Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/FxGYM_hv02AaXIYDo9H_3KmDiOE.roa
File: FxGYM_hv02AaXIYDo9H_3KmDiOE.roa (raw, json)
Hash identifier: ilnjKiRicNaYKGwZAGueokd7ASW/oQ+K5C8wA/h2Pvw=
Subject key identifier: 17:11:98:33:F8:6F:D3:60:1A:5C:86:03:A3:D1:FF:DC:A9:83:88:E1
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 0195AE76B3EA0A5EE56C357E135FB7CA1749
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/FxGYM_hv02AaXIYDo9H_3KmDiOE.roa
Signing time: Wed 19 Mar 2025 12:52:49 +0000
ROA not before: Wed 19 Mar 2025 12:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 212.29.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:76:b3:ea:0a:5e:e5:6c:35:7e:13:5f:b7:ca:17:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Mar 19 12:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17119833f86fd3601a5c8603a3d1ffdca98388e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:b2:84:86:1e:4d:e4:b8:20:2e:f7:f8:c5:
d1:fb:9d:56:f1:70:1f:55:ec:a7:6f:f4:71:e5:c1:
d0:f2:3a:03:9f:23:6b:b5:50:07:f1:44:a0:e4:04:
86:45:d8:0f:94:88:c8:db:7b:75:01:62:87:48:08:
ea:39:8c:89:5a:ad:91:46:08:0f:78:ee:47:e6:8b:
5b:1e:70:dd:38:8a:75:be:77:22:88:eb:79:a4:c7:
99:a6:f7:d1:14:82:04:81:d8:fd:bf:ce:c5:1b:d4:
08:b0:5a:d3:1d:c7:9a:73:3a:a2:c6:36:cc:19:f1:
46:a5:12:fb:5a:81:51:1c:e8:6a:df:b5:e0:ec:7a:
5e:c7:a9:93:9d:8b:c6:3f:2b:0b:d5:a1:ba:a8:17:
27:4d:b0:30:75:da:80:6e:14:4a:74:41:4a:be:4d:
56:25:3a:2d:ec:cb:db:cf:01:66:28:3e:65:98:f0:
7e:a3:7e:81:61:7b:2e:51:3b:20:2d:2e:d5:9f:cd:
84:d4:57:10:57:a7:3c:11:41:b0:c7:75:2a:22:9f:
30:26:c4:39:1d:94:61:d7:09:ad:6a:49:dd:b1:30:
27:e6:0b:5a:a7:c3:f6:17:11:57:c2:34:f7:c5:37:
4d:cd:56:b7:6b:3a:42:ee:9f:2c:40:34:5e:f9:77:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:11:98:33:F8:6F:D3:60:1A:5C:86:03:A3:D1:FF:DC:A9:83:88:E1
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/FxGYM_hv02AaXIYDo9H_3KmDiOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.29.28.0/24
Signature Algorithm: sha256WithRSAEncryption
36:23:9d:04:d3:16:1e:10:36:4b:ac:16:76:a4:d3:d8:93:85:
ac:c8:27:87:ec:2d:69:6c:a8:fa:65:b4:14:ee:3c:99:b7:78:
de:79:18:56:35:af:52:94:19:58:27:9b:1a:e9:fc:c3:79:83:
55:1d:13:c3:17:cc:a9:0c:5f:de:59:17:a5:39:8d:fb:d6:68:
0c:c6:7a:0e:08:12:42:98:4e:90:54:55:5c:a6:a7:ef:b6:69:
56:44:50:e4:4c:f4:c5:4e:60:84:d5:b6:31:9c:f5:d9:79:4e:
22:20:b9:73:44:0c:5c:89:b3:61:29:69:dd:6b:8d:a4:3f:b2:
fd:f3:fd:ff:aa:31:b7:8f:bd:c6:69:b5:dc:7e:88:58:2c:d4:
79:5e:2b:0a:d2:b3:ce:6a:23:e3:19:6e:91:c5:2e:58:eb:ec:
7c:fc:33:38:66:8f:8a:3b:be:47:86:b2:5c:ea:d7:29:3b:57:
f9:71:16:e2:c6:5c:49:c1:47:b0:38:ac:78:52:3e:29:6e:7a:
91:6f:9b:47:37:73:0a:c3:f6:76:3b:57:26:12:81:5e:a5:77:
03:f3:4e:9e:6e:51:5b:34:10:21:77:da:c4:39:56:1e:dd:d3:
8b:12:2c:be:0d:39:a1:69:83:5e:6d:56:fc:16:89:7f:15:41:
62:69:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:48 2025 by rpki-client