Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/c7pepUSbYTKpXIJH8SRdoxFj4nY.roa
File:                     c7pepUSbYTKpXIJH8SRdoxFj4nY.roa (raw, json)
Hash identifier:          swqS8Px9XzgNlv5/D/0x2pW5xkqIYg7cMsgfGzQcIws=
Subject key identifier:   73:BA:5E:A5:44:9B:61:32:A9:5C:82:47:F1:24:5D:A3:11:63:E2:76
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       0182D4123B134ED93499CEC051951930EF05
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/c7pepUSbYTKpXIJH8SRdoxFj4nY.roa
Signing time:             Thu 25 Aug 2022 08:15:40 +0000
ROA not before:           Thu 25 Aug 2022 08:15:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204601
IP address blocks:        45.12.215.0/24 maxlen: 24
                          45.12.214.0/24 maxlen: 24
                          45.87.0.0/22 maxlen: 22
                          45.147.197.0/24 maxlen: 24
                          45.147.196.0/24 maxlen: 24
                          45.147.198.0/24 maxlen: 24
                          45.147.199.0/24 maxlen: 24
                          91.228.56.0/24 maxlen: 24
                          45.12.212.0/24 maxlen: 24
                          45.12.213.0/24 maxlen: 24
                          185.235.128.0/24 maxlen: 24
                          185.235.131.0/24 maxlen: 24
                          185.235.129.0/24 maxlen: 24
                          185.235.130.0/24 maxlen: 24
                          77.220.215.0/24 maxlen: 24
                          77.220.214.0/24 maxlen: 24
                          45.66.8.0/24 maxlen: 24
                          45.66.11.0/24 maxlen: 24
                          45.66.9.0/24 maxlen: 24
                          45.66.10.0/24 maxlen: 24
                          185.241.52.0/24 maxlen: 24
                          185.241.55.0/24 maxlen: 24
                          185.241.53.0/24 maxlen: 24
                          185.241.54.0/24 maxlen: 24
                          77.220.212.0/24 maxlen: 24
                          77.220.213.0/24 maxlen: 24
                          77.220.212.0/22 maxlen: 22
                          91.201.25.0/24 maxlen: 24
                          185.154.12.0/24 maxlen: 24
                          185.154.14.0/24 maxlen: 24
                          185.154.15.0/24 maxlen: 24
                          185.154.13.0/24 maxlen: 24
                          212.86.101.0/24 maxlen: 24
                          212.86.102.0/24 maxlen: 24
                          212.86.108.0/24 maxlen: 24
                          212.86.109.0/24 maxlen: 24
                          212.86.114.0/24 maxlen: 24
                          212.86.115.0/24 maxlen: 24
                          45.132.107.0/24 maxlen: 24
                          45.132.106.0/24 maxlen: 24
                          213.166.68.0/24 maxlen: 24
                          213.166.69.0/24 maxlen: 24
                          213.166.70.0/24 maxlen: 24
                          213.166.71.0/24 maxlen: 24
                          45.91.200.0/24 maxlen: 24
                          178.159.39.0/24 maxlen: 24
                          45.91.201.0/24 maxlen: 24
                          178.159.42.0/24 maxlen: 24
                          178.159.43.0/24 maxlen: 24
                          45.91.202.0/24 maxlen: 24
                          45.91.203.0/24 maxlen: 24
                          45.132.104.0/24 maxlen: 24
                          45.132.105.0/24 maxlen: 24
                          92.119.112.0/24 maxlen: 24
                          92.119.115.0/24 maxlen: 24
                          92.119.113.0/24 maxlen: 24
                          92.119.114.0/24 maxlen: 24
                          185.213.210.0/24 maxlen: 24
                          185.213.208.0/22 maxlen: 22
                          185.213.208.0/24 maxlen: 24
                          185.213.209.0/24 maxlen: 24
                          185.213.211.0/24 maxlen: 24
                          80.85.136.0/21 maxlen: 21
                          185.206.213.0/24 maxlen: 24
                          185.206.212.0/24 maxlen: 24
                          185.206.214.0/24 maxlen: 24
                          185.206.215.0/24 maxlen: 24
                          185.51.246.0/24 maxlen: 24
