Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/wbQ6rQgwr-jxHses8_Pyo3HODNQ.roa
File:                     wbQ6rQgwr-jxHses8_Pyo3HODNQ.roa (raw, json)
Hash identifier:          nQScsgPWbmU3xw5mpKm61k7+gRyQuIJdTKdZ4H6reqw=
Subject key identifier:   C1:B4:3A:AD:08:30:AF:E8:F1:1E:C7:AC:F3:F3:F2:A3:71:CE:0C:D4
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       01856D6F79A0DCC0B2C9C76F04AB1C9DA1B1
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/wbQ6rQgwr-jxHses8_Pyo3HODNQ.roa
Signing time:             Sun 01 Jan 2023 13:05:00 +0000
ROA not before:           Sun 01 Jan 2023 13:05:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25229
IP address blocks:        77.121.17.0/24 maxlen: 24
                          77.121.16.0/24 maxlen: 24
                          77.121.15.0/24 maxlen: 24
                          77.121.13.0/24 maxlen: 24
                          77.121.12.0/24 maxlen: 24
                          77.121.19.0/24 maxlen: 24
                          77.121.18.0/24 maxlen: 24
                          77.121.24.0/24 maxlen: 24
                          77.121.23.0/24 maxlen: 24
                          77.121.22.0/24 maxlen: 24
                          77.121.21.0/24 maxlen: 24
                          77.121.20.0/24 maxlen: 24
                          77.121.30.0/24 maxlen: 24
                          77.121.29.0/24 maxlen: 24
                          77.121.28.0/24 maxlen: 24
                          77.121.26.0/24 maxlen: 24
                          77.121.25.0/24 maxlen: 24
                          93.74.0.0/17 maxlen: 18
                          93.74.0.0/16 maxlen: 17
                          77.120.4.0/24 maxlen: 24
                          93.73.0.0/16 maxlen: 17
                          93.72.0.0/16 maxlen: 17
                          93.72.0.0/15 maxlen: 16
                          95.69.240.0/21 maxlen: 22
                          95.69.250.0/23 maxlen: 24
                          95.69.248.0/22 maxlen: 23
                          77.123.64.0/19 maxlen: 20
                          77.123.0.0/18 maxlen: 19
                          77.123.32.0/19 maxlen: 20
                          77.123.160.0/19 maxlen: 20
                          141.170.226.0/24 maxlen: 24
                          45.15.234.0/23 maxlen: 23
                          141.170.229.0/24 maxlen: 24
                          141.170.227.0/24 maxlen: 24
                          141.170.233.0/24 maxlen: 24
                          141.170.232.0/24 maxlen: 24
                          141.170.231.0/24 maxlen: 24
                          141.170.230.0/24 maxlen: 24
                          141.170.238.0/24 maxlen: 24
                          141.170.236.0/24 maxlen: 24
                          77.123.96.0/21 maxlen: 22
                          77.123.104.0/21 maxlen: 22
                          95.69.128.0/20 maxlen: 21
                          95.69.144.0/21 maxlen: 22
                          77.123.112.0/21 maxlen: 22
                          95.69.152.0/22 maxlen: 23
                          77.123.120.0/21 maxlen: 22
                          77.123.128.0/19 maxlen: 20
                          95.69.156.0/22 maxlen: 23
                          95.69.160.0/21 maxlen: 22
                          77.123.144.0/22 maxlen: 22
                          188.230.28.0/22 maxlen: 23
                          188.230.26.0/23 maxlen: 24
                          188.230.32.0/21 maxlen: 22
                          188.230.40.0/21 maxlen: 22
                          188.230.48.0/21 maxlen: 22
                          188.230.56.0/21 maxlen: 22
                          188.230.64.0/21 maxlen: 22
                          188.230.78.0/23 maxlen: 24
                          77.122.128.0/17 maxlen: 18
                          188.230.74.0/23 maxlen: 24
                          188.230.0.0/21 maxlen: 22
                          188.230.0.0/22 maxlen: 23
