Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/StW-pE-K2iH9y-F8jscNnJxlfCI.roa
File:                     StW-pE-K2iH9y-F8jscNnJxlfCI.roa (raw, json)
Hash identifier:          0yRbd9iHgZLT7NtgVXBA6gQW3Bxu72hesXxqSOhw0fo=
Subject key identifier:   4A:D5:BE:A4:4F:8A:DA:21:FD:CB:E1:7C:8E:C7:0D:9C:9C:65:7C:22
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       112832F6
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/StW-pE-K2iH9y-F8jscNnJxlfCI.roa
Signing time:             Mon 03 Jan 2022 11:45:32 +0000
ROA not before:           Mon 03 Jan 2022 11:45:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24631
IP address blocks:        217.66.197.0/24 maxlen: 24
                          217.66.203.0/24 maxlen: 24
                          217.66.205.0/24 maxlen: 24
                          217.66.209.0/24 maxlen: 24
                          217.66.210.0/24 maxlen: 24
                          217.66.212.0/24 maxlen: 24
                          79.174.166.0/24 maxlen: 24
                          217.66.216.0/24 maxlen: 24
                          79.174.165.0/24 maxlen: 24
                          89.235.68.0/22 maxlen: 24
                          217.66.218.0/24 maxlen: 24
                          79.174.162.0/24 maxlen: 24
                          79.174.164.0/24 maxlen: 24
                          217.66.223.0/24 maxlen: 24
                          89.235.78.0/23 maxlen: 23
                          89.235.72.0/21 maxlen: 24
                          217.66.220.0/24 maxlen: 24
                          78.154.32.0/19 maxlen: 19
                          213.195.0.0/19 maxlen: 19
                          185.208.148.0/22 maxlen: 22
                          185.45.188.0/22 maxlen: 22
                          217.146.214.0/24 maxlen: 24
                          217.146.221.0/24 maxlen: 24
                          46.32.0.0/22 maxlen: 22
                          46.32.0.0/21 maxlen: 21
                          46.32.0.0/19 maxlen: 19
                          46.32.8.0/21 maxlen: 21
                          46.32.6.0/23 maxlen: 23
                          46.32.10.0/23 maxlen: 23
                          46.32.16.0/20 maxlen: 20
                          87.247.180.0/22 maxlen: 23
                          176.221.66.0/23 maxlen: 23
                          176.221.68.0/22 maxlen: 22
                          109.201.18.0/24 maxlen: 24
                          109.201.19.0/24 maxlen: 24
                          109.201.21.0/24 maxlen: 24
                          109.201.27.0/24 maxlen: 24
                          185.12.63.0/24 maxlen: 24
                          185.12.60.0/24 maxlen: 24
                          185.153.184.0/22 maxlen: 22
                          185.12.62.0/24 maxlen: 24
                          185.133.152.0/24 maxlen: 24
                          185.133.154.0/24 maxlen: 24
                          178.248.40.0/21 maxlen: 21
                          176.221.64.0/21 maxlen: 21
                          109.201.11.0/24 maxlen: 24
                          80.253.129.0/24 maxlen: 24
                          80.253.136.0/24 maxlen: 24
                          80.253.133.0/24 maxlen: 24
                          80.253.135.0/24 maxlen: 24
                          80.253.145.0/24 maxlen: 24
                          80.253.148.0/24 maxlen: 24
                          80.253.152.0/24 maxlen: 24
                          80.253.147.0/24 maxlen: 24
                          80.253.151.0/24 maxlen: 24
                          79.132.216.0/24 maxlen: 24
                          79.132.218.0/24 maxlen: 24
                          5.200.66.0/24 maxlen: 24
