Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Vg9Ot5I4elEsoNuGykBRpBLlTKM.roa
File:                     Vg9Ot5I4elEsoNuGykBRpBLlTKM.roa (raw, json)
Hash identifier:          sEOg0loTeSNuBXRmG0Mg3vSBdNlJ/uPhBzlNWWi6n7Q=
Subject key identifier:   56:0F:4E:B7:92:38:7A:51:2C:A0:DB:86:CA:40:51:A4:12:E5:4C:A3
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       11724BDE
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Vg9Ot5I4elEsoNuGykBRpBLlTKM.roa
Signing time:             Tue 01 Feb 2022 11:24:18 +0000
ROA not before:           Tue 01 Feb 2022 11:24:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24631
IP address blocks:        217.66.197.0/24 maxlen: 24
                          217.66.203.0/24 maxlen: 24
                          217.66.205.0/24 maxlen: 24
                          217.66.209.0/24 maxlen: 24
                          217.66.210.0/24 maxlen: 24
                          217.66.212.0/24 maxlen: 24
                          79.174.166.0/24 maxlen: 24
                          217.66.216.0/24 maxlen: 24
                          79.174.165.0/24 maxlen: 24
                          89.235.68.0/22 maxlen: 24
                          217.66.218.0/24 maxlen: 24
                          79.174.162.0/24 maxlen: 24
                          79.174.164.0/24 maxlen: 24
                          217.66.223.0/24 maxlen: 24
                          89.235.78.0/23 maxlen: 23
                          89.235.72.0/21 maxlen: 24
                          217.66.220.0/24 maxlen: 24
                          78.154.32.0/19 maxlen: 19
                          213.195.0.0/19 maxlen: 19
                          185.208.148.0/22 maxlen: 22
                          185.45.188.0/22 maxlen: 22
                          217.146.214.0/24 maxlen: 24
                          217.146.221.0/24 maxlen: 24
                          46.32.0.0/22 maxlen: 22
                          46.32.0.0/21 maxlen: 21
                          46.32.0.0/19 maxlen: 19
                          46.32.8.0/21 maxlen: 21
                          46.32.6.0/23 maxlen: 23
                          46.32.10.0/23 maxlen: 23
                          46.32.16.0/20 maxlen: 20
                          87.247.180.0/22 maxlen: 23
                          176.221.66.0/23 maxlen: 23
                          176.221.68.0/22 maxlen: 22
                          109.201.18.0/24 maxlen: 24
                          109.201.19.0/24 maxlen: 24
                          109.201.21.0/24 maxlen: 24
                          109.201.27.0/24 maxlen: 24
                          185.12.63.0/24 maxlen: 24
                          185.12.60.0/24 maxlen: 24
                          185.153.184.0/22 maxlen: 22
                          185.12.62.0/24 maxlen: 24
                          185.133.152.0/24 maxlen: 24
                          185.133.154.0/24 maxlen: 24
                          178.248.40.0/22 maxlen: 22
                          178.248.40.0/21 maxlen: 21
                          178.248.44.0/22 maxlen: 22
                          176.221.64.0/21 maxlen: 21
                          109.201.11.0/24 maxlen: 24
                          80.253.129.0/24 maxlen: 24
                          80.253.136.0/24 maxlen: 24
                          80.253.133.0/24 maxlen: 24
                          80.253.135.0/24 maxlen: 24
                          80.253.145.0/24 maxlen: 24
                          80.253.148.0/24 maxlen: 24
                          80.253.152.0/24 maxlen: 24
                          80.253.147.0/24 maxlen: 24
                          80.253.151.0/24 maxlen: 24
                          79.132.216.0/24 maxlen: 24
                          79.132.218.0/24 maxlen: 24
                          5.200.66.0/24 maxlen: 24
                          5.200.70.0/24 maxlen: 24
                          5.200.71.0/24 maxlen: 24
                          79.132.205.0/24 maxlen: 24
                          79.132.211.0/24 maxlen: 24
                          79.132.212.0/24 maxlen: 24
                          78.158.167.0/24 maxlen: 24
