Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/bx0kZjN5DS4SdR_r_D6_Jxf7Uoo.roa
File:                     bx0kZjN5DS4SdR_r_D6_Jxf7Uoo.roa (raw, json)
Hash identifier:          ONwZLK+xWk10MWopgdhRd6tL6Ui1KkoYHQjY/mT/nWA=
Subject key identifier:   6F:1D:24:66:33:79:0D:2E:12:75:1F:EB:FC:3E:BF:27:17:FB:52:8A
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       122A9AA3
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/bx0kZjN5DS4SdR_r_D6_Jxf7Uoo.roa
Signing time:             Tue 19 Apr 2022 13:13:44 +0000
ROA not before:           Tue 19 Apr 2022 13:13:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24631
IP address blocks:        217.66.197.0/24 maxlen: 24
                          217.66.203.0/24 maxlen: 24
                          217.66.205.0/24 maxlen: 24
                          217.66.209.0/24 maxlen: 24
                          217.66.210.0/24 maxlen: 24
                          217.66.212.0/24 maxlen: 24
                          79.174.166.0/24 maxlen: 24
                          217.66.216.0/24 maxlen: 24
                          79.174.165.0/24 maxlen: 24
                          89.235.68.0/22 maxlen: 24
                          79.174.162.0/24 maxlen: 24
                          79.174.164.0/24 maxlen: 24
                          217.66.218.0/24 maxlen: 24
                          217.66.223.0/24 maxlen: 24
                          89.235.78.0/23 maxlen: 23
                          89.235.72.0/21 maxlen: 24
                          217.66.220.0/24 maxlen: 24
                          78.154.32.0/19 maxlen: 19
                          213.195.0.0/19 maxlen: 19
                          185.208.148.0/22 maxlen: 22
                          185.45.188.0/22 maxlen: 22
                          217.146.214.0/24 maxlen: 24
                          217.146.221.0/24 maxlen: 24
                          46.32.0.0/22 maxlen: 22
                          46.32.0.0/21 maxlen: 21
                          46.32.0.0/19 maxlen: 24
                          46.32.8.0/21 maxlen: 21
                          46.32.6.0/23 maxlen: 23
                          46.32.10.0/23 maxlen: 23
                          46.32.16.0/20 maxlen: 24
                          87.247.180.0/22 maxlen: 23
                          176.221.66.0/23 maxlen: 23
                          176.221.68.0/22 maxlen: 22
                          109.201.18.0/24 maxlen: 24
                          109.201.19.0/24 maxlen: 24
                          109.201.21.0/24 maxlen: 24
                          109.201.27.0/24 maxlen: 24
                          185.12.63.0/24 maxlen: 24
                          185.12.60.0/24 maxlen: 24
                          185.153.184.0/22 maxlen: 22
                          185.12.62.0/24 maxlen: 24
                          185.133.152.0/24 maxlen: 24
                          185.133.154.0/24 maxlen: 24
                          178.248.40.0/22 maxlen: 22
                          178.248.40.0/21 maxlen: 21
                          178.248.44.0/22 maxlen: 22
                          176.221.64.0/21 maxlen: 21
                          109.201.11.0/24 maxlen: 24
                          80.253.129.0/24 maxlen: 24
                          80.253.136.0/24 maxlen: 24
                          80.253.133.0/24 maxlen: 24
                          80.253.135.0/24 maxlen: 24
                          80.253.145.0/24 maxlen: 24
                          80.253.148.0/24 maxlen: 24
                          80.253.152.0/24 maxlen: 24
                          80.253.147.0/24 maxlen: 24
                          80.253.151.0/24 maxlen: 24
                          79.132.216.0/24 maxlen: 24
                          79.132.218.0/24 maxlen: 24
                          5.200.66.0/24 maxlen: 24
                          5.200.70.0/24 maxlen: 24
                          5.200.71.0/24 maxlen: 24
                          79.132.205.0/24 maxlen: 24
                          79.132.211.0/24 maxlen: 24
                          79.132.212.0/24 maxlen: 24
                          78.158.167.0/24 maxlen: 24
                          80.71.112.0/23 maxlen: 23
