Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/6/M4HKC9eyC2r-buzvDXudXKc3OaI.roa
File: M4HKC9eyC2r-buzvDXudXKc3OaI.roa (raw, json)
Hash identifier: mVeVPFG49QI6/LRZ0T8F6MWzrmVLMBg3P/vpDDJUFI0=
Subject key identifier: 33:81:CA:0B:D7:B2:0B:6A:FE:6E:EC:EF:0D:7B:9D:5C:A7:37:39:A2
Certificate issuer: /CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Certificate serial: 038F
Authority key identifier: 94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/M4HKC9eyC2r-buzvDXudXKc3OaI.roa
Signing time: Tue 23 Apr 2024 14:05:24 +0000
ROA not before: Tue 23 Apr 2024 14:05:24 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 136897
IP address blocks: 124.175.128.0/21 maxlen: 24
124.175.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911 (0x38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481B4E409015D8EB7D03F36038830EC1098ABC0
Validity
Not Before: Apr 23 14:05:24 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3381CA0BD7B20B6AFE6EECEF0D7B9D5CA73739A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:0a:62:53:5f:ee:83:c0:a4:11:03:07:5d:
48:4d:e0:d2:01:6a:b1:e4:4e:3a:12:5a:d6:dd:5e:
33:39:6a:a9:33:e6:41:11:63:8f:44:71:d6:63:a0:
67:be:39:47:85:59:29:bb:9e:88:1b:2c:d7:5d:61:
3a:ad:fb:15:52:65:db:fa:a2:dc:a8:d0:4e:8e:68:
3d:b8:f8:0b:a8:57:f2:09:3c:c2:1b:54:89:37:f3:
d4:38:ef:98:ed:f2:c1:db:31:cf:e0:d2:61:c3:f7:
ec:dc:1b:61:a1:87:83:0d:14:b2:63:ad:bc:bd:0b:
41:1c:4c:11:88:a1:31:c9:ae:30:53:0f:10:23:73:
a5:39:8a:69:53:61:48:2b:9b:d1:45:6a:e9:2e:5c:
b3:87:df:c6:6a:1a:df:05:f9:5e:e6:90:a7:23:ca:
b6:41:cf:8e:e9:e1:0f:cb:bd:ba:d7:02:4e:6e:3e:
d4:ac:a7:5e:6c:d3:99:5d:cb:51:82:bf:10:cf:7a:
2c:2b:de:13:2b:6c:0d:60:34:29:93:69:f0:88:a2:
6a:95:48:87:4e:91:ad:9a:96:f5:d2:b5:61:d0:44:
88:3a:11:0f:04:9b:dc:34:cc:e5:fb:99:dc:21:93:
37:55:20:5a:a3:cc:3b:9b:89:64:c2:a7:49:ae:e9:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:CA:0B:D7:B2:0B:6A:FE:6E:EC:EF:0D:7B:9D:5C:A7:37:39:A2
X509v3 Authority Key Identifier:
keyid:94:81:B4:E4:09:01:5D:8E:B7:D0:3F:36:03:88:30:EC:10:98:AB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/lIG05AkBXY630D82A4gw7BCYq8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lIG05AkBXY630D82A4gw7BCYq8A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6/M4HKC9eyC2r-buzvDXudXKc3OaI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.175.128.0/20
Signature Algorithm: sha256WithRSAEncryption
24:47:da:be:eb:4d:4d:ef:4d:cd:86:25:67:6a:f5:91:39:46:
3b:4e:b6:c8:cb:f9:92:23:e3:79:43:09:05:cf:9d:b8:e6:d6:
b8:80:a5:d1:13:9b:bd:73:cc:0a:43:63:bb:f0:a4:dc:ac:77:
9b:55:c4:03:26:ae:af:14:6d:dc:a7:81:86:61:35:c5:2e:66:
74:d5:58:6c:bf:74:00:6f:b7:88:18:0a:c7:d5:37:50:69:2e:
cd:7a:f9:54:48:1c:83:b5:52:04:ba:d7:b1:b8:4e:ce:e0:f3:
a7:0c:ae:cc:23:46:6b:43:a1:5d:75:11:6a:e8:6e:88:e2:17:
97:03:40:63:24:f8:82:21:9a:7c:24:c0:66:91:52:d1:5e:f7:
18:a2:2e:59:72:09:ea:4a:09:19:30:20:3a:ae:0a:85:e4:cb:
d9:b6:2d:39:e9:a7:de:ef:ba:64:15:21:da:14:b0:35:e0:e1:
c4:6c:47:25:2c:48:f8:f8:fc:ce:89:31:45:c0:5c:1c:6b:f0:
52:b3:a1:fd:c5:09:65:19:a9:29:2a:3f:2c:ee:ac:e6:1b:6a:
0a:b3:4d:27:ff:c2:8a:c3:2d:23:c9:a0:f8:2b:2f:f3:7d:85:
97:9f:4c:25:a0:b9:43:d6:ee:c9:42:b8:0d:0c:cd:3e:1b:36:
a2:97:93:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 18:22:48 2024 by rpki-client on console-ams.rpki-client.org