                          5.200.70.0/24 maxlen: 24
                          5.200.71.0/24 maxlen: 24
                          79.132.205.0/24 maxlen: 24
                          79.132.211.0/24 maxlen: 24
                          79.132.212.0/24 maxlen: 24
                          78.158.167.0/24 maxlen: 24
                          80.71.112.0/23 maxlen: 23
                          185.4.16.0/22 maxlen: 22
                          80.71.112.0/20 maxlen: 20
                          80.71.116.0/22 maxlen: 22
                          80.71.120.0/23 maxlen: 23
                          80.71.120.0/21 maxlen: 21
                          80.71.120.0/22 maxlen: 22
                          185.104.229.0/24 maxlen: 24
                          185.70.60.0/22 maxlen: 22
                          78.111.8.0/21 maxlen: 21
                          78.111.8.0/23 maxlen: 23
                          78.111.10.0/23 maxlen: 23
                          81.29.240.0/20 maxlen: 20
                          81.29.244.0/22 maxlen: 22
                          81.29.248.0/23 maxlen: 23
                          81.29.252.0/23 maxlen: 23
                          185.82.164.0/23 maxlen: 23
                          185.82.164.0/22 maxlen: 22
                          31.217.208.0/21 maxlen: 21
                          46.34.190.0/24 maxlen: 24
                          188.75.65.0/24 maxlen: 24
                          188.75.71.0/24 maxlen: 24
                          188.75.84.0/24 maxlen: 24
                          188.75.88.0/24 maxlen: 24
                          185.101.228.0/24 maxlen: 24
                          185.101.231.0/24 maxlen: 24
                          188.75.98.0/24 maxlen: 24
                          188.75.93.0/24 maxlen: 24
                          188.75.95.0/24 maxlen: 24
                          188.75.104.0/24 maxlen: 24
                          188.75.105.0/24 maxlen: 24
                          188.75.106.0/24 maxlen: 24
                          188.75.107.0/24 maxlen: 24
                          188.75.109.0/24 maxlen: 24
                          86.109.34.0/23 maxlen: 23
                          86.109.36.0/23 maxlen: 23
                          86.109.32.0/19 maxlen: 19
                          188.75.124.0/24 maxlen: 24
                          86.109.44.0/23 maxlen: 23
                          86.109.46.0/23 maxlen: 23
                          188.75.127.0/24 maxlen: 24
                          86.109.48.0/20 maxlen: 20
                          86.109.48.0/21 maxlen: 21
                          185.142.232.0/24 maxlen: 24
                          86.109.56.0/23 maxlen: 23
                          86.109.58.0/23 maxlen: 23
                          86.109.60.0/22 maxlen: 22
                          185.40.240.0/22 maxlen: 22
                          217.66.192.0/20 maxlen: 20
                          217.66.192.0/19 maxlen: 19
                          217.66.206.0/23 maxlen: 23
                          217.66.212.0/22 maxlen: 22
                          79.174.160.0/21 maxlen: 21
                          89.235.71.0/24 maxlen: 24
                          217.66.216.0/22 maxlen: 22
                          89.235.70.0/24 maxlen: 24
                          217.66.220.0/22 maxlen: 22
                          89.235.76.0/24 maxlen: 24
                          185.208.149.0/24 maxlen: 24
                          185.208.151.0/24 maxlen: 24
                          185.208.148.0/24 maxlen: 24
                          185.208.150.0/24 maxlen: 24
                          217.146.208.0/20 maxlen: 20
