Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/_UkvGROKreyTVSwDCbdVXYeO3nE.roa
File: _UkvGROKreyTVSwDCbdVXYeO3nE.roa (raw, json)
Hash identifier: KtqV6/9f4aeJ0hGtClKiknwEVN2KcLrLguRdfutHYcE=
Subject key identifier: FD:49:2F:19:13:8A:AD:EC:93:55:2C:03:09:B7:55:5D:87:8E:DE:71
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 019561B2748071C58AF3C0073BF59F41DC35
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/_UkvGROKreyTVSwDCbdVXYeO3nE.roa
Signing time: Tue 04 Mar 2025 15:07:19 +0000
ROA not before: Tue 04 Mar 2025 15:07:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29314
IP address blocks: 31.11.128.0/17 maxlen: 17
31.11.128.0/24 maxlen: 24
31.11.129.0/24 maxlen: 24
31.11.130.0/24 maxlen: 24
31.11.131.0/24 maxlen: 24
31.11.132.0/22 maxlen: 22
31.11.172.0/24 maxlen: 24
31.11.202.0/24 maxlen: 24
31.11.208.0/22 maxlen: 22
31.11.228.0/24 maxlen: 24
31.22.96.0/21 maxlen: 21
31.22.100.0/23 maxlen: 23
31.135.168.0/21 maxlen: 21
31.135.175.0/24 maxlen: 24
37.8.192.0/18 maxlen: 18
37.8.208.0/24 maxlen: 24
37.8.214.0/24 maxlen: 24
37.8.230.0/24 maxlen: 24
37.8.231.0/24 maxlen: 24
37.77.152.0/21 maxlen: 21
62.122.112.0/21 maxlen: 21
77.222.224.0/21 maxlen: 21
77.222.232.0/21 maxlen: 21
77.222.240.0/20 maxlen: 20
77.222.248.0/22 maxlen: 22
77.222.252.0/22 maxlen: 22
78.31.152.0/21 maxlen: 21
78.31.209.0/24 maxlen: 24
78.88.0.0/17 maxlen: 17
78.88.16.0/24 maxlen: 24
78.88.28.0/22 maxlen: 22
78.88.28.0/24 maxlen: 24
78.88.29.0/24 maxlen: 24
78.88.30.0/24 maxlen: 24
78.88.31.0/24 maxlen: 24
78.88.43.0/24 maxlen: 24
78.88.123.0/24 maxlen: 24
78.88.128.0/17 maxlen: 17
78.88.188.0/22 maxlen: 22
78.88.216.0/22 maxlen: 22
82.139.0.0/18 maxlen: 18
82.139.32.0/21 maxlen: 21
82.139.48.0/21 maxlen: 21
83.143.40.0/21 maxlen: 21
83.143.136.0/21 maxlen: 21
83.243.104.0/21 maxlen: 21
88.156.0.0/18 maxlen: 18
88.156.64.0/18 maxlen: 18
88.156.64.0/24 maxlen: 24
88.156.78.0/24 maxlen: 24
88.156.80.176/28 maxlen: 28
88.156.128.0/18 maxlen: 18
88.156.128.0/21 maxlen: 21
88.156.128.0/23 maxlen: 23
88.156.130.0/23 maxlen: 23
88.156.132.0/23 maxlen: 23
88.156.134.0/23 maxlen: 23
88.156.136.0/21 maxlen: 21
88.156.164.0/22 maxlen: 22
88.156.192.0/18 maxlen: 18
88.156.222.0/24 maxlen: 24
88.156.226.0/23 maxlen: 23
88.156.255.0/24 maxlen: 24
89.151.0.0/18 maxlen: 18
89.151.16.0/20 maxlen: 20
89.151.40.0/21 maxlen: 21
91.192.76.0/22 maxlen: 22
91.192.76.0/24 maxlen: 24
91.192.78.0/24 maxlen: 24
91.230.159.0/24 maxlen: 24
91.230.162.0/23 maxlen: 23
91.230.164.0/22 maxlen: 22
91.231.116.0/23 maxlen: 23
91.238.232.0/22 maxlen: 22
93.105.0.0/17 maxlen: 17
93.105.40.0/24 maxlen: 24
93.105.42.0/24 maxlen: 24
93.105.128.0/17 maxlen: 17
93.105.142.0/24 maxlen: 24
93.105.144.0/22 maxlen: 22
93.105.168.0/21 maxlen: 21
93.105.176.0/23 maxlen: 23
93.105.178.0/23 maxlen: 23
93.105.179.0/24 maxlen: 24
93.105.180.0/24 maxlen: 24
93.105.181.0/24 maxlen: 24
93.105.182.0/24 maxlen: 24
93.105.183.0/24 maxlen: 24
