Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/79-LnAm12MwMYA2PIWiIhiju7Q0.roa
File:                     79-LnAm12MwMYA2PIWiIhiju7Q0.roa (raw, json)
Hash identifier:          P1rP5lEKlSC8J4hz65BS3hPhhUrUdywiNab+LqdBes0=
Subject key identifier:   EF:DF:8B:9C:09:B5:D8:CC:0C:60:0D:8F:21:68:88:86:28:EE:ED:0D
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       06A0D0FB
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/79-LnAm12MwMYA2PIWiIhiju7Q0.roa
Signing time:             Tue 29 Mar 2022 08:12:49 +0000
ROA not before:           Tue 29 Mar 2022 08:12:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204601
IP address blocks:        45.12.215.0/24 maxlen: 24
                          45.12.214.0/24 maxlen: 24
                          45.87.0.0/22 maxlen: 22
                          45.147.197.0/24 maxlen: 24
                          45.147.196.0/24 maxlen: 24
                          45.147.198.0/24 maxlen: 24
                          45.147.199.0/24 maxlen: 24
                          45.12.212.0/24 maxlen: 24
                          45.12.213.0/24 maxlen: 24
                          185.235.128.0/24 maxlen: 24
                          185.235.131.0/24 maxlen: 24
                          185.235.129.0/24 maxlen: 24
                          185.235.130.0/24 maxlen: 24
                          77.220.215.0/24 maxlen: 24
                          77.220.214.0/24 maxlen: 24
                          45.66.8.0/24 maxlen: 24
                          45.66.11.0/24 maxlen: 24
                          45.66.9.0/24 maxlen: 24
                          45.66.10.0/24 maxlen: 24
                          185.241.52.0/24 maxlen: 24
                          185.241.55.0/24 maxlen: 24
                          185.241.53.0/24 maxlen: 24
                          185.241.54.0/24 maxlen: 24
                          77.220.212.0/24 maxlen: 24
                          77.220.213.0/24 maxlen: 24
                          77.220.212.0/22 maxlen: 22
                          91.201.25.0/24 maxlen: 24
                          185.154.12.0/24 maxlen: 24
                          185.154.14.0/24 maxlen: 24
                          185.154.15.0/24 maxlen: 24
                          185.154.13.0/24 maxlen: 24
                          212.86.101.0/24 maxlen: 24
                          212.86.102.0/24 maxlen: 24
                          212.86.108.0/24 maxlen: 24
                          212.86.109.0/24 maxlen: 24
                          212.86.114.0/24 maxlen: 24
                          212.86.115.0/24 maxlen: 24
                          45.132.107.0/24 maxlen: 24
                          45.132.106.0/24 maxlen: 24
                          213.166.68.0/24 maxlen: 24
                          213.166.69.0/24 maxlen: 24
                          213.166.70.0/24 maxlen: 24
                          213.166.71.0/24 maxlen: 24
                          45.91.200.0/24 maxlen: 24
                          178.159.39.0/24 maxlen: 24
                          45.91.201.0/24 maxlen: 24
                          178.159.42.0/24 maxlen: 24
                          178.159.43.0/24 maxlen: 24
                          45.91.202.0/24 maxlen: 24
                          45.91.203.0/24 maxlen: 24
                          45.132.104.0/24 maxlen: 24
                          45.132.105.0/24 maxlen: 24
                          92.119.112.0/24 maxlen: 24
                          92.119.115.0/24 maxlen: 24
                          92.119.113.0/24 maxlen: 24
                          92.119.114.0/24 maxlen: 24
                          185.213.210.0/24 maxlen: 24
                          185.213.208.0/22 maxlen: 22