                          46.32.2.0/24 maxlen: 24
                          46.32.4.0/24 maxlen: 24
                          46.32.3.0/24 maxlen: 24
                          46.32.6.0/24 maxlen: 24
                          46.32.8.0/24 maxlen: 24
                          46.32.7.0/24 maxlen: 24
                          46.32.12.0/24 maxlen: 24
                          46.32.13.0/24 maxlen: 24
                          46.32.15.0/24 maxlen: 24
                          46.32.21.0/24 maxlen: 24
                          46.32.23.0/24 maxlen: 24
                          46.32.26.0/24 maxlen: 24
                          46.32.30.0/24 maxlen: 24
                          87.247.179.0/24 maxlen: 24
                          46.32.25.0/24 maxlen: 24
                          46.32.27.0/24 maxlen: 24
                          176.221.68.0/24 maxlen: 24
                          176.221.70.0/24 maxlen: 24
                          109.201.18.0/23 maxlen: 23
                          185.12.60.0/23 maxlen: 23
                          185.153.185.0/24 maxlen: 24
                          185.12.60.0/22 maxlen: 22
                          185.133.152.0/22 maxlen: 22
                          109.201.0.0/19 maxlen: 24
                          178.248.42.0/24 maxlen: 24
                          176.221.64.0/24 maxlen: 24
                          80.253.128.0/19 maxlen: 24
                          79.132.214.0/23 maxlen: 23
                          79.132.220.0/22 maxlen: 22
                          79.132.200.0/21 maxlen: 21
                          79.132.208.0/20 maxlen: 20
                          79.132.208.0/22 maxlen: 22
                          185.4.17.0/24 maxlen: 24
                          80.71.112.0/24 maxlen: 24
                          80.71.115.0/24 maxlen: 24
                          80.71.114.0/24 maxlen: 24
                          80.71.121.0/24 maxlen: 24
                          80.71.127.0/24 maxlen: 24
                          80.71.126.0/24 maxlen: 24
                          185.104.230.0/23 maxlen: 23
                          185.104.228.0/22 maxlen: 22
                          37.191.76.0/24 maxlen: 24
                          78.111.8.0/24 maxlen: 24
                          78.111.9.0/24 maxlen: 24
                          78.111.14.0/24 maxlen: 24
                          81.29.240.0/24 maxlen: 24
                          81.29.242.0/24 maxlen: 24
                          81.29.244.0/24 maxlen: 24
                          81.29.241.0/24 maxlen: 24
                          81.29.243.0/24 maxlen: 24
                          81.29.253.0/24 maxlen: 24
                          81.29.255.0/24 maxlen: 24
                          46.34.188.0/22 maxlen: 24
                          185.21.68.0/22 maxlen: 22
                          46.34.188.0/23 maxlen: 23
                          46.34.190.0/23 maxlen: 24
                          185.21.76.0/22 maxlen: 22
                          185.21.78.0/23 maxlen: 23
                          188.75.64.0/20 maxlen: 20
                          188.75.64.0/19 maxlen: 19
                          188.75.64.0/18 maxlen: 18
                          188.75.80.0/21 maxlen: 21
                          188.75.88.0/22 maxlen: 22
                          188.75.86.0/23 maxlen: 23
                          185.101.228.0/22 maxlen: 22
                          46.34.164.0/22 maxlen: 22
                          46.34.168.0/21 maxlen: 21
                          46.34.176.0/20 maxlen: 24
                          46.34.176.0/23 maxlen: 23
                          46.34.178.0/23 maxlen: 23
                          46.34.180.0/22 maxlen: 22
