Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mHPJcHeN4WHN6iEbkfIttjYcgio.roa
File:                     mHPJcHeN4WHN6iEbkfIttjYcgio.roa (raw, json)
Hash identifier:          ChVKCkcOtTiYItgNK6O0oe5XXXpeqaLPcWc4PNE96IY=
Subject key identifier:   98:73:C9:70:77:8D:E1:61:CD:EA:21:1B:91:F2:2D:B6:36:1C:82:2A
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       018A1858C3DD562B8EBAE4FF3079276D0556
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mHPJcHeN4WHN6iEbkfIttjYcgio.roa
Signing time:             Mon 21 Aug 2023 13:46:25 +0000
ROA not before:           Mon 21 Aug 2023 13:46:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50113
IP address blocks:        185.174.139.0/24 maxlen: 24
                          194.63.141.0/24 maxlen: 24
                          194.63.143.0/24 maxlen: 24
                          194.63.140.0/22 maxlen: 22
                          194.63.140.0/24 maxlen: 24
                          194.63.142.0/24 maxlen: 24
                          194.63.142.0/23 maxlen: 23
                          194.63.140.0/23 maxlen: 23
                          194.53.52.0/24 maxlen: 24
                          5.252.116.0/24 maxlen: 24
                          185.139.68.28/32 maxlen: 32
                          5.180.137.0/24 maxlen: 24
                          5.180.136.0/24 maxlen: 24
                          45.8.211.0/24 maxlen: 24
                          91.217.77.0/24 maxlen: 24
                          194.67.198.108/32 maxlen: 32
                          185.180.230.0/24 maxlen: 24
                          194.67.196.127/32 maxlen: 32
                          194.67.198.7/32 maxlen: 32
                          194.67.208.6/32 maxlen: 32
                          147.78.66.7/32 maxlen: 32
                          213.108.198.0/24 maxlen: 24
                          213.108.199.0/24 maxlen: 24
                          213.108.197.0/24 maxlen: 24
                          194.67.208.12/32 maxlen: 32
                          45.89.64.0/24 maxlen: 24
                          185.180.231.87/32 maxlen: 32
                          5.180.136.221/32 maxlen: 32
                          185.188.180.0/24 maxlen: 24
                          192.162.100.0/22 maxlen: 22
                          194.67.208.48/32 maxlen: 32
                          192.162.103.0/24 maxlen: 24
                          192.162.101.0/24 maxlen: 24
                          185.172.131.0/24 maxlen: 24
                          192.162.102.0/24 maxlen: 24
                          192.162.100.0/24 maxlen: 24
                          185.172.130.0/24 maxlen: 24
                          194.67.203.54/32 maxlen: 32
                          193.0.200.0/24 maxlen: 24
                          193.0.202.0/24 maxlen: 24
                          193.0.203.0/24 maxlen: 24
                          185.17.3.102/32 maxlen: 32
                          185.189.12.0/22 maxlen: 22
                          185.189.13.0/24 maxlen: 24
                          185.189.15.0/24 maxlen: 24
                          5.180.136.76/32 maxlen: 32
                          185.189.12.0/24 maxlen: 24
                          185.189.14.0/24 maxlen: 24
                          193.168.226.0/24 maxlen: 24
                          185.125.50.0/24 maxlen: 24
                          185.104.248.0/24 maxlen: 24
                          185.139.70.116/32 maxlen: 32
                          2a04:5200:fff2::/48 maxlen: 48
                          2a0f:7300::/32 maxlen: 32
                          2a09:5303::/32 maxlen: 32
                          2a0a:9300::/48 maxlen: 48
                          2a04:5200:a::/48 maxlen: 48
                          2a04:5200:ff00::/48 maxlen: 48
                          2a04:5200::/48 maxlen: 48
                          2a04:5200:fff9::/48 maxlen: 48
                          2a04:5200:fff3::/48 maxlen: 48
                          2a04:5200:fff6::/48 maxlen: 48
                          2a04:5205::/32 maxlen: 32
                          2a04:5202::/32 maxlen: 32
                          2a04:5203::/32 maxlen: 32
                          2a0a:9300:aaaa::/48 maxlen: 48
                          2a04:5200:1::/48 maxlen: 48
                          2a0a:9300::/32 maxlen: 32
                          2a04:5200:fff7::/48 maxlen: 48
                          2a04:5204::/32 maxlen: 32
                          2a04:5200::/32 maxlen: 32
                          2a0f:4680::/32 maxlen: 32
