Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/Cz5S3IJZWr99nsvNhINrANY1bmo.roa
File: Cz5S3IJZWr99nsvNhINrANY1bmo.roa (raw, json)
Hash identifier: HtBPFMPRbloIlRRInpBT+0KKAWmE3tyopaYEYPODZuY=
Subject key identifier: 0B:3E:52:DC:82:59:5A:BF:7D:9E:CB:CD:84:83:6B:00:D6:35:6E:6A
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0AD0
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/Cz5S3IJZWr99nsvNhINrANY1bmo.roa
Signing time: Mon 08 Aug 2022 07:34:32 +0000
ROA not before: Mon 08 Aug 2022 07:34:32 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 7018
IP address blocks: 101.49.0.0/18 maxlen: 24
101.49.64.0/19 maxlen: 24
101.49.80.0/22 maxlen: 24
101.49.84.0/22 maxlen: 24
101.49.88.0/22 maxlen: 24
101.49.92.0/22 maxlen: 24
101.49.96.0/19 maxlen: 24
101.49.128.0/19 maxlen: 24
101.49.192.0/19 maxlen: 24
101.49.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2768 (0xad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Aug 8 07:34:32 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=0B3E52DC82595ABF7D9ECBCD84836B00D6356E6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:0a:aa:5f:8c:5e:53:c0:99:67:86:5d:25:
45:5c:ad:eb:f3:df:32:0d:b3:a1:37:2e:e6:03:26:
91:d6:76:b2:7a:5e:bd:59:6d:12:63:84:45:18:fc:
70:c2:6a:e4:87:57:21:c1:db:07:38:91:e8:69:e0:
16:79:c8:67:af:79:b3:be:8d:cb:85:8b:93:94:1e:
dc:3a:c5:d7:1b:fb:1c:97:12:d7:c8:49:44:f5:dd:
a6:a0:29:0d:2a:20:ea:35:f2:8d:cc:03:51:4c:13:
f4:39:80:7f:88:7c:77:92:d9:96:5f:39:16:44:fe:
36:64:9c:e9:4a:4b:2e:80:ba:2a:be:a3:36:09:07:
88:e0:35:fb:bf:55:9a:f2:9c:b2:90:ba:4d:05:e0:
36:e0:a9:47:d8:e1:c1:58:4e:f0:e4:69:5b:fa:05:
b1:ae:f0:c7:d7:54:b8:ad:aa:ad:f6:e7:a4:cf:2a:
19:d5:a5:72:94:ed:d4:43:61:27:fd:29:98:08:c5:
53:4c:5c:b9:4f:6a:2f:2d:70:b6:0d:fd:d4:73:ed:
16:64:84:d2:7f:5c:66:ed:3e:4d:2e:8c:e1:02:20:
5a:92:08:c3:e0:99:b8:5d:dc:55:5a:80:a8:b3:98:
ac:cf:51:a6:78:b6:f4:30:93:bc:d6:1d:2f:08:b6:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3E:52:DC:82:59:5A:BF:7D:9E:CB:CD:84:83:6B:00:D6:35:6E:6A
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/Cz5S3IJZWr99nsvNhINrANY1bmo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.0.0-101.49.159.255
101.49.192.0-101.49.239.255
Signature Algorithm: sha256WithRSAEncryption
e7:5e:41:f4:1b:83:43:91:ce:3e:24:81:49:07:68:ce:05:67:
f7:4b:4e:a0:3e:3f:ed:07:e3:0a:a2:04:bf:d5:1f:f1:e0:48:
73:50:bb:ac:50:fc:5c:57:91:24:3d:0f:8b:2c:74:73:fa:f0:
09:04:15:e1:92:5c:75:ea:35:74:46:4f:06:5b:db:45:cb:28:
fe:42:26:06:43:a1:22:e9:d8:2a:fa:96:48:fc:9b:c9:3f:e1:
68:4f:00:f3:a3:9a:17:c2:15:f9:28:af:5a:91:da:53:b8:ed:
04:8c:52:bb:ba:5f:56:85:83:9b:74:00:ac:fb:3d:b7:48:4b:
75:ca:d7:e3:b0:ae:c2:80:80:34:52:0f:06:b3:e0:90:2c:83:
ad:26:02:7e:75:d4:d1:f3:b4:76:52:41:6d:10:65:a7:01:5e:
8f:31:74:2c:8a:c5:1d:23:9f:82:3f:7b:4e:8c:ff:53:05:58:
65:bc:80:67:3f:c3:8a:af:ee:f5:df:25:00:63:2b:c2:d7:c0:
62:0e:f3:a2:cf:ce:d4:b4:c5:0d:36:47:b0:70:5c:1c:64:c3:
97:37:81:f2:12:c5:02:ed:08:45:d8:63:c7:eb:e7:3b:b4:0f:
5b:9b:55:6b:c0:63:94:de:d8:4e:f7:61:bf:37:97:22:68:85:
2f:75:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org