                          46.34.184.0/22 maxlen: 22
                          188.75.96.0/22 maxlen: 22
                          188.75.92.0/23 maxlen: 23
                          188.75.100.0/23 maxlen: 23
                          188.75.108.0/22 maxlen: 22
                          188.75.110.0/23 maxlen: 23
                          188.75.116.0/22 maxlen: 22
                          86.109.38.0/24 maxlen: 24
                          86.109.39.0/24 maxlen: 24
                          188.75.124.0/22 maxlen: 22
                          86.109.43.0/24 maxlen: 24
                          86.109.40.0/24 maxlen: 24
                          188.75.120.0/23 maxlen: 23
                          86.109.42.0/24 maxlen: 24
                          86.109.51.0/24 maxlen: 24
                          185.142.232.0/22 maxlen: 23
                          86.109.58.0/24 maxlen: 24
                          86.109.53.0/24 maxlen: 24
                          86.109.55.0/24 maxlen: 24
                          86.109.59.0/24 maxlen: 24
                          86.109.61.0/24 maxlen: 24
                          86.109.63.0/24 maxlen: 24
                          37.114.192.0/18 maxlen: 18
                          2a06:db80::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287847158 (0x112832f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Jan  3 11:45:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ad5bea44f8ada21fdcbe17c8ec70d9c9c657c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:3a:5d:d7:3a:83:c7:5e:05:ed:cd:fa:02:
                    41:b0:89:6e:9d:e2:de:8d:0c:01:40:da:aa:de:e0:
                    3a:20:43:c0:20:ca:21:06:1b:0d:db:90:bd:08:ed:
                    5d:b4:39:b3:6f:08:37:19:91:74:8d:9a:c5:7b:fe:
                    95:a4:1d:59:b4:e2:41:d5:bf:88:93:22:15:e1:02:
                    7e:a8:04:c4:57:c3:a8:92:24:6c:c4:f5:d2:af:0e:
                    ce:51:58:49:ba:e9:e7:47:43:9e:65:f2:bf:58:72:
                    73:c0:03:99:8f:43:16:ee:c5:8a:c8:df:ab:25:ad:
                    98:d4:e7:7a:5a:ef:46:5a:e0:e9:c8:3c:00:e2:4c:
                    d4:6c:0d:10:99:55:9d:6a:e4:62:e0:62:9d:e7:9f:
                    bc:9f:1f:a2:bb:bd:c3:1b:1b:30:af:94:1e:2b:77:
                    e6:36:3a:4e:64:fd:5a:14:c6:48:06:77:f8:74:5c:
                    98:0a:4e:f0:29:72:d0:4d:be:4c:7c:64:38:b9:5d:
                    ca:fe:64:ea:5e:61:b3:c9:bc:eb:d0:93:50:c1:81:
                    ea:ca:52:d0:e0:52:11:34:d9:73:7a:b3:66:06:01:
                    23:c5:d7:93:de:84:83:f6:8f:ad:47:e9:a9:b9:70:
                    74:6f:4a:4b:95:ac:ba:61:46:ee:89:11:d8:19:2c:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D5:BE:A4:4F:8A:DA:21:FD:CB:E1:7C:8E:C7:0D:9C:9C:65:7C:22
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/StW-pE-K2iH9y-F8jscNnJxlfCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.200.66.0/24
                  5.200.70.0/23
                  31.217.208.0/21
                  37.114.192.0/18
                  37.191.76.0/24
                  46.32.0.0/19
                  46.34.164.0-46.34.191.255
                  78.111.8.0/21
                  78.154.32.0/19
                  78.158.167.0/24
                  79.132.200.0-79.132.223.255
                  79.174.160.0/21
                  80.71.112.0/20
                  80.253.128.0/19
                  81.29.240.0/20
                  86.109.32.0/19
                  87.247.179.0-87.247.183.255
                  89.235.68.0-89.235.79.255
                  109.201.0.0/19
                  176.221.64.0/21
                  178.248.40.0/21
                  185.4.16.0/22
                  185.12.60.0/22