                          185.4.16.0/22 maxlen: 22
                          80.71.112.0/20 maxlen: 20
                          80.71.116.0/22 maxlen: 22
                          80.71.120.0/23 maxlen: 23
                          80.71.120.0/21 maxlen: 21
                          80.71.120.0/22 maxlen: 22
                          185.104.229.0/24 maxlen: 24
                          185.70.60.0/22 maxlen: 22
                          78.111.8.0/21 maxlen: 21
                          78.111.8.0/23 maxlen: 23
                          78.111.10.0/23 maxlen: 23
                          81.29.240.0/20 maxlen: 20
                          81.29.244.0/22 maxlen: 22
                          81.29.248.0/23 maxlen: 23
                          81.29.252.0/23 maxlen: 23
                          185.82.164.0/23 maxlen: 23
                          185.82.164.0/22 maxlen: 22
                          31.217.208.0/21 maxlen: 21
                          46.34.190.0/24 maxlen: 24
                          188.75.65.0/24 maxlen: 24
                          188.75.71.0/24 maxlen: 24
                          188.75.84.0/24 maxlen: 24
                          188.75.88.0/24 maxlen: 24
                          185.101.228.0/24 maxlen: 24
                          185.101.231.0/24 maxlen: 24
                          46.34.177.0/24 maxlen: 24
                          188.75.98.0/24 maxlen: 24
                          188.75.93.0/24 maxlen: 24
                          188.75.95.0/24 maxlen: 24
                          188.75.104.0/24 maxlen: 24
                          188.75.105.0/24 maxlen: 24
                          188.75.106.0/24 maxlen: 24
                          188.75.107.0/24 maxlen: 24
                          188.75.109.0/24 maxlen: 24
                          86.109.34.0/23 maxlen: 23
                          86.109.36.0/23 maxlen: 23
                          86.109.32.0/19 maxlen: 19
                          188.75.124.0/24 maxlen: 24
                          86.109.44.0/23 maxlen: 23
                          86.109.46.0/23 maxlen: 23
                          188.75.127.0/24 maxlen: 24
                          86.109.48.0/21 maxlen: 21
                          86.109.48.0/20 maxlen: 20
                          185.142.232.0/24 maxlen: 24
                          86.109.56.0/23 maxlen: 23
                          86.109.58.0/23 maxlen: 23
                          86.109.60.0/22 maxlen: 22
                          185.40.240.0/22 maxlen: 22
                          217.66.192.0/20 maxlen: 20
                          217.66.192.0/19 maxlen: 19
                          217.66.206.0/23 maxlen: 23
                          217.66.212.0/22 maxlen: 22
                          89.235.71.0/24 maxlen: 24
                          79.174.160.0/21 maxlen: 21
                          217.66.216.0/22 maxlen: 22
                          89.235.70.0/24 maxlen: 24
                          217.66.220.0/22 maxlen: 22
                          89.235.76.0/24 maxlen: 24
                          185.208.149.0/24 maxlen: 24
                          185.208.151.0/24 maxlen: 24
                          185.208.148.0/24 maxlen: 24
                          185.208.150.0/24 maxlen: 24
                          217.146.208.0/20 maxlen: 20
                          46.32.2.0/24 maxlen: 24
                          46.32.4.0/24 maxlen: 24
                          46.32.3.0/24 maxlen: 24
                          46.32.6.0/24 maxlen: 24
                          46.32.8.0/24 maxlen: 24
                          46.32.7.0/24 maxlen: 24
                          46.32.12.0/24 maxlen: 24
                          46.32.13.0/24 maxlen: 24
                          46.32.15.0/24 maxlen: 24
                          46.32.20.0/24 maxlen: 24
                          46.32.21.0/24 maxlen: 24
                          46.32.23.0/24 maxlen: 24
                          46.32.26.0/24 maxlen: 24
                          46.32.30.0/24 maxlen: 24
                          87.247.179.0/24 maxlen: 24
                          46.32.25.0/24 maxlen: 24