                          185.213.208.0/24 maxlen: 24
                          185.213.209.0/24 maxlen: 24
                          185.213.211.0/24 maxlen: 24
                          80.85.136.0/21 maxlen: 21
                          185.206.213.0/24 maxlen: 24
                          185.206.212.0/24 maxlen: 24
                          185.206.214.0/24 maxlen: 24
                          185.206.215.0/24 maxlen: 24
                          185.51.246.0/24 maxlen: 24
                          185.51.247.0/24 maxlen: 24
                          185.219.82.0/24 maxlen: 24
                          185.219.80.0/22 maxlen: 22
                          185.219.83.0/24 maxlen: 24
                          185.219.80.0/24 maxlen: 24
                          185.219.81.0/24 maxlen: 24
                          176.57.69.0/24 maxlen: 24
                          176.57.70.0/24 maxlen: 24
                          176.57.68.0/24 maxlen: 24
                          176.57.71.0/24 maxlen: 24
                          103.246.144.0/22 maxlen: 22
                          81.91.176.0/22 maxlen: 22
                          81.91.178.0/24 maxlen: 24
                          178.159.38.0/24 maxlen: 24
                          77.83.172.0/24 maxlen: 24
                          77.83.173.0/24 maxlen: 24
                          77.83.174.0/24 maxlen: 24
                          77.83.175.0/24 maxlen: 24
                          91.211.249.0/24 maxlen: 24
                          91.211.248.0/24 maxlen: 24
                          91.211.250.0/24 maxlen: 24
                          91.211.251.0/24 maxlen: 24
                          46.21.250.0/24 maxlen: 24
                          185.203.240.0/22 maxlen: 22
                          185.203.240.0/24 maxlen: 24
                          185.203.242.0/24 maxlen: 24
                          185.203.243.0/24 maxlen: 24
                          185.203.241.0/24 maxlen: 24
                          45.82.176.0/22 maxlen: 22
                          185.244.216.0/24 maxlen: 24
                          185.244.216.0/22 maxlen: 22
                          185.244.219.0/24 maxlen: 24
                          185.244.217.0/24 maxlen: 24
                          185.244.218.0/24 maxlen: 24
                          45.137.64.0/22 maxlen: 22
                          185.224.132.0/22 maxlen: 22
                          185.224.132.0/24 maxlen: 24
                          185.231.70.0/24 maxlen: 24
                          185.224.134.0/24 maxlen: 24
                          185.224.133.0/24 maxlen: 24
                          185.231.68.0/22 maxlen: 22
                          212.8.246.0/24 maxlen: 24
                          185.224.135.0/24 maxlen: 24
                          185.231.68.0/24 maxlen: 24
                          185.231.71.0/24 maxlen: 24
                          212.8.244.0/24 maxlen: 24
                          185.231.69.0/24 maxlen: 24
                          45.88.106.0/24 maxlen: 24
                          45.88.107.0/24 maxlen: 24
                          212.162.152.0/22 maxlen: 24
                          45.81.224.0/22 maxlen: 22
                          185.250.206.0/24 maxlen: 24
                          185.250.204.0/24 maxlen: 24
                          185.250.205.0/24 maxlen: 24
                          185.250.207.0/24 maxlen: 24
                          45.136.85.0/24 maxlen: 24
                          45.136.84.0/24 maxlen: 24
                          45.136.86.0/24 maxlen: 24
                          45.136.87.0/24 maxlen: 24
                          45.82.68.0/22 maxlen: 22
