Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/fsDfR-sW6-gp5Gg2NNJkzZo5TJ0.roa
File:                     fsDfR-sW6-gp5Gg2NNJkzZo5TJ0.roa (raw, json)
Hash identifier:          QRnsAHJQ3bzIe1Od2iKHtfowNh9ZEpHxrIrNNADmWmQ=
Subject key identifier:   7E:C0:DF:47:EB:16:EB:E8:29:E4:68:36:34:D2:64:CD:9A:39:4C:9D
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       0181D7704770655BD46CE85DFDC00D4BA314
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/fsDfR-sW6-gp5Gg2NNJkzZo5TJ0.roa
Signing time:             Thu 07 Jul 2022 06:54:28 +0000
ROA not before:           Thu 07 Jul 2022 06:54:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8492
IP address blocks:        37.221.206.0/24 maxlen: 24
                          37.221.203.0/24 maxlen: 24
                          37.221.204.0/23 maxlen: 23
                          37.221.200.0/23 maxlen: 23
                          85.114.0.0/19 maxlen: 19
                          92.255.44.0/24 maxlen: 24
                          185.241.176.0/22 maxlen: 22
                          95.161.144.0/21 maxlen: 21
                          145.255.232.0/24 maxlen: 24
                          145.255.233.0/24 maxlen: 24
                          95.161.152.0/22 maxlen: 24
                          95.161.156.0/22 maxlen: 22
                          145.255.236.0/22 maxlen: 22
                          145.255.234.0/23 maxlen: 23
                          95.161.164.0/22 maxlen: 22
                          95.161.160.0/19 maxlen: 19
                          87.249.55.0/24 maxlen: 24
                          62.32.64.0/24 maxlen: 24
                          62.32.66.0/23 maxlen: 23
                          62.32.70.0/24 maxlen: 24
                          62.32.68.0/23 maxlen: 23
                          62.32.75.0/24 maxlen: 24
                          62.32.76.0/24 maxlen: 24
                          62.32.73.0/24 maxlen: 24
                          62.32.74.0/24 maxlen: 24
                          62.32.84.0/23 maxlen: 23
                          62.32.83.0/24 maxlen: 24
                          62.32.91.0/24 maxlen: 24
                          62.32.89.0/24 maxlen: 24
                          62.32.90.0/24 maxlen: 24
                          62.32.88.0/24 maxlen: 24
                          62.32.94.0/24 maxlen: 24
                          80.79.64.0/21 maxlen: 21
                          80.79.76.0/24 maxlen: 24
                          80.79.72.0/22 maxlen: 22
                          80.79.79.0/24 maxlen: 24
                          185.119.0.0/22 maxlen: 22
                          217.79.4.0/23 maxlen: 23
                          217.79.0.0/22 maxlen: 22
                          217.79.10.0/23 maxlen: 23
                          217.79.8.0/24 maxlen: 24
                          217.79.9.0/24 maxlen: 24
                          217.79.6.0/23 maxlen: 23
                          217.79.15.0/24 maxlen: 24
                          217.79.14.0/24 maxlen: 24
                          217.79.12.0/23 maxlen: 23
                          149.126.16.0/22 maxlen: 22
                          149.126.22.0/24 maxlen: 24
                          149.126.23.0/24 maxlen: 24
                          149.126.20.0/23 maxlen: 23
                          37.77.132.0/24 maxlen: 24
                          37.77.130.0/23 maxlen: 23
                          37.77.129.0/24 maxlen: 24
                          37.77.133.0/24 maxlen: 24
                          37.77.134.0/23 maxlen: 23
                          46.231.208.0/24 maxlen: 24
                          46.231.209.0/24 maxlen: 24
                          46.231.212.0/23 maxlen: 23