                  185.21.68.0/22
                  185.21.76.0/22
                  185.40.240.0/22
                  185.45.188.0/22
                  185.70.60.0/22
                  185.82.164.0/22
                  185.101.228.0/22
                  185.104.228.0/22
                  185.133.152.0/22
                  185.142.232.0/22
                  185.153.184.0/22
                  185.208.148.0/22
                  188.75.64.0/18
                  213.195.0.0/19
                  217.66.192.0/19
                  217.146.208.0/20
                IPv6:
                  2a06:db80::/29

    Signature Algorithm: sha256WithRSAEncryption
         90:28:5e:25:12:f8:1e:3c:b8:ba:27:e5:c4:4f:3a:39:f4:fb:
         c5:1f:bb:07:82:c6:42:da:b8:23:ca:22:df:3f:8e:a6:d8:f3:
         07:f1:ac:1a:d1:24:9d:06:a1:6e:56:a7:57:8c:1a:9a:df:05:
         7b:a0:0b:a2:d0:ad:e8:ef:4a:aa:21:3b:7d:a1:b1:2f:5c:13:
         37:ee:b2:40:9b:42:c9:74:15:a2:5b:81:16:64:ad:a6:e6:1c:
         28:5a:b8:b8:ff:3b:9f:a3:f1:81:57:15:6e:23:c6:a3:10:0f:
         54:de:d9:03:2f:8e:75:cb:83:3d:8b:f3:76:06:99:4d:2f:22:
         a7:ab:ad:fe:79:a3:fb:41:58:bc:aa:47:72:98:61:30:b7:1e:
         d7:4b:8d:e0:90:9d:de:22:3b:93:61:96:c4:c2:48:7d:f7:e9:
         cd:b1:97:b0:f9:a2:de:60:55:00:7d:3a:54:f4:6f:3f:30:89:
         42:80:af:63:ce:d7:c1:a1:74:ca:bb:01:92:35:b8:a2:72:90:
         d0:c7:71:28:cd:18:fb:d9:85:c5:62:f9:79:a6:b4:a4:03:33:
         d2:25:a4:da:8a:77:5c:02:a6:f8:1f:50:39:29:d9:9d:f3:11:
         ae:11:7f:4e:d6:7f:d8:4f:75:2f:5b:c7:01:98:26:b7:00:17:
         82:fd:5f:a6
-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgIEESgy9jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YjY5OGM0YjYxMmFmZWUyY2JiMWNkZDUwOWU0ZjAyNDZmYmI4MGUxMB4XDTIyMDEw
MzExNDUzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGFkNWJlYTQ0Zjhh
ZGEyMWZkY2JlMTdjOGVjNzBkOWM5YzY1N2MyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMrFOl3XOoPHXgXtzfoCQbCJbp3i3o0MAUDaqt7gOiBDwCDK
IQYbDduQvQjtXbQ5s28INxmRdI2axXv+laQdWbTiQdW/iJMiFeECfqgExFfDqJIk
bMT10q8OzlFYSbrp50dDnmXyv1hyc8ADmY9DFu7FisjfqyWtmNTnelrvRlrg6cg8
AOJM1GwNEJlVnWrkYuBineefvJ8foru9wxsbMK+UHit35jY6TmT9WhTGSAZ3+HRc
mApO8Cly0E2+THxkOLldyv5k6l5hs8m869CTUMGB6spS0OBSETTZc3qzZgYBI8XX
k96Eg/aPrUfpqblwdG9KS5WsumFG7okR2BksxJECAwEAAaOCAyYwggMiMB0GA1Ud
DgQWBBRK1b6kT4raIf3L4XyOxw2cnGV8IjAfBgNVHSMEGDAWgBRbaYxLYSr+4sux
zdUJ5PAkb7uA4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1cybU1TMkVxX3VMTHNjM1ZDZVR3SkctN2dPRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvYzE2ZjU1LWI0NGQtNDBjMy05ZGFjLWNjMmZhZmUzYThiNC8x
L1N0Vy1wRS1LMmlIOXktRjhqc2NObkp4bGZDSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
YzE2ZjU1LWI0NGQtNDBjMy05ZGFjLWNjMmZhZmUzYThiNC8xL1cybU1TMkVxX3VM
THNjM1ZDZVR3SkctN2dPRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AToGCCsGAQUFBwEHAQH/BIIBKTCCASUwggESBAIAATCCAQoDBAAFyEIDBAEFyEYD
BAMf2dADBAYlcsADBAAlv0wDBAUuIAAwDAMEAi4ipAMEBi4igAMEA05vCAMEBU6a
IAMEAE6epzAMAwQDT4TIAwQFT4TAAwQDT66gAwQEUEdwAwQFUP2AAwQEUR3wAwQF
Vm0gMAwDBABX97MDBANX97AwDAMEAlnrRAMEBFnrQAMEBW3JAAMEA7DdQAMEA7L4
KAMEArkEEAMEArkMPAMEArkVRAMEArkVTAMEArko8AMEArktvAMEArlGPAMEArlS
pAMEArll5AMEArlo5AMEArmFmAMEArmO6AMEArmZuAMEArnQlAMEBrxLQAMEBdXD
AAMEBdlCwAMEBNmS0DANBAIAAjAHAwUDKgbbgDANBgkqhkiG9w0BAQsFAAOCAQEA
kCheJRL4Hjy4uiflxE86OfT7xR+7B4LGQtq4I8oi3z+OptjzB/GsGtEknQahblan
V4wamt8Fe6ALotCt6O9KqiE7faGxL1wTN+6yQJtCyXQVoluBFmStpuYcKFq4uP87
n6PxgVcVbiPGoxAPVN7ZAy+OdcuDPYvzdgaZTS8ip6ut/nmj+0FYvKpHcphhMLce
10uN4JCd3iI7k2GWxMJIfffpzbGXsPmi3mBVAH06VPRvPzCJQoCvY87XwaF0yrsB
kjW4onKQ0MdxKM0Y+9mFxWL5eaa0pAMz0iWk2op3XAKm+B9QOSnZnfMRrhF/TtZ/
2E91L1vHAZgmtwAXgv1fpg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org