Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/0gR7HsS2vMR86PYMWYRjUW-rzZc.roa
File:                     0gR7HsS2vMR86PYMWYRjUW-rzZc.roa (raw, json)
Hash identifier:          B52LvzyLG5VnBHX+LIs6UpQjlQ0tvbV+pVq4tVkaqkg=
Subject key identifier:   D2:04:7B:1E:C4:B6:BC:C4:7C:E8:F6:0C:59:84:63:51:6F:AB:CD:97
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       11C514E0
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/0gR7HsS2vMR86PYMWYRjUW-rzZc.roa
Signing time:             Tue 08 Mar 2022 08:29:08 +0000
ROA not before:           Tue 08 Mar 2022 08:29:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24631
IP address blocks:        217.66.197.0/24 maxlen: 24
                          217.66.203.0/24 maxlen: 24
                          217.66.205.0/24 maxlen: 24
                          217.66.209.0/24 maxlen: 24
                          217.66.210.0/24 maxlen: 24
                          217.66.212.0/24 maxlen: 24
                          79.174.166.0/24 maxlen: 24
                          217.66.216.0/24 maxlen: 24
                          79.174.165.0/24 maxlen: 24
                          89.235.68.0/22 maxlen: 24
                          217.66.218.0/24 maxlen: 24
                          79.174.162.0/24 maxlen: 24
                          79.174.164.0/24 maxlen: 24
                          217.66.223.0/24 maxlen: 24
                          89.235.78.0/23 maxlen: 23
                          89.235.72.0/21 maxlen: 24
                          217.66.220.0/24 maxlen: 24
                          78.154.32.0/19 maxlen: 19
                          213.195.0.0/19 maxlen: 19
                          185.208.148.0/22 maxlen: 22
                          185.45.188.0/22 maxlen: 22
                          217.146.214.0/24 maxlen: 24
                          217.146.221.0/24 maxlen: 24
                          46.32.0.0/22 maxlen: 22
                          46.32.0.0/21 maxlen: 21
                          46.32.0.0/19 maxlen: 24
                          46.32.8.0/21 maxlen: 21
                          46.32.6.0/23 maxlen: 23
                          46.32.10.0/23 maxlen: 23
                          46.32.16.0/20 maxlen: 24
                          87.247.180.0/22 maxlen: 23
                          176.221.66.0/23 maxlen: 23
                          176.221.68.0/22 maxlen: 22
                          109.201.18.0/24 maxlen: 24
                          109.201.19.0/24 maxlen: 24
                          109.201.21.0/24 maxlen: 24
                          109.201.27.0/24 maxlen: 24
                          185.12.63.0/24 maxlen: 24
                          185.12.60.0/24 maxlen: 24
                          185.153.184.0/22 maxlen: 22
                          185.12.62.0/24 maxlen: 24
                          185.133.152.0/24 maxlen: 24
                          185.133.154.0/24 maxlen: 24
                          178.248.40.0/22 maxlen: 22
                          178.248.40.0/21 maxlen: 21
                          178.248.44.0/22 maxlen: 22
                          176.221.64.0/21 maxlen: 21
                          109.201.11.0/24 maxlen: 24
                          80.253.129.0/24 maxlen: 24
                          80.253.136.0/24 maxlen: 24
                          80.253.133.0/24 maxlen: 24
                          80.253.135.0/24 maxlen: 24
                          80.253.145.0/24 maxlen: 24
                          80.253.148.0/24 maxlen: 24
                          80.253.152.0/24 maxlen: 24
                          80.253.147.0/24 maxlen: 24
                          80.253.151.0/24 maxlen: 24
                          79.132.216.0/24 maxlen: 24
                          79.132.218.0/24 maxlen: 24
                          5.200.66.0/24 maxlen: 24
                          5.200.70.0/24 maxlen: 24
                          5.200.71.0/24 maxlen: 24
                          79.132.205.0/24 maxlen: 24
                          79.132.211.0/24 maxlen: 24
                          79.132.212.0/24 maxlen: 24
                          78.158.167.0/24 maxlen: 24