                          95.215.204.0/22 maxlen: 22
                          185.209.20.0/24 maxlen: 24
                          185.209.21.0/24 maxlen: 24
                          185.209.20.0/22 maxlen: 22
                          185.209.22.0/24 maxlen: 24
                          185.209.23.0/24 maxlen: 24
                          185.107.237.0/24 maxlen: 24
                          45.88.78.0/24 maxlen: 24
                          45.88.76.0/24 maxlen: 24
                          45.88.77.0/24 maxlen: 24
                          45.88.79.0/24 maxlen: 24
                          45.88.104.0/24 maxlen: 24
                          45.88.105.0/24 maxlen: 24
                          85.209.90.0/24 maxlen: 24
                          85.209.88.0/24 maxlen: 24
                          85.209.89.0/24 maxlen: 24
                          85.209.91.0/24 maxlen: 24
                          2a07:5980::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111202555 (0x6a0d0fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Mar 29 08:12:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efdf8b9c09b5d8cc0c600d8f2168888628eeed0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b9:d6:b2:0b:6c:63:23:bf:6c:41:01:6a:ba:
                    35:3d:46:63:6f:36:00:d4:a6:26:20:16:05:d8:ab:
                    a5:73:ed:46:c4:b1:cb:f5:4b:5e:4a:45:80:0c:e0:
                    72:e3:2b:bb:f4:dc:1a:c3:ae:5c:e6:08:db:5f:c4:
                    8c:6d:b3:59:95:a8:fd:f3:94:30:99:a0:20:b5:4e:
                    16:62:ee:01:c8:9e:fa:e5:71:c7:02:35:23:6e:52:
                    a7:b2:b2:0a:34:28:0a:4a:46:ae:64:6e:a5:4c:19:
                    ef:eb:a3:45:96:26:da:72:a6:c9:52:ce:68:40:45:
                    e1:29:8c:bc:c6:a2:6d:dd:e6:93:9a:fd:bc:e7:70:
                    f1:bc:a5:e5:b7:81:5f:41:81:98:82:e5:2f:8f:b3:
                    bd:9c:fc:2a:bf:fd:9c:5d:2a:8d:99:1e:d8:90:38:
                    0f:31:77:fe:c7:1f:35:c6:4f:c4:ce:1e:31:a2:18:
                    32:65:3e:22:29:fa:37:78:83:de:80:6e:6f:24:ea:
                    43:4e:a3:23:68:6f:79:d9:aa:c4:d9:3e:47:59:92:
                    61:15:c0:0c:18:8a:88:38:6a:25:80:26:08:c1:d4:
                    9a:ac:31:34:56:52:f8:fc:11:a9:fa:44:a8:5d:09:
                    b9:0b:f9:ad:16:98:5f:f8:57:1f:8c:67:36:ed:f7:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:8B:9C:09:B5:D8:CC:0C:60:0D:8F:21:68:88:86:28:EE:ED:0D
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/79-LnAm12MwMYA2PIWiIhiju7Q0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.212.0/22
                  45.66.8.0/22
                  45.81.224.0/22
                  45.82.68.0/22
                  45.82.176.0/22
                  45.87.0.0/22
                  45.88.76.0/22
                  45.88.104.0/22
                  45.91.200.0/22
                  45.132.104.0/22
                  45.136.84.0/22
                  45.137.64.0/22
                  45.147.196.0/22
                  46.21.250.0/24
                  77.83.172.0/22
                  77.220.212.0/22
                  80.85.136.0/21
                  81.91.176.0/22
                  85.209.88.0/22
                  91.201.25.0/24
                  91.211.248.0/22
                  92.119.112.0/22
                  95.215.204.0/22
                  103.246.144.0/22
                  176.57.68.0/22
                  178.159.38.0/23
                  178.159.42.0/23
                  185.51.246.0/23
                  185.107.237.0/24
                  185.154.12.0/22
                  185.203.240.0/22
                  185.206.212.0/22
                  185.209.20.0/22
                  185.213.208.0/22