                          188.230.4.0/23 maxlen: 24
                          188.230.8.0/21 maxlen: 22
                          188.230.16.0/21 maxlen: 22
                          188.230.24.0/23 maxlen: 24
                          77.244.32.0/20 maxlen: 21
                          188.230.80.0/21 maxlen: 22
                          188.230.88.0/22 maxlen: 23
                          188.230.96.0/23 maxlen: 24
                          188.230.118.0/23 maxlen: 24
                          188.230.116.0/23 maxlen: 24
                          188.230.120.0/22 maxlen: 23
                          188.230.126.0/23 maxlen: 24
                          77.121.128.0/20 maxlen: 21
                          77.121.144.0/20 maxlen: 21
                          77.121.160.0/19 maxlen: 20
                          77.121.72.0/21 maxlen: 22
                          77.121.80.0/20 maxlen: 21
                          77.121.96.0/20 maxlen: 21
                          77.121.96.0/19 maxlen: 20
                          77.121.112.0/20 maxlen: 21
                          77.122.0.0/17 maxlen: 18
                          193.189.96.0/23 maxlen: 24
                          77.122.0.0/16 maxlen: 17
                          77.121.192.0/20 maxlen: 21
                          77.121.192.0/19 maxlen: 20
                          77.121.208.0/21 maxlen: 22
                          77.121.216.0/21 maxlen: 22
                          77.121.224.0/19 maxlen: 20
                          77.120.200.0/21 maxlen: 22
                          77.120.208.0/21 maxlen: 22
                          77.120.112.0/22 maxlen: 22
                          77.120.128.0/18 maxlen: 19
                          77.121.64.0/21 maxlen: 22
                          77.120.216.0/22 maxlen: 23
                          77.120.224.0/20 maxlen: 21
                          77.120.224.0/22 maxlen: 23
                          77.120.220.0/22 maxlen: 23
                          77.120.232.0/22 maxlen: 23
                          77.120.228.0/22 maxlen: 23
                          77.120.236.0/22 maxlen: 23
                          77.120.240.0/20 maxlen: 21
                          77.121.0.0/21 maxlen: 22
                          77.121.8.0/22 maxlen: 23
                          93.79.96.0/21 maxlen: 22
                          93.79.104.0/21 maxlen: 22
                          93.79.112.0/23 maxlen: 24
                          93.79.114.0/23 maxlen: 24
                          93.79.112.0/21 maxlen: 22
                          93.79.120.0/21 maxlen: 22
                          93.79.128.0/17 maxlen: 17
                          93.79.128.0/18 maxlen: 19
                          93.79.64.0/19 maxlen: 20
                          77.120.52.0/22 maxlen: 23
                          77.120.64.0/21 maxlen: 22
                          77.120.60.0/22 maxlen: 23
                          77.120.72.0/21 maxlen: 22
                          77.120.80.0/22 maxlen: 23
                          77.120.80.0/20 maxlen: 21
                          77.120.84.0/22 maxlen: 23
                          77.120.88.0/22 maxlen: 23
                          77.120.92.0/22 maxlen: 23
                          77.120.96.0/19 maxlen: 20
                          77.120.0.0/20 maxlen: 21
                          77.120.16.0/20 maxlen: 21
                          77.120.32.0/20 maxlen: 21
                          93.79.192.0/18 maxlen: 19
                          93.78.96.0/19 maxlen: 20
                          93.78.128.0/17 maxlen: 18
                          93.78.128.0/18 maxlen: 19
                          93.79.0.0/18 maxlen: 19
                          93.79.0.0/19 maxlen: 20
                          93.79.32.0/19 maxlen: 20
                          93.78.192.0/18 maxlen: 19
                          93.77.192.0/19 maxlen: 20
                          93.77.224.0/19 maxlen: 20