                          80.71.112.0/23 maxlen: 23
                          185.4.16.0/22 maxlen: 22
                          80.71.112.0/20 maxlen: 20
                          80.71.116.0/22 maxlen: 22
                          80.71.120.0/23 maxlen: 23
                          80.71.120.0/21 maxlen: 21
                          80.71.120.0/22 maxlen: 22
                          185.104.229.0/24 maxlen: 24
                          185.70.60.0/22 maxlen: 22
                          78.111.8.0/21 maxlen: 21
                          78.111.8.0/23 maxlen: 23
                          78.111.10.0/23 maxlen: 23
                          81.29.240.0/20 maxlen: 20
                          81.29.244.0/22 maxlen: 22
                          81.29.248.0/23 maxlen: 23
                          81.29.252.0/23 maxlen: 23
                          185.82.164.0/23 maxlen: 23
                          185.82.164.0/22 maxlen: 22
                          31.217.208.0/21 maxlen: 21
                          46.34.190.0/24 maxlen: 24
                          188.75.65.0/24 maxlen: 24
                          188.75.71.0/24 maxlen: 24
                          188.75.84.0/24 maxlen: 24
                          188.75.88.0/24 maxlen: 24
                          185.101.228.0/24 maxlen: 24
                          185.101.231.0/24 maxlen: 24
                          188.75.98.0/24 maxlen: 24
                          188.75.93.0/24 maxlen: 24
                          188.75.95.0/24 maxlen: 24
                          188.75.104.0/24 maxlen: 24
                          188.75.105.0/24 maxlen: 24
                          188.75.106.0/24 maxlen: 24
                          188.75.107.0/24 maxlen: 24
                          188.75.109.0/24 maxlen: 24
                          86.109.34.0/23 maxlen: 23
                          86.109.36.0/23 maxlen: 23
                          86.109.32.0/19 maxlen: 19
                          188.75.124.0/24 maxlen: 24
                          86.109.44.0/23 maxlen: 23
                          86.109.46.0/23 maxlen: 23
                          188.75.127.0/24 maxlen: 24
                          86.109.48.0/20 maxlen: 20
                          86.109.48.0/21 maxlen: 21
                          185.142.232.0/24 maxlen: 24
                          86.109.56.0/23 maxlen: 23
                          86.109.58.0/23 maxlen: 23
                          86.109.60.0/22 maxlen: 22
                          185.40.240.0/22 maxlen: 22
                          217.66.192.0/20 maxlen: 20
                          217.66.192.0/19 maxlen: 19
                          217.66.206.0/23 maxlen: 23
                          217.66.212.0/22 maxlen: 22
                          79.174.160.0/21 maxlen: 21
                          89.235.71.0/24 maxlen: 24
                          217.66.216.0/22 maxlen: 22
                          89.235.70.0/24 maxlen: 24
                          217.66.220.0/22 maxlen: 22
                          89.235.76.0/24 maxlen: 24
                          185.208.149.0/24 maxlen: 24
                          185.208.151.0/24 maxlen: 24
                          185.208.148.0/24 maxlen: 24
                          185.208.150.0/24 maxlen: 24
                          217.146.208.0/20 maxlen: 20
                          46.32.2.0/24 maxlen: 24
                          46.32.4.0/24 maxlen: 24
                          46.32.3.0/24 maxlen: 24
                          46.32.6.0/24 maxlen: 24
                          46.32.8.0/24 maxlen: 24
                          46.32.7.0/24 maxlen: 24
                          46.32.12.0/24 maxlen: 24
                          46.32.13.0/24 maxlen: 24
                          46.32.15.0/24 maxlen: 24
                          46.32.21.0/24 maxlen: 24
                          46.32.23.0/24 maxlen: 24
                          46.32.26.0/24 maxlen: 24
                          46.32.30.0/24 maxlen: 24
                          87.247.179.0/24 maxlen: 24
                          46.32.25.0/24 maxlen: 24
                          46.32.27.0/24 maxlen: 24