                          185.51.247.0/24 maxlen: 24
                          185.219.82.0/24 maxlen: 24
                          185.219.80.0/22 maxlen: 22
                          185.219.83.0/24 maxlen: 24
                          185.219.80.0/24 maxlen: 24
                          185.219.81.0/24 maxlen: 24
                          176.57.69.0/24 maxlen: 24
                          176.57.70.0/24 maxlen: 24
                          176.57.68.0/24 maxlen: 24
                          176.57.71.0/24 maxlen: 24
                          103.246.144.0/22 maxlen: 22
                          81.91.176.0/22 maxlen: 22
                          81.91.178.0/24 maxlen: 24
                          178.159.38.0/24 maxlen: 24
                          77.83.172.0/24 maxlen: 24
                          77.83.173.0/24 maxlen: 24
                          77.83.174.0/24 maxlen: 24
                          77.83.175.0/24 maxlen: 24
                          91.211.249.0/24 maxlen: 24
                          91.211.248.0/24 maxlen: 24
                          91.211.250.0/24 maxlen: 24
                          91.211.251.0/24 maxlen: 24
                          46.21.250.0/24 maxlen: 24
                          185.203.240.0/22 maxlen: 22
                          185.203.240.0/24 maxlen: 24
                          185.203.242.0/24 maxlen: 24
                          185.203.243.0/24 maxlen: 24
                          185.203.241.0/24 maxlen: 24
                          45.82.176.0/22 maxlen: 22
                          185.244.216.0/24 maxlen: 24
                          185.244.216.0/22 maxlen: 22
                          185.244.219.0/24 maxlen: 24
                          185.244.217.0/24 maxlen: 24
                          185.244.218.0/24 maxlen: 24
                          45.137.64.0/22 maxlen: 22
                          185.224.132.0/22 maxlen: 22
                          185.224.132.0/24 maxlen: 24
                          185.231.70.0/24 maxlen: 24
                          185.224.134.0/24 maxlen: 24
                          185.224.133.0/24 maxlen: 24
                          185.231.68.0/22 maxlen: 22
                          212.8.246.0/24 maxlen: 24
                          185.224.135.0/24 maxlen: 24
                          185.231.68.0/24 maxlen: 24
                          185.231.71.0/24 maxlen: 24
                          212.8.244.0/24 maxlen: 24
                          185.231.69.0/24 maxlen: 24
                          45.88.106.0/24 maxlen: 24
                          45.88.107.0/24 maxlen: 24
                          212.162.152.0/22 maxlen: 24
                          45.81.224.0/22 maxlen: 22
                          185.250.206.0/24 maxlen: 24
                          185.250.204.0/24 maxlen: 24
                          185.250.205.0/24 maxlen: 24
                          185.250.207.0/24 maxlen: 24
                          45.136.85.0/24 maxlen: 24
                          45.136.84.0/24 maxlen: 24
                          45.136.86.0/24 maxlen: 24
                          45.136.87.0/24 maxlen: 24
                          45.82.68.0/22 maxlen: 22
                          95.215.204.0/22 maxlen: 22
                          185.209.20.0/24 maxlen: 24
                          185.209.21.0/24 maxlen: 24
                          185.209.20.0/22 maxlen: 22
                          185.209.22.0/24 maxlen: 24
                          185.209.23.0/24 maxlen: 24
                          185.107.237.0/24 maxlen: 24
                          45.88.78.0/24 maxlen: 24
                          45.88.76.0/24 maxlen: 24
                          45.88.77.0/24 maxlen: 24
                          45.88.79.0/24 maxlen: 24
                          45.88.104.0/24 maxlen: 24
                          45.88.105.0/24 maxlen: 24
                          85.209.90.0/24 maxlen: 24
                          85.209.88.0/24 maxlen: 24
                          85.209.89.0/24 maxlen: 24
                          85.209.91.0/24 maxlen: 24