                          93.77.128.0/19 maxlen: 20
                          93.78.32.0/20 maxlen: 21
                          93.78.48.0/21 maxlen: 22
                          93.78.56.0/21 maxlen: 22
                          93.78.0.0/19 maxlen: 20
                          93.77.0.0/19 maxlen: 20
                          93.76.160.0/19 maxlen: 20
                          95.69.232.0/24 maxlen: 24
                          141.170.250.0/23 maxlen: 24
                          141.170.248.0/23 maxlen: 24
                          95.69.253.0/24 maxlen: 24
                          95.69.252.0/24 maxlen: 24
                          95.69.255.0/24 maxlen: 24
                          95.69.254.0/24 maxlen: 24
                          93.76.192.0/18 maxlen: 19
                          93.77.64.0/18 maxlen: 19
                          82.144.192.0/19 maxlen: 20
                          93.77.32.0/20 maxlen: 21
                          93.77.48.0/21 maxlen: 22
                          93.77.56.0/21 maxlen: 22
                          93.76.0.0/19 maxlen: 20
                          93.76.32.0/20 maxlen: 21
                          93.76.48.0/20 maxlen: 21
                          93.75.224.0/19 maxlen: 20
                          93.76.112.0/20 maxlen: 21
                          93.76.128.0/19 maxlen: 20
                          141.170.226.0/23 maxlen: 24
                          141.170.224.0/23 maxlen: 24
                          45.15.234.0/24 maxlen: 24
                          141.170.234.0/23 maxlen: 24
                          141.170.240.0/22 maxlen: 23
                          93.76.64.0/20 maxlen: 21
                          93.76.80.0/21 maxlen: 22
                          93.76.88.0/21 maxlen: 22
                          93.76.96.0/21 maxlen: 22
                          93.76.104.0/21 maxlen: 22
                          93.75.64.0/21 maxlen: 22
                          93.75.72.0/21 maxlen: 22
                          93.75.80.0/21 maxlen: 22
                          188.230.71.0/24 maxlen: 24
                          188.230.77.0/24 maxlen: 24
                          93.75.88.0/21 maxlen: 22
                          188.230.76.0/24 maxlen: 24
                          188.230.73.0/24 maxlen: 24
                          188.230.72.0/24 maxlen: 24
                          93.75.0.0/19 maxlen: 20
                          188.230.7.0/24 maxlen: 24
                          93.75.32.0/19 maxlen: 20
                          93.75.160.0/21 maxlen: 22
                          93.75.168.0/21 maxlen: 22
                          93.75.176.0/21 maxlen: 22
                          93.75.184.0/21 maxlen: 22
                          93.75.192.0/19 maxlen: 20
                          93.75.192.0/18 maxlen: 19
                          93.75.96.0/19 maxlen: 20
                          188.230.98.0/24 maxlen: 24
                          188.230.95.0/24 maxlen: 24
                          188.230.94.0/24 maxlen: 24
                          188.230.105.0/24 maxlen: 24
                          188.230.104.0/24 maxlen: 24
                          188.230.103.0/24 maxlen: 24
                          188.230.102.0/24 maxlen: 24
                          93.75.112.0/20 maxlen: 21
                          188.230.100.0/24 maxlen: 24
                          188.230.99.0/24 maxlen: 24
                          188.230.112.0/24 maxlen: 24
                          188.230.111.0/24 maxlen: 24
                          188.230.109.0/24 maxlen: 24
                          188.230.108.0/24 maxlen: 24
                          188.230.107.0/24 maxlen: 24
                          188.230.106.0/24 maxlen: 24
                          93.75.128.0/20 maxlen: 21
                          93.75.128.0/19 maxlen: 20
                          188.230.115.0/24 maxlen: 24
                          188.230.113.0/24 maxlen: 24
