Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/i386TLXJ3T0t3DEp8z4OsAQZ5gg.roa
File: i386TLXJ3T0t3DEp8z4OsAQZ5gg.roa (raw, json)
Hash identifier: 1WJwasmqZfO5Vi7FzjM8cLSApQE5Ou2nBbRnhWtNShk=
Subject key identifier: 8B:7F:3A:4C:B5:C9:DD:3D:2D:DC:31:29:F3:3E:0E:B0:04:19:E6:08
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 0194266B44FC2DBFF09CDBB1B6A05C16C8D7
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/i386TLXJ3T0t3DEp8z4OsAQZ5gg.roa
Signing time: Thu 02 Jan 2025 09:49:11 +0000
ROA not before: Thu 02 Jan 2025 09:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51862
IP address blocks: 185.122.180.0/22 maxlen: 24
185.122.180.0/24 maxlen: 24
185.122.181.0/24 maxlen: 24
185.122.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:44:fc:2d:bf:f0:9c:db:b1:b6:a0:5c:16:c8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Jan 2 09:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7f3a4cb5c9dd3d2ddc3129f33e0eb00419e608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:60:40:8c:1d:a9:5b:10:37:af:ff:20:ac:
d7:d5:76:c9:15:49:9e:6c:c4:d6:61:fc:8b:ae:aa:
70:3a:93:0b:2f:52:4b:76:3e:7a:67:d6:4f:f0:4e:
d7:5d:e0:d8:5a:b2:c5:51:19:57:1b:05:64:26:ca:
10:3c:b3:0c:1d:63:dc:e1:b0:d3:36:d2:98:fb:4d:
dc:9e:b1:7b:8b:b9:d0:8c:79:d6:d2:21:45:3d:10:
ff:8e:7a:e6:73:7a:7d:37:de:86:15:01:94:87:6c:
8a:f7:9a:b6:97:50:c1:b9:d0:23:f1:a8:c5:6d:72:
e1:d9:8f:d7:34:d0:cb:36:74:98:39:88:0d:16:5f:
14:7e:9b:fe:71:5d:00:d5:7a:5e:1f:b5:58:05:d5:
51:17:ff:b7:f6:77:b0:bf:35:ea:00:8c:b9:06:1a:
e9:ed:e4:6b:ce:1c:a7:c5:77:03:a8:5e:5b:bd:59:
f9:66:2f:59:cf:b5:a1:3f:3e:75:51:80:0b:5c:cd:
cc:e5:4f:8b:8f:3b:75:63:54:8c:16:ca:91:eb:4d:
fa:e2:f9:67:b4:6d:9f:d3:35:55:07:41:72:c1:dd:
c4:63:87:69:4b:0c:34:03:06:01:da:07:50:36:0c:
57:6d:ad:a0:a8:87:8c:32:c1:da:01:11:e9:1b:5c:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:3A:4C:B5:C9:DD:3D:2D:DC:31:29:F3:3E:0E:B0:04:19:E6:08
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/i386TLXJ3T0t3DEp8z4OsAQZ5gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.180.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:a4:ce:b5:74:19:3f:da:65:f7:b5:97:45:2a:ab:a8:06:f8:
08:69:6f:6f:90:ac:05:8b:f6:a8:c4:1b:d9:c7:6f:0d:33:7c:
13:22:dc:f0:12:3e:fd:af:7e:e6:21:87:ff:2e:2e:37:e5:22:
27:3e:37:00:c8:ad:1f:99:38:41:a8:e4:e2:99:a9:fd:70:62:
5e:c1:ff:ef:5e:77:f4:c2:3b:91:92:b2:de:7a:54:9e:42:93:
91:55:f1:93:e6:ab:0f:d6:ea:8a:38:52:6d:db:7c:e4:40:be:
83:c5:00:2e:4f:63:08:fd:c2:ab:af:ab:37:98:b3:0b:e4:16:
53:54:01:cd:34:08:83:30:8d:b3:00:c2:d5:ea:12:9d:79:67:
6e:69:0b:b2:79:bc:4c:f2:a1:8f:a6:cf:31:6b:af:10:91:be:
6b:9d:b9:dd:75:30:66:6b:ad:29:ae:d1:c0:fc:7a:f8:e2:b4:
41:50:da:7c:b4:6a:b2:47:68:d6:3e:2a:a9:de:3c:69:cf:6d:
5a:9c:9b:19:03:76:62:a5:0a:32:98:fa:7f:8e:a6:cc:48:21:
01:cb:06:aa:81:2a:7a:52:a1:c5:ef:c8:e6:c6:1f:c0:80:8e:
34:4a:5e:58:07:67:aa:5d:27:32:b3:cc:4c:cb:5e:d8:33:16:
5f:01:c1:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma0T8Lb/wnNuxtqBcFsjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOWM2M2M2ZDc1NmJiMmFjZDNmMWFkOTJhYzQxNWRhODU3
ZTZjOTgwHhcNMjUwMTAyMDk0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjdmM2E0Y2I1YzlkZDNkMmRkYzMxMjlmMzNlMGViMDA0MTllNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYNgQIwdqVsQN6//IKzX1XbJFUme
bMTWYfyLrqpwOpMLL1JLdj56Z9ZP8E7XXeDYWrLFURlXGwVkJsoQPLMMHWPc4bDT
NtKY+03cnrF7i7nQjHnW0iFFPRD/jnrmc3p9N96GFQGUh2yK95q2l1DBudAj8ajF
bXLh2Y/XNNDLNnSYOYgNFl8Ufpv+cV0A1XpeH7VYBdVRF/+39newvzXqAIy5Bhrp
7eRrzhynxXcDqF5bvVn5Zi9Zz7WhPz51UYALXM3M5U+Ljzt1Y1SMFsqR60364vln
tG2f0zVVB0Fywd3EY4dpSww0AwYB2gdQNgxXba2gqIeMMsHaARHpG1zywwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIt/Oky1yd09LdwxKfM+DrAEGeYIMB8GA1UdIwQY
MBaAFFCcY8bXVrsqzT8a2SrEFdqFfmyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMt
MzhhMzkyNDc3NmU5LzEvaTM4NlRMWEozVDB0M0RFcDh6NE9zQVFaNWdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84NDU0OGQtM2YzYi00NmI5LTgzNmMtMzhhMzkyNDc3NmU5
LzEvVUp4anh0ZFd1eXJOUHhyWktzUVYyb1YtYkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXq0MA0G
CSqGSIb3DQEBCwUAA4IBAQBPpM61dBk/2mX3tZdFKquoBvgIaW9vkKwFi/aoxBvZ
x28NM3wTItzwEj79r37mIYf/Li435SInPjcAyK0fmThBqOTiman9cGJewf/vXnf0
wjuRkrLeelSeQpORVfGT5qsP1uqKOFJt23zkQL6DxQAuT2MI/cKrr6s3mLML5BZT
VAHNNAiDMI2zAMLV6hKdeWduaQuyebxM8qGPps8xa68Qkb5rnbnddTBma60prtHA
/Hr44rRBUNp8tGqyR2jWPiqp3jxpz21anJsZA3ZipQoymPp/jqbMSCEBywaqgSp6
UqHF78jmxh/AgI40Sl5YB2eqXScys8xMy17YMxZfAcF7
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:45:45 2025 by rpki-client