                          2a07:5980::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d4:12:3b:13:4e:d9:34:99:ce:c0:51:95:19:30:ef:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Aug 25 08:15:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73ba5ea5449b6132a95c8247f1245da31163e276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4a:11:0d:cc:fb:94:60:19:ae:76:3a:93:41:
                    aa:38:34:26:66:5a:64:c9:ca:b5:28:98:c7:94:fb:
                    3d:c6:59:4a:e3:f1:ac:4e:c5:34:56:e3:da:6b:00:
                    66:3a:84:f3:59:80:91:d2:0e:18:f0:ee:1e:39:1f:
                    ee:10:d5:4f:a2:ec:79:68:84:10:4c:d0:fb:aa:7d:
                    ac:db:c1:46:04:59:bd:ed:db:5e:b8:5d:a0:ed:ee:
                    a6:21:09:d2:76:79:08:b4:9f:ca:d0:a1:3b:c1:95:
                    21:f3:11:40:0e:29:e3:18:fe:43:e8:f2:2f:fc:1f:
                    06:64:f3:30:d2:e4:bc:50:f8:be:17:d1:86:66:45:
                    50:2c:ee:52:e3:0a:21:a6:b6:16:fa:da:76:37:5b:
                    d6:7d:ef:91:d3:2a:91:2a:95:2b:b6:d3:e6:b4:da:
                    79:6b:32:03:25:ef:c0:d3:90:02:72:82:73:f6:9c:
                    71:c5:20:93:84:35:48:df:75:f8:ec:2f:9e:fb:99:
                    04:08:0f:50:50:e3:f4:fb:71:4a:1b:c5:49:29:7e:
                    32:0c:79:64:bb:e6:5a:ed:08:dd:0d:d6:7c:47:02:
                    ab:0f:09:23:c0:dd:d6:e8:f9:9f:9c:2d:74:be:a6:
                    5c:e5:4d:ca:35:d3:75:d8:14:ea:91:48:f7:7a:65:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BA:5E:A5:44:9B:61:32:A9:5C:82:47:F1:24:5D:A3:11:63:E2:76
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/c7pepUSbYTKpXIJH8SRdoxFj4nY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.212.0/22
                  45.66.8.0/22
                  45.81.224.0/22
                  45.82.68.0/22
                  45.82.176.0/22
                  45.87.0.0/22
                  45.88.76.0/22
                  45.88.104.0/22
                  45.91.200.0/22
                  45.132.104.0/22
                  45.136.84.0/22
                  45.137.64.0/22
                  45.147.196.0/22
                  46.21.250.0/24
                  77.83.172.0/22
                  77.220.212.0/22
                  80.85.136.0/21
                  81.91.176.0/22
                  85.209.88.0/22
                  91.201.25.0/24
                  91.211.248.0/22
                  91.228.56.0/24
                  92.119.112.0/22
                  95.215.204.0/22
                  103.246.144.0/22
                  176.57.68.0/22
                  178.159.38.0/23
                  178.159.42.0/23
                  185.51.246.0/23
                  185.107.237.0/24
                  185.154.12.0/22
                  185.203.240.0/22
                  185.206.212.0/22
                  185.209.20.0/22
                  185.213.208.0/22
                  185.219.80.0/22
                  185.224.132.0/22
                  185.231.68.0/22
                  185.235.128.0/22
                  185.241.52.0/22
                  185.244.216.0/22
                  185.250.204.0/22
                  212.8.244.0/24
                  212.8.246.0/24
                  212.86.101.0-212.86.102.255
                  212.86.108.0/23
                  212.86.114.0/23
                  212.162.152.0/22
                  213.166.68.0/22
                IPv6:
                  2a07:5980::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:c6:24:15:41:e3:42:f2:70:9f:c5:1b:84:e8:9d:b1:40:2e:
         4d:ee:0d:1a:11:3a:e7:be:d4:8c:42:10:1d:20:d5:64:44:ee:
         b0:b9:7b:94:ea:5a:2f:85:c7:ed:43:ee:ac:ed:23:02:28:cc:
         f0:86:1f:d4:92:2d:20:c4:72:26:5c:dc:88:2c:7b:b3:c1:ba:
         a9:2d:be:ab:1a:e4:59:49:45:60:89:02:84:38:cf:4d:b9:51:
         6a:ca:71:4c:36:4a:31:a4:d6:36:28:e0:13:67:06:6b:2d:2b:
         8d:7c:0a:3b:83:6d:c6:05:b5:c5:6d:a7:b5:5b:a4:73:65:77:
         67:08:48:71:6f:dc:b8:bc:e5:03:a4:0c:ac:c1:8e:fd:9e:64:
         ba:48:d1:c4:37:d2:8e:dc:68:48:7e:91:18:88:e8:cd:b1:78:
         44:98:25:0d:0f:d0:1b:ef:72:6d:90:2a:8e:7b:8c:72:f2:3d:
         ed:85:a9:7e:13:4b:af:e4:ac:74:49:50:e6:8d:36:66:ba:dd:
         a4:f1:cf:36:43:bf:5f:f0:a1:2b:84:e4:26:fa:e1:0b:38:78:
         23:ce:49:67:49:de:f5:33:80:23:ae:72:13:c4:70:27:e2:3c:
         a3:f6:d2:8f:b8:28:3d:07:a8:6f:fe:73:0b:43:b5:63:78:68:
         d0:48:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:20 2024 by rpki-client on console-ams.rpki-client.org