                          46.231.210.0/23 maxlen: 23
                          46.231.215.0/24 maxlen: 24
                          46.231.214.0/24 maxlen: 24
                          93.191.58.0/24 maxlen: 24
                          93.191.63.0/24 maxlen: 24
                          93.191.60.0/24 maxlen: 24
                          185.171.192.0/22 maxlen: 22
                          178.16.144.0/22 maxlen: 22
                          178.16.152.0/22 maxlen: 22
                          178.16.150.0/24 maxlen: 24
                          178.16.151.0/24 maxlen: 24
                          178.16.148.0/23 maxlen: 23
                          178.16.158.0/23 maxlen: 23
                          178.16.156.0/24 maxlen: 24
                          185.244.132.0/22 maxlen: 22
                          80.250.88.0/21 maxlen: 21
                          80.250.87.0/24 maxlen: 24
                          185.7.232.0/22 maxlen: 22
                          46.34.136.0/21 maxlen: 21
                          79.142.80.0/21 maxlen: 21
                          46.34.134.0/24 maxlen: 24
                          79.142.88.0/22 maxlen: 22
                          46.34.148.0/22 maxlen: 22
                          79.142.92.0/24 maxlen: 24
                          185.102.10.0/24 maxlen: 24
                          185.102.8.0/22 maxlen: 22
                          185.81.220.0/22 maxlen: 22
                          95.161.232.0/22 maxlen: 22
                          95.161.228.0/22 maxlen: 22
                          95.161.236.0/22 maxlen: 22
                          79.134.192.0/24 maxlen: 24
                          79.134.198.0/23 maxlen: 23
                          79.134.196.0/23 maxlen: 23
                          79.134.194.0/23 maxlen: 23
                          79.134.193.0/24 maxlen: 24
                          95.161.180.0/22 maxlen: 22
                          79.134.200.0/21 maxlen: 21
                          95.161.192.0/22 maxlen: 22
                          95.161.192.0/19 maxlen: 19
                          95.161.188.0/22 maxlen: 22
                          79.134.213.0/24 maxlen: 24
                          79.134.212.0/24 maxlen: 24
                          79.134.208.0/22 maxlen: 22
                          79.134.214.0/23 maxlen: 23
                          79.134.216.0/22 maxlen: 22
                          95.161.213.0/24 maxlen: 24
                          79.134.222.0/23 maxlen: 23
                          79.134.220.0/23 maxlen: 23
                          95.161.214.0/23 maxlen: 23
                          95.161.218.0/23 maxlen: 23
                          95.161.216.0/23 maxlen: 23
                          95.161.220.0/24 maxlen: 24
                          46.229.210.0/23 maxlen: 23
                          46.229.210.0/24 maxlen: 24
                          46.229.211.0/24 maxlen: 24
                          46.229.208.0/23 maxlen: 23
                          46.229.208.0/22 maxlen: 22
                          2a01:590::/32 maxlen: 32
                          2a05:a400::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d7:70:47:70:65:5b:d4:6c:e8:5d:fd:c0:0d:4b:a3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Jul  7 06:54:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ec0df47eb16ebe829e4683634d264cd9a394c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dd:e2:2a:58:3b:99:b7:a9:e4:c6:d9:71:7d:
                    08:4e:6e:e8:41:aa:17:ba:de:6d:0e:a9:9a:68:05:
                    97:6d:78:d7:38:ae:16:f3:4e:ce:55:6c:9a:3e:0d:
                    02:ab:02:a7:36:52:bc:a6:6c:01:76:66:71:94:78:
