Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/39oDAUegJepJUSkPmee2hM0pl4M.roa
File: 39oDAUegJepJUSkPmee2hM0pl4M.roa (raw, json)
Hash identifier: etWjX6n4dXtdM5ujkZt9ciCyHV0gwHpcvlbY1WPRkQs=
Subject key identifier: DF:DA:03:01:47:A0:25:EA:49:51:29:0F:99:E7:B6:84:CD:29:97:83
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0A41
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/39oDAUegJepJUSkPmee2hM0pl4M.roa
Signing time: Wed 20 Jul 2022 01:12:34 +0000
ROA not before: Wed 20 Jul 2022 01:12:34 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 996
IP address blocks: 101.49.128.0/19 maxlen: 24
101.49.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jul 20 01:12:34 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=DFDA030147A025EA4951290F99E7B684CD299783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:92:c5:95:b3:4b:de:34:75:94:9c:fa:53:
61:f2:61:f2:74:8b:aa:58:ba:6b:20:0d:73:59:7d:
0e:1b:5e:d7:8d:13:23:95:39:cc:8d:a2:1d:04:c4:
d1:fe:df:48:6c:b3:74:f1:12:f9:3c:cf:0c:5d:ca:
7b:3f:ae:f0:c5:2d:0e:9b:1a:56:e0:68:db:9d:d1:
e4:cc:6e:b7:60:ba:1e:7a:6b:18:19:c5:d4:7f:15:
46:cd:d0:0f:a1:b0:27:37:15:e2:89:bc:1c:e2:c0:
16:8c:e4:20:bb:97:a4:f5:da:3c:ef:33:ff:33:c8:
84:b6:3f:ef:c0:94:27:db:03:f1:b1:f1:ce:d6:08:
57:6e:79:74:c1:13:c5:fe:82:fa:d1:a7:63:e9:dd:
05:8f:40:25:b7:0c:66:8c:ff:1e:17:a1:ab:33:49:
22:35:2c:7c:cb:32:64:1a:ca:9b:5d:b4:b3:ef:c5:
15:b3:3a:e9:e2:ab:0e:ec:0a:f5:de:c3:1d:a5:a7:
88:17:77:82:60:ef:51:0d:ec:90:1c:e5:36:87:6f:
51:72:0c:5c:63:68:f4:18:63:1d:bd:32:39:a0:b4:
95:88:be:53:91:6f:c7:3f:57:f1:92:3a:67:89:b4:
b3:e9:35:1a:e2:5b:24:8d:ae:86:04:4f:13:0c:17:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DA:03:01:47:A0:25:EA:49:51:29:0F:99:E7:B6:84:CD:29:97:83
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/39oDAUegJepJUSkPmee2hM0pl4M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1e:95:1d:0c:2d:06:a5:5f:4e:37:a0:ec:42:00:30:b8:88:6d:
bb:fe:c9:0d:62:bb:e5:ac:d1:9e:2c:e0:15:ea:0f:87:84:b1:
b5:06:c9:3c:d3:88:85:bc:f7:9d:2e:bd:72:23:cf:03:12:12:
63:a0:6d:53:b2:e6:73:80:4f:27:36:f5:61:ae:0b:38:f7:12:
6c:90:1d:69:db:6c:7b:6e:fb:ca:1b:c0:a3:22:d8:88:84:34:
b8:43:9a:cc:1e:f5:bd:49:f9:ac:b1:b8:08:28:bf:e7:01:eb:
af:29:c0:c6:2c:a7:27:82:20:27:c5:f0:14:f4:fe:ba:b4:29:
c8:6a:cb:7d:0e:ce:37:00:de:55:23:17:da:23:fa:5f:b5:c2:
a6:12:40:13:9e:07:35:1d:5a:90:5d:1a:49:f2:16:af:e2:4d:
6d:9b:52:9b:c8:f9:16:7d:4e:03:4d:15:ce:4f:f5:3f:fe:30:
3c:3d:a5:45:8a:bc:0c:bf:0d:6b:a8:85:7d:9c:ac:cf:08:fa:
32:43:26:d3:22:d7:8e:0e:14:71:f5:d3:92:cb:98:a3:db:2e:
6b:3c:9a:7f:49:fd:06:49:d6:cd:ef:3e:e0:fd:28:f6:72:b4:
a6:3f:7d:75:0d:f9:83:41:f5:c6:bf:44:8e:34:44:70:86:3a:
df:5c:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org