                  185.219.80.0/22
                  185.224.132.0/22
                  185.231.68.0/22
                  185.235.128.0/22
                  185.241.52.0/22
                  185.244.216.0/22
                  185.250.204.0/22
                  212.8.244.0/24
                  212.8.246.0/24
                  212.86.101.0-212.86.102.255
                  212.86.108.0/23
                  212.86.114.0/23
                  212.162.152.0/22
                  213.166.68.0/22
                IPv6:
                  2a07:5980::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:af:9b:e9:79:cb:4d:57:47:87:cf:81:08:aa:a9:23:36:67:
         c4:fd:50:c7:0e:7a:80:ab:2d:51:f6:28:8b:81:64:8f:5c:bf:
         69:27:f1:0e:ec:de:56:c5:c4:80:f5:03:84:b6:6a:07:f9:6e:
         04:07:84:ee:45:5f:0b:ab:be:a7:60:c8:b1:66:2d:3d:57:0e:
         ef:f2:40:3d:21:00:3d:09:37:be:e7:9b:6b:a7:ec:8e:da:b4:
         fc:c9:cc:bf:ed:01:86:36:c7:d6:c1:0f:08:31:dd:28:01:cb:
         28:40:80:52:75:46:af:0e:51:86:ef:bf:15:e3:ff:06:31:b0:
         5c:c8:f6:ed:a1:da:86:cb:87:69:b5:74:7e:d0:4d:be:3d:66:
         35:b2:f6:68:3e:98:44:ce:28:2f:ec:ee:e7:fb:91:0c:5d:a5:
         41:09:d9:78:a7:fb:35:96:cf:3b:b9:8c:93:e1:05:d3:0e:1a:
         82:33:7b:d2:27:81:1e:8e:6d:98:2c:31:77:fd:66:7d:51:77:
         fe:93:0e:e1:bb:76:51:26:07:8f:84:28:b6:fc:29:a2:55:5b:
         03:6d:62:a1:ce:c8:8f:e8:e0:d8:89:e9:c9:17:74:60:e4:8d:
         d2:db:de:e8:bb:4f:cd:02:82:06:5d:88:fe:29:cb:73:7c:d8:
         88:33:3c:b6
-----BEGIN CERTIFICATE-----
MIIGKjCCBRKgAwIBAgIEBqDQ+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZmNhZDg5ZGYxYmY5OWEzNmYyOTBjYzNlZjBmMWU3YjRkMDI3NTMzMB4XDTIyMDMy
OTA4MTI0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWZkZjhiOWMwOWI1
ZDhjYzBjNjAwZDhmMjE2ODg4ODYyOGVlZWQwZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJS51rILbGMjv2xBAWq6NT1GY282ANSmJiAWBdirpXPtRsSx
y/VLXkpFgAzgcuMru/TcGsOuXOYI21/EjG2zWZWo/fOUMJmgILVOFmLuAcie+uVx
xwI1I25Sp7KyCjQoCkpGrmRupUwZ7+ujRZYm2nKmyVLOaEBF4SmMvMaibd3mk5r9
vOdw8byl5beBX0GBmILlL4+zvZz8Kr/9nF0qjZke2JA4DzF3/scfNcZPxM4eMaIY
MmU+Iin6N3iD3oBubyTqQ06jI2hvedmqxNk+R1mSYRXADBiKiDhqJYAmCMHUmqwx
NFZS+PwRqfpEqF0JuQv5rRaYX/hXH4xnNu33LYUCAwEAAaOCA0QwggNAMB0GA1Ud
DgQWBBTv34ucCbXYzAxgDY8haIiGKO7tDTAfBgNVHSMEGDAWgBR/ytid8b+Zo28p
DMPvDx57TQJ1MzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Y4clluZkdfbWFOdktRekQ3dzhlZTAwQ2RUTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTUvOWY4YjE2LTI4NGYtNDUxMi1iM2RjLTAxNWQ5ZjFiNGI1MC8x
Lzc5LUxuQW0xMk13TVlBMlBJV2lJaGlqdTdRMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUv
OWY4YjE2LTI4NGYtNDUxMi1iM2RjLTAxNWQ5ZjFiNGI1MC8xL2Y4clluZkdfbWFO
dktRekQ3dzhlZTAwQ2RUTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AVgGCCsGAQUFBwEHAQH/BIIBRzCCAUMwggEwBAIAATCCASgDBAItDNQDBAItQggD
BAItUeADBAItUkQDBAItUrADBAItVwADBAItWEwDBAItWGgDBAItW8gDBAIthGgD
BAItiFQDBAItiUADBAItk8QDBAAuFfoDBAJNU6wDBAJN3NQDBANQVYgDBAJRW7AD
BAJV0VgDBABbyRkDBAJb0/gDBAJcd3ADBAJf18wDBAJn9pADBAKwOUQDBAGynyYD
BAGynyoDBAG5M/YDBAC5a+0DBAK5mgwDBAK5y/ADBAK5ztQDBAK50RQDBAK51dAD
BAK521ADBAK54IQDBAK550QDBAK564ADBAK58TQDBAK59NgDBAK5+swDBADUCPQD
BADUCPYwDAMEANRWZQMEANRWZgMEAdRWbAMEAdRWcgMEAtSimAMEAtWmRDANBAIA
AjAHAwUDKgdZgDANBgkqhkiG9w0BAQsFAAOCAQEAka+b6XnLTVdHh8+BCKqpIzZn
xP1Qxw56gKstUfYoi4Fkj1y/aSfxDuzeVsXEgPUDhLZqB/luBAeE7kVfC6u+p2DI
sWYtPVcO7/JAPSEAPQk3vueba6fsjtq0/MnMv+0BhjbH1sEPCDHdKAHLKECAUnVG
rw5Rhu+/FeP/BjGwXMj27aHahsuHabV0ftBNvj1mNbL2aD6YRM4oL+zu5/uRDF2l
QQnZeKf7NZbPO7mMk+EF0w4agjN70ieBHo5tmCwxd/1mfVF3/pMO4bt2USYHj4Qo
tvwpolVbA21ioc7Ij+jg2InpyRd0YOSN0tve6LtPzQKCBl2I/inLc3zYiDM8tg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:20 2024 by rpki-client on console-ams.rpki-client.org