                          46.32.27.0/24 maxlen: 24
                          176.221.68.0/24 maxlen: 24
                          176.221.70.0/24 maxlen: 24
                          109.201.18.0/23 maxlen: 23
                          185.12.60.0/23 maxlen: 23
                          185.153.185.0/24 maxlen: 24
                          185.12.60.0/22 maxlen: 22
                          185.133.152.0/22 maxlen: 22
                          109.201.0.0/19 maxlen: 24
                          178.248.43.0/24 maxlen: 24
                          178.248.42.0/24 maxlen: 24
                          176.221.64.0/24 maxlen: 24
                          80.253.128.0/19 maxlen: 24
                          79.132.214.0/23 maxlen: 23
                          79.132.220.0/22 maxlen: 22
                          79.132.200.0/21 maxlen: 21
                          79.132.208.0/20 maxlen: 20
                          79.132.208.0/22 maxlen: 22
                          185.4.17.0/24 maxlen: 24
                          80.71.112.0/24 maxlen: 24
                          80.71.115.0/24 maxlen: 24
                          80.71.114.0/24 maxlen: 24
                          80.71.121.0/24 maxlen: 24
                          80.71.127.0/24 maxlen: 24
                          80.71.126.0/24 maxlen: 24
                          185.104.230.0/23 maxlen: 23
                          185.104.228.0/22 maxlen: 22
                          37.191.76.0/24 maxlen: 24
                          78.111.8.0/24 maxlen: 24
                          78.111.9.0/24 maxlen: 24
                          78.111.14.0/24 maxlen: 24
                          81.29.240.0/24 maxlen: 24
                          81.29.242.0/24 maxlen: 24
                          81.29.244.0/24 maxlen: 24
                          81.29.241.0/24 maxlen: 24
                          81.29.243.0/24 maxlen: 24
                          81.29.253.0/24 maxlen: 24
                          81.29.255.0/24 maxlen: 24
                          46.34.188.0/22 maxlen: 24
                          185.21.68.0/22 maxlen: 22
                          46.34.188.0/23 maxlen: 23
                          46.34.190.0/23 maxlen: 24
                          185.21.76.0/22 maxlen: 22
                          185.21.78.0/23 maxlen: 23
                          188.75.64.0/20 maxlen: 20
                          188.75.64.0/19 maxlen: 19
                          188.75.64.0/18 maxlen: 18
                          188.75.80.0/21 maxlen: 21
                          188.75.88.0/22 maxlen: 22
                          188.75.86.0/23 maxlen: 23
                          185.101.228.0/22 maxlen: 22
                          46.34.164.0/22 maxlen: 22
                          46.34.168.0/21 maxlen: 21
                          46.34.176.0/20 maxlen: 24
                          46.34.176.0/23 maxlen: 23
                          46.34.178.0/23 maxlen: 23
                          46.34.180.0/22 maxlen: 22
                          46.34.184.0/22 maxlen: 22
                          188.75.96.0/22 maxlen: 22
                          188.75.92.0/23 maxlen: 23
                          188.75.100.0/23 maxlen: 23
                          188.75.108.0/22 maxlen: 22
                          188.75.110.0/23 maxlen: 23
                          188.75.116.0/22 maxlen: 22
                          86.109.38.0/24 maxlen: 24
                          86.109.39.0/24 maxlen: 24
                          188.75.124.0/22 maxlen: 22
                          86.109.43.0/24 maxlen: 24
                          86.109.40.0/24 maxlen: 24
                          188.75.120.0/23 maxlen: 23
                          86.109.42.0/24 maxlen: 24
                          86.109.51.0/24 maxlen: 24
                          185.142.232.0/22 maxlen: 23
                          86.109.58.0/24 maxlen: 24
                          86.109.53.0/24 maxlen: 24
                          86.109.55.0/24 maxlen: 24
                          86.109.59.0/24 maxlen: 24
                          86.109.61.0/24 maxlen: 24
                          86.109.63.0/24 maxlen: 24