                          80.71.112.0/23 maxlen: 23
                          185.4.16.0/22 maxlen: 22
                          80.71.112.0/20 maxlen: 20
                          80.71.116.0/22 maxlen: 22
                          80.71.120.0/23 maxlen: 23
                          80.71.120.0/21 maxlen: 21
                          80.71.120.0/22 maxlen: 22
                          185.104.229.0/24 maxlen: 24
                          185.70.60.0/22 maxlen: 22
                          78.111.8.0/21 maxlen: 21
                          78.111.8.0/23 maxlen: 23
                          78.111.10.0/23 maxlen: 23
                          81.29.240.0/20 maxlen: 20
                          81.29.244.0/22 maxlen: 22
                          81.29.248.0/23 maxlen: 23
                          81.29.252.0/23 maxlen: 23
                          185.82.164.0/23 maxlen: 23
                          185.82.164.0/22 maxlen: 22
                          31.217.208.0/21 maxlen: 21
                          46.34.190.0/24 maxlen: 24
                          188.75.65.0/24 maxlen: 24
                          188.75.71.0/24 maxlen: 24
                          188.75.84.0/24 maxlen: 24
                          188.75.88.0/24 maxlen: 24
                          185.101.228.0/24 maxlen: 24
                          185.101.231.0/24 maxlen: 24
                          188.75.98.0/24 maxlen: 24
                          188.75.93.0/24 maxlen: 24
                          188.75.95.0/24 maxlen: 24
                          188.75.104.0/24 maxlen: 24
                          188.75.105.0/24 maxlen: 24
                          188.75.106.0/24 maxlen: 24
                          188.75.107.0/24 maxlen: 24
                          188.75.109.0/24 maxlen: 24
                          86.109.34.0/23 maxlen: 23
                          86.109.36.0/23 maxlen: 23
                          86.109.32.0/19 maxlen: 19
                          188.75.124.0/24 maxlen: 24
                          86.109.44.0/23 maxlen: 23
                          86.109.46.0/23 maxlen: 23
                          188.75.127.0/24 maxlen: 24
                          86.109.48.0/20 maxlen: 20
                          86.109.48.0/21 maxlen: 21
                          185.142.232.0/24 maxlen: 24
                          86.109.56.0/23 maxlen: 23
                          86.109.58.0/23 maxlen: 23
                          86.109.60.0/22 maxlen: 22
                          185.40.240.0/22 maxlen: 22
                          217.66.192.0/20 maxlen: 20
                          217.66.192.0/19 maxlen: 19
                          217.66.206.0/23 maxlen: 23
                          217.66.212.0/22 maxlen: 22
                          79.174.160.0/21 maxlen: 21
                          89.235.71.0/24 maxlen: 24
                          217.66.216.0/22 maxlen: 22
                          89.235.70.0/24 maxlen: 24
                          217.66.220.0/22 maxlen: 22
                          89.235.76.0/24 maxlen: 24
                          185.208.149.0/24 maxlen: 24
                          185.208.151.0/24 maxlen: 24
                          185.208.148.0/24 maxlen: 24
                          185.208.150.0/24 maxlen: 24
                          217.146.208.0/20 maxlen: 20
                          46.32.2.0/24 maxlen: 24
                          46.32.4.0/24 maxlen: 24
                          46.32.3.0/24 maxlen: 24
                          46.32.6.0/24 maxlen: 24
                          46.32.8.0/24 maxlen: 24
                          46.32.7.0/24 maxlen: 24
                          46.32.12.0/24 maxlen: 24
                          46.32.13.0/24 maxlen: 24
                          46.32.15.0/24 maxlen: 24
                          46.32.20.0/24 maxlen: 24
                          46.32.21.0/24 maxlen: 24
                          46.32.23.0/24 maxlen: 24
                          46.32.26.0/24 maxlen: 24
                          46.32.30.0/24 maxlen: 24
                          87.247.179.0/24 maxlen: 24
                          46.32.25.0/24 maxlen: 24