                          176.221.68.0/24 maxlen: 24
                          176.221.70.0/24 maxlen: 24
                          109.201.18.0/23 maxlen: 23
                          185.12.60.0/23 maxlen: 23
                          185.153.185.0/24 maxlen: 24
                          185.12.60.0/22 maxlen: 22
                          185.133.152.0/22 maxlen: 22
                          109.201.0.0/19 maxlen: 24
                          178.248.43.0/24 maxlen: 24
                          178.248.42.0/24 maxlen: 24
                          176.221.64.0/24 maxlen: 24
                          80.253.128.0/19 maxlen: 24
                          79.132.214.0/23 maxlen: 23
                          79.132.220.0/22 maxlen: 22
                          79.132.200.0/21 maxlen: 21
                          79.132.208.0/20 maxlen: 20
                          79.132.208.0/22 maxlen: 22
                          185.4.17.0/24 maxlen: 24
                          80.71.112.0/24 maxlen: 24
                          80.71.115.0/24 maxlen: 24
                          80.71.114.0/24 maxlen: 24
                          80.71.121.0/24 maxlen: 24
                          80.71.127.0/24 maxlen: 24
                          80.71.126.0/24 maxlen: 24
                          185.104.230.0/23 maxlen: 23
                          185.104.228.0/22 maxlen: 22
                          37.191.76.0/24 maxlen: 24
                          78.111.8.0/24 maxlen: 24
                          78.111.9.0/24 maxlen: 24
                          78.111.14.0/24 maxlen: 24
                          81.29.240.0/24 maxlen: 24
                          81.29.242.0/24 maxlen: 24
                          81.29.244.0/24 maxlen: 24
                          81.29.241.0/24 maxlen: 24
                          81.29.243.0/24 maxlen: 24
                          81.29.253.0/24 maxlen: 24
                          81.29.255.0/24 maxlen: 24
                          46.34.188.0/22 maxlen: 24
                          185.21.68.0/22 maxlen: 22
                          46.34.188.0/23 maxlen: 23
                          46.34.190.0/23 maxlen: 24
                          185.21.76.0/22 maxlen: 22
                          185.21.78.0/23 maxlen: 23
                          188.75.64.0/20 maxlen: 20
                          188.75.64.0/19 maxlen: 19
                          188.75.64.0/18 maxlen: 18
                          188.75.80.0/21 maxlen: 21
                          188.75.88.0/22 maxlen: 22
                          188.75.86.0/23 maxlen: 23
                          185.101.228.0/22 maxlen: 22
                          46.34.164.0/22 maxlen: 22
                          46.34.168.0/21 maxlen: 21
                          46.34.176.0/20 maxlen: 24
                          46.34.176.0/23 maxlen: 23
                          46.34.178.0/23 maxlen: 23
                          46.34.180.0/22 maxlen: 22
                          46.34.184.0/22 maxlen: 22
                          188.75.96.0/22 maxlen: 22
                          188.75.92.0/23 maxlen: 23
                          188.75.100.0/23 maxlen: 23
                          188.75.108.0/22 maxlen: 22
                          188.75.110.0/23 maxlen: 23
                          188.75.116.0/22 maxlen: 22
                          86.109.38.0/24 maxlen: 24
                          86.109.39.0/24 maxlen: 24
                          188.75.124.0/22 maxlen: 22
                          86.109.43.0/24 maxlen: 24
                          86.109.40.0/24 maxlen: 24
                          188.75.120.0/23 maxlen: 23
                          86.109.42.0/24 maxlen: 24
                          86.109.51.0/24 maxlen: 24
                          185.142.232.0/22 maxlen: 23
                          86.109.58.0/24 maxlen: 24
                          86.109.53.0/24 maxlen: 24
                          86.109.55.0/24 maxlen: 24
                          86.109.59.0/24 maxlen: 24
                          86.109.61.0/24 maxlen: 24
                          86.109.63.0/24 maxlen: 24