                          37.114.192.0/18 maxlen: 18
                          2a06:db80::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304781987 (0x122a9aa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Apr 19 13:13:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f1d246633790d2e12751febfc3ebf2717fb528a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6b:0a:9a:9b:4d:54:86:53:ca:3e:9b:32:88:
                    cd:7f:8f:6b:13:94:05:93:5e:52:94:59:a3:aa:d1:
                    62:e0:9a:7f:e4:49:e6:2a:3b:fb:5b:76:6b:00:20:
                    80:99:aa:f3:f3:c4:85:08:1f:55:16:0a:7c:ef:5d:
                    99:9e:67:6b:01:c2:49:2f:3d:66:51:46:06:24:d7:
                    ab:e7:22:42:f5:21:07:f8:cd:81:16:97:18:84:cf:
                    54:00:d2:5d:24:d4:fe:56:a6:1a:61:4b:1c:16:32:
                    69:78:32:fa:30:e4:dc:fa:37:f9:1c:ff:a3:0a:99:
                    48:da:26:26:69:b1:92:57:1e:c2:27:79:67:bc:92:
                    6c:b3:5a:7e:c2:7d:a0:ed:0b:e5:c6:ab:a7:fa:7f:
                    54:ec:ef:ab:46:ce:3e:01:66:d3:c1:77:dd:2e:78:
                    94:2c:64:8a:01:5c:fd:c2:6a:c7:8f:d9:7a:3d:61:
                    27:b3:57:33:a0:54:07:5c:95:38:26:15:90:45:4e:
                    d3:72:6a:07:66:9a:3e:18:86:a9:11:8f:8f:51:00:
                    5b:97:cd:1e:8d:26:60:f6:ef:c4:81:86:7d:08:bd:
                    df:05:70:3e:77:20:47:df:b4:48:fb:c0:ad:b5:1e:
                    6e:27:33:83:c9:68:67:65:77:07:ba:77:82:d1:6c:
                    6e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1D:24:66:33:79:0D:2E:12:75:1F:EB:FC:3E:BF:27:17:FB:52:8A
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/bx0kZjN5DS4SdR_r_D6_Jxf7Uoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.200.66.0/24
                  5.200.70.0/23
                  31.217.208.0/21
                  37.114.192.0/18
                  37.191.76.0/24
                  46.32.0.0/19
                  46.34.164.0-46.34.191.255
                  78.111.8.0/21
                  78.154.32.0/19
                  78.158.167.0/24
                  79.132.200.0-79.132.223.255
                  79.174.160.0/21
                  80.71.112.0/20
                  80.253.128.0/19
                  81.29.240.0/20
                  86.109.32.0/19
                  87.247.179.0-87.247.183.255
                  89.235.68.0-89.235.79.255
                  109.201.0.0/19
                  176.221.64.0/21
                  178.248.40.0/21
                  185.4.16.0/22
                  185.12.60.0/22
                  185.21.68.0/22
                  185.21.76.0/22
                  185.40.240.0/22
                  185.45.188.0/22
                  185.70.60.0/22
                  185.82.164.0/22
                  185.101.228.0/22
                  185.104.228.0/22
                  185.133.152.0/22
                  185.142.232.0/22
                  185.153.184.0/22
                  185.208.148.0/22
                  188.75.64.0/18
                  213.195.0.0/19
                  217.66.192.0/19
                  217.146.208.0/20
                IPv6:
                  2a06:db80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5c:d0:42:ff:99:01:cf:2a:ec:69:30:7a:af:0d:fc:ec:e3:04:
         af:5c:6a:91:ca:45:4f:5a:a2:bd:e8:ca:10:af:fb:e3:d8:63:
         61:7a:f9:b7:63:df:42:2a:76:55:68:f2:43:19:79:3f:a9:ef:
         ed:e4:f5:41:9d:a0:54:ff:19:4b:27:0c:14:30:55:76:5f:50:
         a8:83:6d:e6:41:18:6b:dd:2c:f5:20:66:4b:65:f9:48:71:f2:
         65:94:2b:bf:e1:26:ca:18:fa:d1:6d:96:58:74:25:3b:73:9e:
         f9:bd:6b:9d:12:a1:20:97:f1:13:ff:33:8a:be:6d:81:c6:26:
         ac:4f:34:b0:74:1a:8c:a7:16:03:9a:92:2c:10:20:fd:2f:14:
         67:34:7c:12:a0:f8:73:c6:45:3e:d0:85:77:45:23:8b:c7:c5:
         64:a5:16:be:70:07:21:38:bc:71:fd:3f:b5:77:9e:32:d0:76:
         5f:3e:8e:e6:e8:fe:7e:0e:91:c9:48:51:c6:e0:f2:a5:48:13:
         a2:f2:0e:74:50:a9:28:6f:58:03:b6:0b:66:f1:a8:04:f8:a0:
         da:d4:1a:17:16:48:d5:c9:c9:d2:14:0d:34:28:c6:04:e8:67:
         66:14:9e:77:2c:60:ab:55:31:ab:9a:a1:e4:b6:18:86:74:29:
         4c:20:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org