                          2a04:5200:fff4::/48 maxlen: 48
                          2a04:5206::/32 maxlen: 32
                          2a04:5200:fff8::/48 maxlen: 48
                          2a04:5200:fff1::/48 maxlen: 48
                          2a04:5207::/32 maxlen: 32
                          2a0b:da00::/29 maxlen: 29
                          2a04:5200:fff5::/48 maxlen: 48
                          2a04:5200:ff10::/48 maxlen: 48
                          2a04:5200::/29 maxlen: 29
                          2a04:5200:ffff::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:18:58:c3:dd:56:2b:8e:ba:e4:ff:30:79:27:6d:05:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Aug 21 13:46:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9873c970778de161cdea211b91f22db6361c822a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:50:9c:72:eb:a8:4d:36:1c:9b:6b:85:3e:
                    26:f6:d4:88:b8:ef:97:cf:e6:ac:54:09:67:0e:54:
                    98:d5:11:61:d6:84:f8:99:80:f2:29:7f:84:8d:c8:
                    1a:d6:53:5a:95:b7:dc:e0:0e:cc:66:fa:91:a6:d5:
                    34:18:96:a0:09:2c:aa:b9:b6:cc:a5:d8:1c:a3:5b:
                    5a:6d:f0:2e:a5:a1:22:1b:e5:1c:f3:16:b7:e1:3b:
                    ee:41:e6:06:a4:10:43:e9:cb:23:8e:cf:9f:67:2b:
                    aa:28:85:f4:1a:c5:d9:26:d4:e2:5e:9f:73:9b:5b:
                    a7:d8:bc:40:3d:3b:b3:fa:b6:c9:08:28:9c:a2:80:
                    30:7d:a8:4a:ae:b8:ac:63:10:69:36:23:c2:81:90:
                    92:fa:fb:9f:c0:81:ca:22:01:7d:e9:c0:1f:ac:4b:
                    46:ac:14:39:20:19:38:78:74:97:fe:65:99:ec:80:
                    06:01:3f:1c:86:e5:d9:2a:20:27:34:33:5e:fb:50:
                    3a:75:68:32:aa:eb:f4:a2:99:b9:54:5a:ef:ba:bd:
                    80:30:6d:9e:d9:79:0c:f1:92:eb:5c:15:1c:61:fc:
                    d8:b5:1d:9b:43:0c:38:22:40:86:ab:c7:30:fe:50:
                    5a:c2:70:2c:49:c4:33:01:70:64:6a:13:26:00:8e:
                    e7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:73:C9:70:77:8D:E1:61:CD:EA:21:1B:91:F2:2D:B6:36:1C:82:2A
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mHPJcHeN4WHN6iEbkfIttjYcgio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.136.0/23
                  5.252.116.0/24
                  45.8.211.0/24
                  45.89.64.0/24
                  91.217.77.0/24
                  147.78.66.7/32
                  185.17.3.102/32
                  185.104.248.0/24
                  185.125.50.0/24
                  185.139.68.28/32
                  185.139.70.116/32
                  185.172.130.0/23
                  185.174.139.0/24
                  185.180.230.0/24
                  185.180.231.87/32
                  185.188.180.0/24
                  185.189.12.0/22
                  192.162.100.0/22
                  193.0.200.0/24
                  193.0.202.0/23
                  193.168.226.0/24
                  194.53.52.0/24
                  194.63.140.0/22
                  194.67.196.127/32
                  194.67.198.7/32
                  194.67.198.108/32
                  194.67.203.54/32
                  194.67.208.6/32
                  194.67.208.12/32
                  194.67.208.48/32
                  213.108.197.0-213.108.199.255
                IPv6:
                  2a04:5200::/29
                  2a09:5303::/32
                  2a0a:9300::/32
                  2a0b:da00::/29
                  2a0f:4680::/32
                  2a0f:7300::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:f6:04:b7:cd:dc:66:09:dd:19:1a:99:5a:61:13:f4:94:82:
         34:86:23:e1:11:60:28:49:00:44:37:be:f7:cd:27:f1:a8:95:
         b3:e7:23:2c:00:1f:6f:68:b7:9c:a7:6f:92:9e:54:e2:46:02:
         b4:a8:47:62:f3:04:b3:cf:fc:a4:fc:98:55:2b:10:20:18:6c:
         db:0b:3a:26:78:a4:d1:de:b7:2e:30:10:05:a3:2a:54:8b:2d:
         3b:82:63:c8:35:f5:0f:b4:75:84:d0:bb:e3:0d:30:b3:ea:a6:
         8f:54:a9:2c:1f:07:36:b9:ce:e1:e1:0b:4f:09:c5:83:6d:00:
         a1:d4:28:c6:da:e9:e3:f2:89:fc:bd:a4:f0:0e:4d:92:89:5a:
         77:35:16:ec:e4:a6:66:51:87:4d:fc:f4:c0:0e:75:fe:b2:f8:
         b7:6d:6a:47:e2:16:02:ae:29:fc:36:5b:37:1f:4a:75:7b:76:
         cf:33:43:4b:48:cb:6f:26:f6:2c:65:60:a0:de:14:07:d3:26:
         d9:11:72:1e:d5:1b:46:83:af:c6:19:be:88:81:6d:f5:e7:7d:
         f4:fc:3f:ad:47:7a:23:56:8f:11:22:9d:39:99:02:92:4a:d2:
         e1:0d:21:0d:dc:d8:bf:e6:a8:c3:8b:0f:ca:32:93:a1:d1:b7:
         70:67:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org