                          37.114.192.0/18 maxlen: 18
                          2a06:db80::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292703198 (0x11724bde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Feb  1 11:24:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=560f4eb792387a512ca0db86ca4051a412e54ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f9:46:3f:fd:b2:8c:90:6a:7d:47:09:a2:be:
                    c2:0f:cb:0a:7c:47:54:f1:78:cb:6a:ac:72:2b:cf:
                    52:a9:fa:38:b4:dc:22:cd:fa:b1:83:48:d7:9b:73:
                    74:98:6d:af:62:3f:2a:67:5f:5b:01:66:4f:9c:e9:
                    0c:f4:71:0f:71:17:28:75:44:f5:7e:ca:8d:5f:12:
                    a8:3a:3b:19:aa:10:26:55:de:02:51:18:4e:36:64:
                    a4:75:aa:a4:02:ad:ba:cd:e9:60:13:ac:da:ec:8e:
                    17:f7:c3:70:a0:4b:bd:78:2d:76:c3:de:c1:89:ec:
                    38:5e:c4:c5:56:b9:27:9a:97:2a:66:fa:a5:8d:9c:
                    e4:ff:30:08:1b:e6:cc:f0:22:5b:1d:8a:0b:15:d6:
                    58:33:27:5a:34:ac:92:c8:9e:fc:20:b0:88:fc:f1:
                    58:cb:9e:38:5d:bd:82:f2:00:b2:91:db:c9:30:42:
                    0a:f0:1d:21:a1:95:87:04:44:59:37:81:48:03:e5:
                    33:1a:3c:6e:a5:f7:28:97:d6:ed:ed:28:8a:af:ae:
                    96:b0:95:e1:14:cc:7e:de:3a:8f:85:30:f1:15:36:
                    2f:57:44:f1:11:59:bb:6e:45:69:92:79:6f:c9:e4:
                    f5:8e:59:fc:e7:7e:03:ad:16:1e:bf:41:61:46:3e:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:4E:B7:92:38:7A:51:2C:A0:DB:86:CA:40:51:A4:12:E5:4C:A3
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/Vg9Ot5I4elEsoNuGykBRpBLlTKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.200.66.0/24
                  5.200.70.0/23
                  31.217.208.0/21
                  37.114.192.0/18
                  37.191.76.0/24
                  46.32.0.0/19
                  46.34.164.0-46.34.191.255
                  78.111.8.0/21
                  78.154.32.0/19
                  78.158.167.0/24
                  79.132.200.0-79.132.223.255
                  79.174.160.0/21
                  80.71.112.0/20
                  80.253.128.0/19
                  81.29.240.0/20
                  86.109.32.0/19
                  87.247.179.0-87.247.183.255
                  89.235.68.0-89.235.79.255
                  109.201.0.0/19
                  176.221.64.0/21
                  178.248.40.0/21
                  185.4.16.0/22
                  185.12.60.0/22
                  185.21.68.0/22
                  185.21.76.0/22
                  185.40.240.0/22
                  185.45.188.0/22
                  185.70.60.0/22
                  185.82.164.0/22
                  185.101.228.0/22
                  185.104.228.0/22
                  185.133.152.0/22
                  185.142.232.0/22
                  185.153.184.0/22
                  185.208.148.0/22
                  188.75.64.0/18
                  213.195.0.0/19
                  217.66.192.0/19
                  217.146.208.0/20
                IPv6:
                  2a06:db80::/29

    Signature Algorithm: sha256WithRSAEncryption
         51:16:3e:83:54:6b:6d:a0:ad:9c:4b:15:bf:9f:a8:2b:ff:d4:
         7b:7a:bd:3f:b3:b5:23:18:63:e6:cd:d9:c8:84:ae:7f:57:ad:
         93:24:56:f3:89:f4:36:2c:ef:70:fa:9a:05:44:eb:fc:3b:d8:
         39:e2:a7:86:1e:60:b5:e0:3f:cc:65:98:91:2e:8c:59:94:cd:
         72:51:c6:d3:c4:c9:d4:a3:4b:99:15:cc:db:b5:4d:07:ba:ae:
         6b:0e:b2:06:0f:85:f7:99:62:4a:c1:f6:62:fc:b3:a8:6f:84:
         cd:07:61:5f:fa:a7:40:cb:5d:48:cb:bc:56:3d:b9:f4:6f:73:
         60:ab:32:78:6e:85:1c:03:4b:5e:0e:98:8e:75:af:27:64:29:
         95:be:0f:85:fd:e6:e3:7b:0b:ea:7d:ad:f6:2b:c7:dd:49:33:
         5c:0e:32:f7:88:e4:f2:bd:16:7f:c8:3e:30:32:d4:18:90:ec:
         c1:ce:78:66:af:44:0f:f7:98:2a:ae:07:40:b7:cd:2a:8f:0f:
         4a:48:2e:81:ee:5b:60:26:6a:fb:4a:cf:c2:38:89:e3:7d:28:
         f2:b6:00:76:85:bd:e0:d5:a2:ea:18:b8:27:79:6b:9e:1b:de:
         3c:aa:71:6f:11:fb:7a:ab:87:ee:6f:52:a1:18:53:4d:da:3c:
         f2:22:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org