Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/uPPSCEPI-zYe8c4juKISlbYTsmI.roa
File: uPPSCEPI-zYe8c4juKISlbYTsmI.roa (raw, json)
Hash identifier: ItdA3QN2L+hecSiCaaiQJ/fE6U5Bp5eLGhZQrMhDtVA=
Subject key identifier: B8:F3:D2:08:43:C8:FB:36:1E:F1:CE:23:B8:A2:12:95:B6:13:B2:62
Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial: 019427488D6D8C306D39547DA817AC4E912E
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/uPPSCEPI-zYe8c4juKISlbYTsmI.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203675
IP address blocks: 185.82.108.0/22 maxlen: 22
185.82.108.0/24 maxlen: 24
185.82.109.0/24 maxlen: 24
185.82.110.0/24 maxlen: 24
185.82.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8d:6d:8c:30:6d:39:54:7d:a8:17:ac:4e:91:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8f3d20843c8fb361ef1ce23b8a21295b613b262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:af:19:58:ae:69:ab:7d:ad:fb:ae:60:ca:
82:c1:1c:68:84:88:09:43:32:ca:f6:02:2f:73:cf:
4e:cb:3d:c2:b4:8f:8d:e4:c6:f8:5c:9d:30:bc:04:
7a:54:23:e2:63:94:3d:e0:88:c5:d0:cc:20:cb:fc:
1a:4d:d0:65:5a:1f:4d:fe:07:3c:f9:08:37:fa:cd:
a6:7c:05:04:39:ee:4a:ee:05:bf:9f:48:37:b7:64:
2e:95:36:4d:c2:9e:52:82:c0:19:bd:eb:c5:a1:cc:
8e:74:ba:49:42:c7:6a:a7:43:8c:5a:37:41:25:25:
04:af:38:72:c7:f4:f6:6e:70:15:51:23:92:68:3b:
36:92:f1:f1:79:21:32:9a:40:88:23:6e:f8:65:f5:
a2:c8:2b:92:5d:67:4b:c9:be:a7:af:ce:a4:af:78:
de:b3:71:0a:b5:59:3c:63:06:80:95:47:2d:37:20:
e0:97:60:a7:3e:1b:33:74:74:47:01:42:ec:23:30:
0b:a2:6e:b9:05:49:fa:38:e0:e6:6c:00:b4:f6:e5:
29:0e:9d:63:7b:67:9d:c6:22:7a:43:0e:e6:42:cf:
17:9b:f5:eb:e4:8e:c0:e3:e8:1a:5f:9d:9f:bb:2d:
1e:97:e3:f4:a0:56:75:82:aa:15:28:7d:2e:ef:b7:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:D2:08:43:C8:FB:36:1E:F1:CE:23:B8:A2:12:95:B6:13:B2:62
X509v3 Authority Key Identifier:
keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/uPPSCEPI-zYe8c4juKISlbYTsmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.108.0/22
Signature Algorithm: sha256WithRSAEncryption
64:ee:ed:87:f4:87:af:84:1d:b3:e3:bb:6d:70:04:92:2d:f3:
43:7d:ed:f2:f2:bb:5b:2b:9e:23:cf:71:eb:88:28:d2:76:00:
35:a3:7c:5e:1c:2c:53:c1:38:92:0e:fd:c5:35:e6:e6:1c:de:
75:09:57:d5:10:cd:d3:dc:70:af:8f:ec:9c:de:7a:95:72:42:
51:89:c0:21:db:02:e4:b2:eb:2f:b4:96:1f:ae:f3:7e:b9:43:
15:91:47:70:ab:58:f1:e4:8d:46:7a:b1:ff:68:5c:7a:01:d4:
33:1d:57:09:c1:50:d0:fb:37:9a:ff:2a:cb:8c:86:13:4e:c5:
6c:8d:8f:69:89:81:02:66:d2:38:bb:ec:63:c1:aa:36:99:48:
cd:c5:97:bd:01:33:2c:a1:b5:a3:fe:9f:4f:e9:ad:da:ce:b4:
52:b8:80:d5:c5:a0:1a:5e:12:9e:83:3b:14:02:d4:d1:fd:b4:
b6:25:1c:1e:97:ac:3a:78:14:b5:97:ee:d2:4c:cc:71:6d:df:
c8:f3:5a:2f:59:50:01:1e:ea:ac:c7:93:f5:8b:75:90:17:b1:
ea:cc:32:0f:4c:01:e1:fc:97:99:17:30:c6:8a:ab:c1:02:03:
36:8d:7c:5d:43:a4:c2:f3:4e:57:cc:56:88:f9:72:45:69:ae:
2a:50:fb:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSI1tjDBtOVR9qBesTpEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc4MDIxZjcyYTIxYjc3MTQyYTQ0ZDgxNWRkZTllZjI2
ODRjYmMwHhcNMjUwMTAyMTM1MDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGYzZDIwODQzYzhmYjM2MWVmMWNlMjNiOGEyMTI5NWI2MTNiMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrSvGViuaat9rfuuYMqCwRxohIgJ
QzLK9gIvc89Oyz3CtI+N5Mb4XJ0wvAR6VCPiY5Q94IjF0Mwgy/waTdBlWh9N/gc8
+Qg3+s2mfAUEOe5K7gW/n0g3t2QulTZNwp5SgsAZvevFocyOdLpJQsdqp0OMWjdB
JSUErzhyx/T2bnAVUSOSaDs2kvHxeSEymkCII274ZfWiyCuSXWdLyb6nr86kr3je
s3EKtVk8YwaAlUctNyDgl2CnPhszdHRHAULsIzALom65BUn6OODmbAC09uUpDp1j
e2edxiJ6Qw7mQs8Xm/Xr5I7A4+gaX52fuy0el+P0oFZ1gqoVKH0u77dn5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLjz0ghDyPs2HvHOI7iiEpW2E7JiMB8GA1UdIwQY
MBaAFO9HgCH3KiG3cUKkTYFd3p7yaEy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEt
MzQ0MzQ2NGI5MjA5LzEvdVBQU0NFUEktelllOGM0anVLSVNsYllUc21JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEtMzQ0MzQ2NGI5MjA5
LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVJsMA0G
CSqGSIb3DQEBCwUAA4IBAQBk7u2H9IevhB2z47ttcASSLfNDfe3y8rtbK54jz3Hr
iCjSdgA1o3xeHCxTwTiSDv3FNebmHN51CVfVEM3T3HCvj+yc3nqVckJRicAh2wLk
susvtJYfrvN+uUMVkUdwq1jx5I1GerH/aFx6AdQzHVcJwVDQ+zea/yrLjIYTTsVs
jY9piYECZtI4u+xjwao2mUjNxZe9ATMsobWj/p9P6a3azrRSuIDVxaAaXhKegzsU
AtTR/bS2JRwel6w6eBS1l+7STMxxbd/I81ovWVABHuqsx5P1i3WQF7HqzDIPTAHh
/JeZFzDGiqvBAgM2jXxdQ6TC805XzFaI+XJFaa4qUPv0
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:32:37 2025 by rpki-client