93.105.224.0/21 maxlen: 21
93.105.236.0/24 maxlen: 24
93.105.237.0/24 maxlen: 24
93.176.192.0/18 maxlen: 18
93.176.238.0/24 maxlen: 24
93.176.239.0/24 maxlen: 24
93.176.240.0/24 maxlen: 24
93.176.255.0/24 maxlen: 24
94.231.48.0/20 maxlen: 20
95.160.0.0/17 maxlen: 24
95.160.16.0/22 maxlen: 22
95.160.28.0/22 maxlen: 22
95.160.56.0/22 maxlen: 22
95.160.76.0/22 maxlen: 22
95.160.126.0/23 maxlen: 23
95.160.128.0/17 maxlen: 17
95.160.152.0/24 maxlen: 24
95.160.153.0/24 maxlen: 24
95.160.154.0/24 maxlen: 24
95.160.155.0/24 maxlen: 24
95.160.156.0/24 maxlen: 24
95.160.157.0/24 maxlen: 24
95.160.158.0/24 maxlen: 24
95.160.159.0/24 maxlen: 24
95.160.166.0/24 maxlen: 24
95.160.170.0/24 maxlen: 24
95.160.228.0/22 maxlen: 22
95.160.233.0/24 maxlen: 24
95.160.236.0/22 maxlen: 22
109.107.0.0/19 maxlen: 19
109.107.0.0/21 maxlen: 21
109.107.9.0/24 maxlen: 24
109.197.56.0/21 maxlen: 21
109.197.64.0/21 maxlen: 21
109.241.0.0/18 maxlen: 18
109.241.64.0/18 maxlen: 18
109.241.128.0/18 maxlen: 18
109.241.192.0/18 maxlen: 18
178.235.0.0/17 maxlen: 17
178.235.40.0/24 maxlen: 24
178.235.41.0/24 maxlen: 24
178.235.42.0/24 maxlen: 24
178.235.43.0/24 maxlen: 24
178.235.98.0/24 maxlen: 24
178.235.110.0/24 maxlen: 24
178.235.128.0/17 maxlen: 17
178.235.128.0/24 maxlen: 24
178.235.129.0/24 maxlen: 24
178.235.130.0/24 maxlen: 24
178.235.131.0/24 maxlen: 24
178.235.132.0/23 maxlen: 23
178.235.134.0/24 maxlen: 24
178.235.135.0/24 maxlen: 24
178.235.136.0/23 maxlen: 23
178.235.138.0/23 maxlen: 23
178.235.140.0/24 maxlen: 24
178.235.141.0/24 maxlen: 24
178.235.142.0/23 maxlen: 23
178.235.144.0/23 maxlen: 23
178.235.146.0/24 maxlen: 24
178.235.147.0/24 maxlen: 24
178.235.148.0/22 maxlen: 22
178.235.148.0/23 maxlen: 23
178.235.150.0/23 maxlen: 23
178.235.150.0/24 maxlen: 24
178.235.152.0/21 maxlen: 21
178.235.160.0/19 maxlen: 19
178.235.192.0/18 maxlen: 18
185.51.180.0/22 maxlen: 22
192.166.120.0/23 maxlen: 23
193.201.18.0/23 maxlen: 23
194.54.188.0/22 maxlen: 22
195.26.72.0/22 maxlen: 22
195.28.170.0/23 maxlen: 23
195.191.162.0/23 maxlen: 23
195.225.92.0/22 maxlen: 22
195.242.252.0/22 maxlen: 22
2a00:9f00::/32 maxlen: 32
2a00:9f00::/36 maxlen: 36
2a00:9f00::/48 maxlen: 48
2a00:9f00:1::/48 maxlen: 48
2a00:9f00:a::/48 maxlen: 48
2a00:9f00:c::/48 maxlen: 48
2a00:9f00:10::/48 maxlen: 48
2a00:9f00:aa::/48 maxlen: 48
2a00:9f00:bb::/48 maxlen: 48
2a00:9f00:cc::/48 maxlen: 48
2a00:9f00:1000::/36 maxlen: 36
2a00:9f00:2000::/36 maxlen: 36
2a00:9f00:2007::/48 maxlen: 48
2a00:9f00:3000::/36 maxlen: 36
2a00:9f00:4000::/36 maxlen: 36
2a00:9f00:5000::/36 maxlen: 36
2a00:9f00:6000::/36 maxlen: 36
2a00:9f00:7000::/36 maxlen: 36
2a00:9f00:8000::/36 maxlen: 36
2a00:9f00:9000::/36 maxlen: 36
2a00:9f00:a000::/36 maxlen: 36
2a00:9f00:abba::/48 maxlen: 48
2a00:9f00:b000::/36 maxlen: 36
2a00:9f00:babe::/48 maxlen: 48
2a00:9f00:beaf::/48 maxlen: 48
2a00:9f00:c000::/36 maxlen: 36
2a00:9f00:cafe::/48 maxlen: 48
2a00:9f00:d000::/36 maxlen: 36
2a00:9f00:dead::/48 maxlen: 48
