Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/zlqxdHANM7324F_SanGyGD0CWvY.roa
File: zlqxdHANM7324F_SanGyGD0CWvY.roa (raw, json)
Hash identifier: gTKc8OdeN4uNJ8hMugSjUHtoIiTGksza/TDfvZRSvSI=
Subject key identifier: CE:5A:B1:74:70:0D:33:BD:F6:E0:5F:D2:6A:71:B2:18:3D:02:5A:F6
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 019426D922A9D0504BB2298128AD56B5CD75
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/zlqxdHANM7324F_SanGyGD0CWvY.roa
Signing time: Thu 02 Jan 2025 11:49:11 +0000
ROA not before: Thu 02 Jan 2025 11:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49121
IP address blocks: 5.57.209.0/24 maxlen: 24
37.221.68.0/24 maxlen: 24
37.221.69.0/24 maxlen: 24
37.221.70.0/24 maxlen: 24
37.221.71.0/24 maxlen: 24
45.87.117.0/24 maxlen: 24
45.87.118.0/24 maxlen: 24
45.87.119.0/24 maxlen: 24
185.186.0.0/24 maxlen: 24
185.186.1.0/24 maxlen: 24
185.232.166.0/24 maxlen: 24
194.61.10.0/23 maxlen: 23
194.147.74.0/23 maxlen: 23
2a09:e200::/48 maxlen: 48
2a09:e200:e200::/48 maxlen: 48
2a09:e206:c1::/48 maxlen: 48
2a09:e207:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:22:a9:d0:50:4b:b2:29:81:28:ad:56:b5:cd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Jan 2 11:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce5ab174700d33bdf6e05fd26a71b2183d025af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:2b:0e:22:ec:c7:0e:12:85:c5:21:d9:bb:
81:bb:8a:d8:5b:3b:42:03:80:0e:40:1e:93:20:81:
4c:04:14:54:a5:7d:74:50:54:0e:4a:1d:56:65:40:
5e:c0:7b:59:49:c9:41:ff:a0:be:69:97:c4:ca:cb:
9c:9e:e2:7c:50:da:0a:f9:13:88:6f:7f:cf:a5:32:
c8:ec:59:bd:ce:a6:ce:6d:ef:05:5a:e7:10:ae:2e:
2b:91:80:76:dd:3a:e1:1d:00:0a:eb:5b:bf:08:b7:
6a:01:b4:6a:c9:b3:d1:9b:8f:81:f6:5b:96:5d:ac:
a6:ba:63:98:9f:68:05:33:3d:f3:45:dd:3a:4b:47:
8a:6d:38:67:ce:dc:66:ef:3c:da:70:86:e5:e1:77:
78:b1:68:fe:b4:2c:6d:6d:5e:f8:36:88:10:42:dc:
ce:7c:ec:e5:c1:4d:2b:9e:f3:65:7a:3e:a3:fa:1b:
75:ce:0b:8c:ec:9f:d5:17:bd:2d:5b:a1:db:79:cb:
5e:fd:d9:83:80:e2:e3:17:80:60:50:94:01:fe:b7:
73:54:f7:7f:b4:1d:06:72:8a:50:a1:aa:26:be:d6:
8e:fe:0b:75:b7:8f:42:ae:2c:d9:a3:24:d6:b6:7a:
aa:97:47:d9:9e:d9:d0:85:96:e6:36:4e:f0:8d:9c:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5A:B1:74:70:0D:33:BD:F6:E0:5F:D2:6A:71:B2:18:3D:02:5A:F6
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/zlqxdHANM7324F_SanGyGD0CWvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.209.0/24
37.221.68.0/22
45.87.117.0-45.87.119.255
185.186.0.0/23
185.232.166.0/24
194.61.10.0/23
194.147.74.0/23
IPv6:
2a09:e200::/48
2a09:e200:e200::/48
2a09:e206:c1::/48
2a09:e207:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
76:db:81:88:16:f3:38:74:7e:c8:97:13:72:5c:ae:93:e5:a0:
cf:5f:94:10:90:1f:73:b8:94:08:d5:2d:2e:10:14:9b:55:f5:
11:33:ea:73:fe:db:52:9c:6b:83:43:a5:77:bf:1d:76:83:db:
c3:98:ee:14:fe:f8:4d:a3:97:38:ac:bb:40:d7:65:b8:78:f4:
f4:9a:4c:fb:c2:32:a3:28:aa:38:64:4c:d8:2f:20:e9:13:21:
dd:43:b1:9a:be:78:45:ed:f0:4e:46:88:d0:55:e8:90:dd:d2:
a8:ab:74:ff:3f:8a:fb:28:46:ce:30:bb:79:0c:a6:76:2e:d2:
8a:de:1b:c0:69:b0:47:d9:af:a7:cf:8d:fc:e8:ff:b2:e0:3f:
a9:c4:30:9e:c7:ac:14:0d:32:fc:17:a0:9c:66:58:9d:77:73:
fd:69:b9:1b:34:13:74:f1:9a:d8:e3:e2:51:c1:bc:e9:b4:64:
f6:d8:d4:db:77:87:28:20:96:3e:37:a9:39:25:5d:4d:a2:97:
04:10:49:24:a4:fd:44:91:20:99:20:36:47:24:a4:2e:3e:3f:
9c:79:8e:a4:6e:53:c1:e4:32:9e:37:a8:aa:46:f9:3b:d5:9b:
d1:d0:10:b3:1c:e0:9b:66:16:57:78:85:c2:a6:4d:53:1c:c3:
db:f3:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:38:12 2025 by rpki-client