79.120.0/21 maxlen: 22
                          93.79.128.0/17 maxlen: 17
                          93.79.128.0/18 maxlen: 19
                          93.79.64.0/19 maxlen: 20
                          77.120.52.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.60.0/22 maxlen: 23
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/22 maxlen: 23
                          77.120.80.0/20 maxlen: 21
                          77.120.84.0/22 maxlen: 23
                          77.120.88.0/22 maxlen: 23
                          77.120.92.0/22 maxlen: 23
                          77.120.96.0/19 maxlen: 20
                          77.120.0.0/20 maxlen: 21
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          93.79.192.0/18 maxlen: 19
                          93.78.96.0/19 maxlen: 20
                          93.78.128.0/17 maxlen: 18
                          93.78.128.0/18 maxlen: 19
                          93.79.0.0/18 maxlen: 19
                          93.79.0.0/19 maxlen: 20
                          93.79.32.0/19 maxlen: 20
                          93.78.192.0/18 maxlen: 19
                          93.77.192.0/19 maxlen: 20
                          93.77.224.0/19 maxlen: 20
                          93.77.128.0/19 maxlen: 20
                          93.78.32.0/20 maxlen: 21
                          93.78.48.0/21 maxlen: 22
                          93.78.56.0/21 maxlen: 22
                          93.78.0.0/19 maxlen: 20
                          93.77.0.0/19 maxlen: 20
                          93.76.160.0/19 maxlen: 20
                          95.69.232.0/24 maxlen: 24
                          141.170.250.0/23 maxlen: 24
                          141.170.248.0/23 maxlen: 24
                          95.69.253.0/24 maxlen: 24
                          95.69.252.0/24 maxlen: 24
                          95.69.255.0/24 maxlen: 24
                          95.69.254.0/24 maxlen: 24
                          93.76.192.0/18 maxlen: 19
                          93.77.64.0/18 maxlen: 19
                          82.144.192.0/19 maxlen: 20
                          93.77.32.0/20 maxlen: 21
                          93.77.48.0/21 maxlen: 22
                          93.77.56.0/21 maxlen: 22
                          93.76.0.0/19 maxlen: 20
                          93.76.32.0/20 maxlen: 21
                          93.76.48.0/20 maxlen: 21
                          93.75.224.0/19 maxlen: 20
                          93.76.112.0/20 maxlen: 21
                          93.76.128.0/19 maxlen: 20
                          141.170.226.0/23 maxlen: 24
                          141.170.224.0/23 maxlen: 24
                          45.15.234.0/24 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          93.76.64.0/20 maxlen: 21
                          93.76.80.0/21 maxlen: 22
                          93.76.88.0/21 maxlen: 22
                          93.76.96.0/21 maxlen: 22
                          93.76.104.0/21 maxlen: 22
                          93.75.64.0/21 maxlen: 22
                          93.75.72.0/21 maxlen: 22
                          93.75.80.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          93.75.88.0/21 maxlen: 22
                          188.230.76.0/24 maxlen: 24
                          188.230.73.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          93.75.0.0/19 maxlen: 20
                          188.230.7.0/24 maxlen: 24
                          93.75.32.0/19 maxlen: 20
                          93.75.160.0/21 maxlen: 22
                          93.75.168.0/21 maxlen: 22
                          93.75.176.0/21 maxlen: 22
                          93.75.184.0/21 maxlen: 22
                          93.75.192.0/19 maxlen: 20
                          93.75.192.0/18 maxlen: 19
                          93.75.96.0/19 maxlen: 20
                          188.230.98.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          93.75.112.0/20 maxlen: 21
                          188.230.100.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          93.75.128.0/20 maxlen: 21