                          46.32.27.0/24 maxlen: 24
                          176.221.68.0/24 maxlen: 24
                          176.221.70.0/24 maxlen: 24
                          109.201.18.0/23 maxlen: 23
                          185.12.60.0/23 maxlen: 23
                          185.153.185.0/24 maxlen: 24
                          185.12.60.0/22 maxlen: 22
                          185.133.152.0/22 maxlen: 22
                          109.201.0.0/19 maxlen: 24
                          178.248.43.0/24 maxlen: 24
                          178.248.42.0/24 maxlen: 24
                          176.221.64.0/24 maxlen: 24
                          80.253.128.0/19 maxlen: 24
                          79.132.214.0/23 maxlen: 23
                          79.132.220.0/22 maxlen: 22
                          79.132.200.0/21 maxlen: 21
                          79.132.208.0/20 maxlen: 20
                          79.132.208.0/22 maxlen: 22
                          185.4.17.0/24 maxlen: 24
                          80.71.112.0/24 maxlen: 24
                          80.71.115.0/24 maxlen: 24
                          80.71.114.0/24 maxlen: 24
                          80.71.121.0/24 maxlen: 24
                          80.71.127.0/24 maxlen: 24
                          80.71.126.0/24 maxlen: 24
                          185.104.230.0/23 maxlen: 23
                          185.104.228.0/22 maxlen: 22
                          37.191.76.0/24 maxlen: 24
                          78.111.8.0/24 maxlen: 24
                          78.111.9.0/24 maxlen: 24
                          78.111.14.0/24 maxlen: 24
                          81.29.240.0/24 maxlen: 24
                          81.29.242.0/24 maxlen: 24
                          81.29.244.0/24 maxlen: 24
                          81.29.241.0/24 maxlen: 24
                          81.29.243.0/24 maxlen: 24
                          81.29.253.0/24 maxlen: 24
                          81.29.255.0/24 maxlen: 24
                          46.34.188.0/22 maxlen: 24
                          185.21.68.0/22 maxlen: 22
                          46.34.188.0/23 maxlen: 23
                          46.34.190.0/23 maxlen: 24
                          185.21.76.0/22 maxlen: 22
                          185.21.78.0/23 maxlen: 23
                          188.75.64.0/20 maxlen: 20
                          188.75.64.0/19 maxlen: 19
                          188.75.64.0/18 maxlen: 18
                          188.75.80.0/21 maxlen: 21
                          188.75.88.0/22 maxlen: 22
                          188.75.86.0/23 maxlen: 23
                          185.101.228.0/22 maxlen: 22
                          46.34.164.0/22 maxlen: 22
                          46.34.168.0/21 maxlen: 21
                          46.34.176.0/20 maxlen: 24
                          46.34.176.0/23 maxlen: 23
                          46.34.178.0/23 maxlen: 23
                          46.34.180.0/22 maxlen: 22
                          46.34.184.0/22 maxlen: 22
                          188.75.96.0/22 maxlen: 22
                          188.75.92.0/23 maxlen: 23
                          188.75.100.0/23 maxlen: 23
                          188.75.108.0/22 maxlen: 22
                          188.75.110.0/23 maxlen: 23
                          188.75.116.0/22 maxlen: 22
                          86.109.38.0/24 maxlen: 24
                          86.109.39.0/24 maxlen: 24
                          188.75.124.0/22 maxlen: 22
                          86.109.43.0/24 maxlen: 24
                          86.109.40.0/24 maxlen: 24
                          188.75.120.0/23 maxlen: 23
                          86.109.42.0/24 maxlen: 24
                          86.109.51.0/24 maxlen: 24
                          185.142.232.0/22 maxlen: 23
                          86.109.58.0/24 maxlen: 24
                          86.109.53.0/24 maxlen: 24
                          86.109.55.0/24 maxlen: 24
                          86.109.59.0/24 maxlen: 24
                          86.109.61.0/24 maxlen: 24
                          86.109.63.0/24 maxlen: 24
