Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TjIeNrcmRKVLIOGDgcjcXImdPiU.roa
File:                     TjIeNrcmRKVLIOGDgcjcXImdPiU.roa (raw, json)
Hash identifier:          s5fTBtNwl1HnrbKa/leELUKQRb08rHVq9WcbWzHff2g=
Subject key identifier:   4E:32:1E:36:B7:26:44:A5:4B:20:E1:83:81:C8:DC:5C:89:9D:3E:25
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       019861D24F42D663D1F489783971FD3B12C2
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TjIeNrcmRKVLIOGDgcjcXImdPiU.roa
Signing time:             Thu 31 Jul 2025 18:50:29 +0000
ROA not before:           Thu 31 Jul 2025 18:50:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6939
IP address blocks:        64.188.108.0/22 maxlen: 24
                          64.188.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:61:d2:4f:42:d6:63:d1:f4:89:78:39:71:fd:3b:12:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Jul 31 18:50:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4e321e36b72644a54b20e18381c8dc5c899d3e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:a5:b1:ee:e3:16:df:d2:25:57:40:a6:dd:
                    ed:ae:b9:65:f3:93:7c:d3:1b:b3:e2:17:00:5e:ab:
                    75:ed:95:dd:50:b3:f6:2b:7a:9f:23:c5:ef:44:78:
                    a5:f1:24:a8:f4:17:ba:05:d8:e2:a5:ec:05:7d:b8:
                    f0:6b:c7:da:fe:16:c5:05:70:f7:73:91:8f:5c:78:
                    02:8d:74:79:c5:70:b7:58:2f:07:7c:da:26:66:8e:
                    12:1e:45:5a:64:63:e4:fd:38:09:80:8a:28:a0:7d:
                    e7:94:2d:8b:a2:6e:e7:4d:df:51:d6:7f:ce:1a:61:
                    a1:9f:9e:42:02:fa:57:ef:bc:a7:e5:da:c0:52:ce:
                    66:28:66:b9:28:36:88:2c:c9:6d:b5:81:91:c6:c4:
                    9a:1e:fa:3e:2d:27:9e:6e:0c:03:c7:d4:14:b5:4a:
                    39:9b:70:0b:5f:2a:17:d9:e2:70:6b:55:9e:4b:cb:
                    ef:97:fe:49:12:c5:bb:8a:c7:f0:ed:33:5c:6f:30:
                    71:f9:5d:bf:9e:bf:89:d4:2a:13:0b:83:c7:44:ec:
                    c4:62:21:62:c2:fd:e7:3e:f5:c7:49:67:a1:07:e8:
                    b5:ce:5f:db:58:15:e5:f0:3a:08:fc:e1:48:18:6a:
                    a2:a6:88:ac:ba:20:62:8e:f9:b7:46:e7:27:0b:2b:
                    a5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:32:1E:36:B7:26:44:A5:4B:20:E1:83:81:C8:DC:5C:89:9D:3E:25
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TjIeNrcmRKVLIOGDgcjcXImdPiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.188.108.0/22
                  64.188.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:8d:03:71:24:02:4b:64:35:81:3a:c9:56:db:b2:a6:62:cd:
         a3:97:c9:77:0a:9c:3d:57:cc:02:e6:01:d2:18:b9:0b:66:df:
         a0:90:f9:ac:72:3b:97:d4:65:c2:a5:95:c1:3f:73:d2:c7:79:
         a9:6b:65:61:64:52:87:2e:e7:ce:28:69:b6:8a:6c:fc:23:f6:
         c8:10:72:00:c7:e6:d8:51:95:55:a2:56:5a:6b:59:06:4a:0e:
         13:91:f8:e6:34:c5:ea:1e:f9:0f:48:31:66:68:5c:88:b8:15:
         8a:47:9b:20:78:1f:38:fb:c8:b8:70:97:8b:15:9b:36:a2:73:
         40:49:98:42:35:20:f7:9a:f1:48:8c:e1:de:9e:4b:4c:df:31:
         21:25:d6:7c:0c:e3:d7:9b:46:50:65:1b:a6:ce:0d:86:83:d5:
         97:6b:80:cf:f8:41:d3:74:bc:d7:58:6e:c1:7e:25:1b:cb:3e:
         14:97:48:4f:5c:1c:ce:e1:8d:6c:83:35:d4:18:e2:c3:60:98:
         8c:6b:47:08:07:23:6f:63:58:a7:06:69:3c:5c:7c:99:44:52:
         ec:28:8b:05:52:91:02:94:d6:5b:c9:b2:cb:c5:3d:31:9f:89:
         61:5e:2b:a3:23:64:46:3d:4c:71:4a:ec:81:3b:cc:4a:92:ec:
         b7:f4:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:25 2025 by rpki-client