                          93.75.128.0/19 maxlen: 20
                          188.230.115.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          188.230.124.0/24 maxlen: 24
                          93.75.144.0/20 maxlen: 21
                          93.74.128.0/17 maxlen: 18

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9e:58:13:8d:cf:67:c3:1d:08:76:cc:e0:8f:f9:8b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Jun  9 04:09:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc3d6e0fe0b84039c3506d9b1467310116d1e9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:50:34:60:0c:c7:07:32:58:47:8a:78:60:
                    eb:e6:b4:a1:78:39:40:78:87:b3:2c:ab:4b:07:94:
                    1a:c6:1c:53:0b:c3:9f:77:51:dc:4d:e6:1f:6f:45:
                    26:8e:f1:54:0c:6a:04:2a:53:46:96:b6:61:3b:68:
                    ea:cd:b5:c3:29:62:19:d2:f2:5a:a4:2a:79:79:9e:
                    3a:22:c0:9e:f0:d6:2d:59:69:46:dc:5b:7e:f9:20:
                    2b:42:ca:37:89:41:0e:1d:59:f4:d8:f4:d4:90:62:
                    f5:95:7c:68:d8:7f:81:e2:02:20:70:09:6b:1a:ad:
                    83:72:b5:1b:55:5c:ab:02:c6:3d:19:30:9f:b2:66:
                    e3:1a:2c:19:7d:32:5a:c4:7f:e1:8d:75:31:de:b5:
                    5b:90:93:33:0f:79:83:48:a2:42:0c:35:23:94:c4:
                    69:75:dc:fe:1a:44:14:70:47:f0:55:b2:8d:db:9a:
                    97:0f:7e:7e:e4:5c:4e:f5:0c:26:c9:18:44:c3:88:
                    86:5d:dc:4e:d4:7f:3b:ac:6b:5b:52:f7:d3:20:cc:
                    4c:d1:26:2e:4f:6f:1c:8e:01:f8:8d:f5:76:e1:df:
                    d4:60:97:b4:0c:a2:1c:5c:c6:22:0e:9c:d4:2a:01:
                    df:37:5e:7b:21:93:27:33:44:34:e9:02:85:c4:14:
                    9e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3D:6E:0F:E0:B8:40:39:C3:50:6D:9B:14:67:31:01:16:D1:E9:E1
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/vD1uD-C4QDnDUG2bFGcxARbR6eE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.234.0/23
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.120.191.255
                  77.120.200.0-77.121.13.255
                  77.121.15.0-77.121.26.255
                  77.121.28.0-77.121.30.255
                  77.121.64.0-77.123.191.255
                  77.244.32.0/20
                  82.144.192.0/19
                  93.72.0.0-93.77.159.255
                  93.77.192.0-93.78.63.255
                  93.78.96.0-93.79.255.255
                  95.69.128.0/18
                  95.69.224.0-95.69.232.255
                  95.69.240.0/20
                  109.201.224.0-109.201.226.255
                  109.201.228.0-109.201.237.255
                  109.201.240.0/20
                  141.170.224.0/22
                  141.170.229.0-141.170.236.255
                  141.170.238.0/24
                  141.170.240.0/22
                  141.170.248.0/22
                  188.230.0.0-188.230.91.255
                  188.230.94.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.124.255
                  188.230.126.0/23
                  193.189.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:9d:3b:c1:35:19:d9:e3:a1:bf:f5:53:01:51:a4:42:c4:6b:
         d4:65:17:4b:a7:7a:85:cd:d1:42:a3:51:4e:ac:4b:f0:b3:9d:
         0d:ac:ed:f0:a9:7c:91:ce:58:8d:45:68:65:4c:7e:39:5b:f2:
         93:9b:eb:8a:b3:52:6d:12:d9:03:c7:0c:97:f9:eb:9c:63:dc:
         40:f7:40:c1:cd:ae:58:c2:fb:d7:b7:fc:a5:6e:83:fb:55:54:
         fa:43:ce:1b:e2:5c:09:27:99:60:51:57:f5:ed:5c:ed:8f:91:
         ce:16:1e:2b:60:40:ef:44:2a:93:90:52:94:71:9f:d1:02:e4:
         23:7e:02:7d:d5:0b:9d:84:95:7b:99:4d:a0:11:80:72:8e:d8:
         0f:80:00:56:dd:9e:17:4b:00:08:53:ee:09:89:cf:8d:6a:aa:
         bc:8a:ef:b3:7c:05:73:6c:45:8d:71:b5:6a:80:2b:1b:8c:3c:
         c7:e6:c0:73:ca:96:f6:0a:27:7d:12:41:21:6e:ef:9b:37:15:
         ab:0d:0c:fe:56:a1:78:3f:31:ee:d1:99:da:a7:4f:f2:02:d0:
         5c:f6:b7:12:b6:63:5a:33:49:f7:6a:42:31:b8:70:30:64:c0:
         4c:d8:98:ee:e0:6c:6f:7e:69:97:e7:70:37:ff:c8:9b:b3:1d:
         48:60:3a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org