                          37.114.192.0/18 maxlen: 18
                          2a06:db80::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298128608 (0x11c514e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Mar  8 08:29:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2047b1ec4b6bcc47ce8f60c598463516fabcd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:fa:2b:33:9a:31:51:6e:08:97:57:50:b1:
                    5a:98:22:6c:48:bf:c2:eb:50:0c:bf:5d:56:20:f1:
                    9a:93:67:d0:5d:86:be:92:d6:8e:ca:bf:3f:9e:9f:
                    78:bd:25:c1:9d:52:e4:37:4e:32:d1:c7:47:b0:c4:
                    62:ef:1e:a3:cb:7e:43:d8:16:be:34:57:6c:67:28:
                    73:67:55:90:65:ec:82:9d:08:e9:3c:d1:7b:ff:08:
                    89:da:f4:bf:1b:1b:f2:8c:4b:25:aa:09:22:b0:2a:
                    6b:a1:66:4f:38:21:13:17:12:35:66:06:9e:76:ff:
                    e0:3f:9e:75:06:d4:6f:1c:56:ba:9b:b4:7f:51:4f:
                    d9:66:94:b4:1b:f4:42:2a:a7:fb:73:bd:01:70:06:
                    36:54:db:6d:a5:12:eb:19:cb:9a:d8:6e:1b:d9:06:
                    97:10:31:a0:ac:e0:af:3e:bb:63:27:ce:7c:00:e7:
                    a0:5d:79:ca:9e:e7:18:94:56:48:94:e8:ca:d5:83:
                    a0:2a:9b:9b:2e:b8:a1:f4:23:07:f9:37:24:11:43:
                    79:79:9f:0e:15:1a:92:b8:70:c3:72:b6:54:97:d6:
                    d3:51:a8:26:63:81:9f:45:3b:25:b1:9f:04:08:c9:
                    01:d6:09:82:a4:f1:e4:86:38:c6:32:60:b2:d2:d0:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:04:7B:1E:C4:B6:BC:C4:7C:E8:F6:0C:59:84:63:51:6F:AB:CD:97
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/0gR7HsS2vMR86PYMWYRjUW-rzZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.200.66.0/24
                  5.200.70.0/23
                  31.217.208.0/21
                  37.114.192.0/18
                  37.191.76.0/24
                  46.32.0.0/19
                  46.34.164.0-46.34.191.255
                  78.111.8.0/21
                  78.154.32.0/19
                  78.158.167.0/24
                  79.132.200.0-79.132.223.255
                  79.174.160.0/21
                  80.71.112.0/20
                  80.253.128.0/19
                  81.29.240.0/20
                  86.109.32.0/19
                  87.247.179.0-87.247.183.255
                  89.235.68.0-89.235.79.255
                  109.201.0.0/19
                  176.221.64.0/21
                  178.248.40.0/21
                  185.4.16.0/22
                  185.12.60.0/22
                  185.21.68.0/22
                  185.21.76.0/22
                  185.40.240.0/22
                  185.45.188.0/22
                  185.70.60.0/22
                  185.82.164.0/22
                  185.101.228.0/22
                  185.104.228.0/22
                  185.133.152.0/22
                  185.142.232.0/22
                  185.153.184.0/22
                  185.208.148.0/22
                  188.75.64.0/18
                  213.195.0.0/19
                  217.66.192.0/19
                  217.146.208.0/20
                IPv6:
                  2a06:db80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:cd:87:93:8c:ef:da:20:b7:3f:f1:b9:a3:f4:6a:c5:d2:95:
         e8:4a:30:a9:6e:0d:bc:97:3a:10:fc:26:f2:2b:6e:53:9d:31:
         c5:36:18:0c:95:09:e1:36:0d:40:dc:32:43:a7:14:97:38:40:
         9c:00:ef:10:61:07:96:e2:c1:06:e0:0d:97:62:e1:94:12:cc:
         84:cf:69:0b:bb:22:33:bf:9e:03:9f:9b:b1:3d:dc:6a:34:dd:
         b0:04:34:c5:71:d8:f3:ef:5f:be:3a:48:d5:14:46:fa:20:d4:
         50:07:8e:c8:9e:cb:5e:ec:03:cc:c0:77:37:f0:5f:34:a6:39:
         3d:a5:46:ce:78:5d:22:01:28:59:0c:11:d3:c8:35:cb:d1:19:
         17:5e:cb:c6:2c:29:3c:53:e0:bc:9f:61:22:0a:1e:af:65:2e:
         11:05:9c:78:c3:84:7c:09:dc:e7:dd:22:0e:6d:bb:d8:5e:75:
         e5:f2:49:8c:24:d6:c5:c6:e4:7e:2b:1b:fd:f3:ed:d4:dc:96:
         ae:79:34:93:1a:2a:f6:3e:cc:66:94:4b:38:fb:54:fb:84:09:
         73:63:f6:5e:6c:da:7c:0a:92:e8:d0:be:90:3d:d0:be:84:e8:
         c5:11:75:27:7d:4f:36:3c:b4:60:80:4e:19:33:a8:2e:d7:70:
         27:c3:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org