2a00:9f00:e000::/36 maxlen: 36
2a00:9f00:f000::/36 maxlen: 36
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:61:b2:74:80:71:c5:8a:f3:c0:07:3b:f5:9f:41:dc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Mar 4 15:07:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd492f19138aadec93552c0309b7555d878ede71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:63:9a:45:c2:4b:eb:f9:81:74:43:93:61:
86:8a:32:e6:7f:2a:39:f0:3f:41:d0:c8:d2:f4:b4:
b2:60:e9:0a:33:66:98:83:e9:16:2e:1d:a8:69:66:
b8:d0:76:25:bd:76:e1:95:6c:c4:40:be:6d:e5:d5:
e7:d9:ed:95:68:6b:50:69:db:9a:a4:f4:ca:5a:5a:
76:33:a7:3e:c2:1e:78:61:07:ea:7b:f0:27:6f:cc:
1f:93:e1:3c:49:53:7e:aa:b3:be:de:99:c6:30:c3:
d7:58:26:ba:b5:c0:8d:f1:7b:b2:4f:cb:f3:3d:c9:
f9:ca:5a:c3:f1:ad:e2:95:dd:0d:aa:be:fd:d4:33:
8b:e0:b2:a1:68:96:33:b7:5a:58:0c:57:1e:da:96:
06:94:47:5c:8b:1f:ac:7a:f3:f7:d0:30:38:be:97:
c2:e2:eb:1d:8e:64:06:7c:9b:da:c0:27:06:d1:3d:
8f:7f:1e:0b:fa:87:15:ab:44:35:ea:e8:44:48:81:
37:d2:51:ed:cb:9c:5c:81:7c:11:04:e8:b4:4a:9d:
d2:ba:76:b2:4e:02:c2:9f:37:26:f6:31:13:6d:65:
7f:14:02:14:8c:2d:8a:17:30:c2:8c:92:59:6e:05:
9d:be:f4:01:c8:b3:d1:36:ae:eb:31:5a:c5:21:3a:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:2F:19:13:8A:AD:EC:93:55:2C:03:09:B7:55:5D:87:8E:DE:71
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/_UkvGROKreyTVSwDCbdVXYeO3nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.128.0/17
31.22.96.0/21
31.135.168.0/21
37.8.192.0/18
37.77.152.0/21
62.122.112.0/21
77.222.224.0/19
78.31.152.0/21
78.31.209.0/24
78.88.0.0/16
82.139.0.0/18
83.143.40.0/21
83.143.136.0/21
83.243.104.0/21
88.156.0.0/16
89.151.0.0/18
91.192.76.0/22
91.230.159.0/24
91.230.162.0-91.230.167.255
91.231.116.0/23
91.238.232.0/22
93.105.0.0/16
93.176.192.0/18
94.231.48.0/20
95.160.0.0/16
109.107.0.0/19
109.197.56.0-109.197.71.255
109.241.0.0/16
178.235.0.0/16
185.51.180.0/22
192.166.120.0/23
193.201.18.0/23
194.54.188.0/22
195.26.72.0/22
195.28.170.0/23
195.191.162.0/23
195.225.92.0/22
195.242.252.0/22
IPv6:
2a00:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
60:98:8a:65:aa:b5:10:da:89:20:9c:01:48:33:86:5a:ba:ab:
88:ef:bf:2b:8f:22:e8:2c:f5:4a:f4:31:d2:6a:b0:51:e8:5d:
46:39:cc:94:cf:e6:ac:f3:c5:b5:f5:b0:21:fe:33:da:87:83:
37:21:93:5d:3b:63:79:37:3b:02:11:50:81:74:00:f5:e7:aa:
7c:83:b3:62:a0:fe:0e:66:46:d8:1c:4c:cb:9d:74:73:24:bf:
ff:a0:96:36:20:4d:e5:22:63:eb:53:19:02:1a:b6:1b:5f:06:
f1:d1:1d:07:61:1b:1b:5d:c7:73:97:4b:a5:5a:2c:f7:16:76:
79:ee:0a:4a:e4:23:b9:fb:25:68:e9:09:e0:21:80:3c:f4:4c:
3a:62:4a:e4:cf:e6:c7:b2:c8:d1:68:50:ce:71:bc:aa:1b:78:
79:d8:23:43:5a:17:9b:37:9d:11:1b:dd:98:9c:b0:4c:40:be:
61:07:c3:a4:f2:0f:02:5f:27:1c:06:61:f6:c2:5c:86:d4:44:
7a:24:11:bf:e6:31:0e:ba:10:e8:56:79:f9:fa:4f:b1:da:6f:
41:23:a6:1f:af:82:25:5d:29:ce:8d:e0:98:2a:1e:19:e9:17:
e3:a8:74:44:51:b1:4b:88:22:5b:46:fa:ce:93:22:53:ba:71:
86:f8:75:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:28:02 2025 by rpki-client on console.sobornost.net