                          188.230.124.0/24 maxlen: 24
                          93.75.144.0/20 maxlen: 21
                          93.74.128.0/17 maxlen: 18

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:6f:79:a0:dc:c0:b2:c9:c7:6f:04:ab:1c:9d:a1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Jan  1 13:05:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1b43aad0830afe8f11ec7acf3f3f2a371ce0cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:ef:38:00:f6:09:07:4d:2a:5f:5d:c5:ec:
                    dd:b5:c5:ec:9f:b0:ac:11:b8:62:f8:cb:d3:e8:65:
                    8a:74:30:ef:91:d0:91:1e:ae:0b:33:2f:8d:6c:4a:
                    54:27:10:72:19:fb:37:1a:c9:e3:60:e9:a0:d8:c6:
                    76:01:fe:fe:2d:b5:3d:7f:32:b6:1d:20:a0:b1:bf:
                    22:df:8b:3e:64:e4:b5:ec:1f:0f:2f:b0:93:16:4d:
                    65:19:92:ef:b0:97:e2:46:64:2f:88:db:96:28:c4:
                    06:b3:e8:08:0c:7e:6c:b4:84:a3:14:37:4d:97:f2:
                    9a:58:63:75:bf:28:1c:f9:d2:20:9e:b9:23:2d:1e:
                    c6:8c:fe:6c:ab:7d:0f:cd:49:17:57:ae:63:6b:df:
                    af:7b:e8:ef:d8:5b:ed:32:50:31:8a:72:f0:c3:b9:
                    b2:be:78:6d:6b:c2:2b:8d:3e:c1:eb:ed:fb:17:99:
                    6c:78:9d:91:d9:ba:eb:60:3d:ae:53:8e:97:16:74:
                    2a:04:65:f9:80:a4:ef:56:3d:ca:94:90:31:98:bb:
                    be:72:63:70:83:2b:03:74:3e:0e:ca:83:90:c0:49:
                    54:1e:3f:0b:35:c4:d9:18:eb:9a:e4:36:c8:d4:80:
                    95:53:78:da:54:b9:bd:1c:b4:8f:16:cf:e0:cf:0c:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:3A:AD:08:30:AF:E8:F1:1E:C7:AC:F3:F3:F2:A3:71:CE:0C:D4
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/wbQ6rQgwr-jxHses8_Pyo3HODNQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.234.0/23
                  77.120.0.0-77.120.47.255
                  77.120.52.0/22
                  77.120.60.0-77.120.191.255
                  77.120.200.0-77.121.13.255
                  77.121.15.0-77.121.26.255
                  77.121.28.0-77.121.30.255
                  77.121.64.0-77.123.191.255
                  77.244.32.0/20
                  82.144.192.0/19
                  93.72.0.0-93.77.159.255
                  93.77.192.0-93.78.63.255
                  93.78.96.0-93.79.255.255
                  95.69.128.0-95.69.167.255
                  95.69.232.0/24
                  95.69.240.0/20
                  141.170.224.0/22
                  141.170.229.0-141.170.236.255
                  141.170.238.0/24
                  141.170.240.0/22
                  141.170.248.0/22
                  188.230.0.0-188.230.91.255
                  188.230.94.0-188.230.100.255
                  188.230.102.0-188.230.109.255
                  188.230.111.0-188.230.113.255
                  188.230.115.0-188.230.124.255
                  188.230.126.0/23
                  193.189.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:1d:9e:ad:03:ba:77:36:7c:12:3b:18:44:c5:29:1b:5f:38:
         0a:be:84:df:41:d8:b6:44:4b:df:84:e0:2f:b9:11:6a:46:e4:
         ab:ab:fc:32:9c:57:da:05:a4:88:bb:c4:21:22:50:73:2c:bb:
         8f:9b:3e:a5:d6:ec:68:9e:e9:c1:9f:19:6e:aa:4f:cf:0c:69:
         70:7f:3a:2d:85:f4:20:fb:d3:65:c2:03:2c:95:ad:f4:4a:41:
         22:93:23:fd:dd:31:b7:dd:d8:e1:ba:93:47:31:78:8e:f6:cd:
         a0:e5:12:58:2e:48:cb:02:a8:33:09:bd:2a:86:38:c8:15:9d:
         ef:dc:d6:ac:2d:90:49:4c:34:f0:fc:e1:75:65:5a:16:2a:e8:
         2c:2b:d3:2e:3d:d6:b2:2d:d4:41:86:fc:f1:0d:30:30:b2:e0:
         52:21:41:22:6f:c2:04:8f:9b:33:64:0f:ec:d6:16:22:71:80:
         06:eb:0e:e6:75:a7:f6:c3:55:07:93:77:0f:7c:ae:75:04:c6:
         83:ce:b7:7e:cd:7c:70:df:fe:f9:e1:e2:63:53:89:ab:6e:1e:
         0e:76:15:20:75:71:d6:36:dd:ce:98:1c:17:08:a3:b6:bf:c5:
         97:4a:2f:b8:07:2a:e2:75:9d:a5:8e:5a:cf:61:6d:c6:99:e1:
         ef:3e:d3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:35 2024 by rpki-client on console-fra.rpki-client.org