                    09:1b:2b:54:ed:4d:50:9c:dc:7f:f3:0d:93:38:ff:
                    07:50:0b:27:2b:b2:06:91:cc:bf:fb:9c:de:fe:4b:
                    ac:2c:53:3a:4d:cc:13:4e:52:a8:3a:1d:41:4a:5e:
                    79:56:ff:8d:e0:d2:a7:78:bc:1b:69:38:1f:c1:c1:
                    41:78:44:76:a2:33:5f:6f:de:85:92:f5:fb:3d:0f:
                    bd:eb:3c:68:bd:e2:1b:fc:a0:5a:97:f4:9f:1c:4b:
                    85:81:ab:48:cc:27:84:f7:87:3e:07:28:4a:ec:0a:
                    ac:77:4d:b0:c9:52:69:eb:9b:89:5c:45:b4:84:ea:
                    5a:07:e2:c4:6e:3a:65:c3:ea:94:44:46:dd:f5:c8:
                    76:5b:63:79:d2:14:3f:cd:78:0c:ed:ef:87:7b:5d:
                    ce:bc:3c:88:15:38:da:a0:08:6a:ae:28:d8:66:7d:
                    fd:f2:3f:37:f0:d4:58:b7:bd:50:c7:f1:84:74:8e:
                    91:ac:47:49:ca:33:00:e4:fe:ff:d2:14:ef:65:4c:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C0:DF:47:EB:16:EB:E8:29:E4:68:36:34:D2:64:CD:9A:39:4C:9D
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/fsDfR-sW6-gp5Gg2NNJkzZo5TJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.129.0-37.77.135.255
                  37.221.200.0/23
                  37.221.203.0-37.221.206.255
                  46.34.134.0/24
                  46.34.136.0/21
                  46.34.148.0/22
                  46.229.208.0/22
                  46.231.208.0/21
                  62.32.64.0/24
                  62.32.66.0-62.32.70.255
                  62.32.73.0-62.32.76.255
                  62.32.83.0-62.32.85.255
                  62.32.88.0/22
                  62.32.94.0/24
                  79.134.192.0/19
                  79.142.80.0-79.142.92.255
                  80.79.64.0-80.79.76.255
                  80.79.79.0/24
                  80.250.87.0-80.250.95.255
                  85.114.0.0/19
                  87.249.55.0/24
                  92.255.44.0/24
                  93.191.58.0/24
                  93.191.60.0/24
                  93.191.63.0/24
                  95.161.144.0-95.161.223.255
                  95.161.228.0-95.161.239.255
                  145.255.232.0/21
                  149.126.16.0/21
                  178.16.144.0-178.16.156.255
                  178.16.158.0/23
                  185.7.232.0/22
                  185.81.220.0/22
                  185.102.8.0/22
                  185.119.0.0/22
                  185.171.192.0/22
                  185.241.176.0/22
                  185.244.132.0/22
                  217.79.0.0/20
                IPv6:
                  2a01:590::/32
                  2a05:a400::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:65:5d:d3:79:3b:b8:47:bc:18:9f:d2:39:97:42:f0:03:f5:
         80:e1:72:ca:4c:7d:2e:52:1f:f2:9b:04:c1:53:26:e7:52:40:
         13:37:8d:78:7b:0c:64:7a:c0:65:71:45:b0:2c:6d:90:93:bc:
         27:5c:77:a1:86:cb:de:03:30:60:8d:ee:d9:ba:c6:a3:50:39:
         99:da:3c:cc:80:72:73:d3:5e:65:97:40:06:27:00:04:4e:9e:
         55:29:cf:b0:cd:dd:5d:a7:36:73:9c:95:e8:3e:ae:94:31:a4:
         43:5e:f7:2e:43:e5:49:ae:0e:e4:da:09:f6:2e:4a:6f:d5:27:
         a0:bb:c9:99:b9:ca:1f:d7:3e:68:74:35:03:09:f0:44:cc:37:
         08:d2:bc:ea:c5:9e:ae:9c:da:92:70:c0:48:5b:7f:a1:2a:8f:
         71:da:ba:2e:cc:84:5b:e2:aa:55:92:18:3b:b3:ef:94:50:99:
         77:f2:a7:e5:89:c1:01:59:83:6f:a9:53:3b:05:0d:79:c0:b0:
         2f:3e:b6:64:1c:b9:2b:61:a3:c6:40:16:5e:0b:cb:2f:29:bb:
         02:05:e8:16:56:6c:50:15:5b:32:73:99:43:06:d7:8c:1d:ea:
         0f:34:95:6b:f0:d9:4f:87:e7:8f:00:e6:e6:f6:7c:52:53:4f:
         4d:8b:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:51 2024 by rpki-client on console-fra.rpki-client.org