Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/FRfOr-pW__UlEC4SNVu1AJh93t0.roa
File: FRfOr-pW__UlEC4SNVu1AJh93t0.roa (raw, json)
Hash identifier: DgpHqn6YSETTb+kdHlqSMvHpmrWCeU6P0itOyuqw/mY=
Subject key identifier: 15:17:CE:AF:EA:56:FF:F5:25:10:2E:12:35:5B:B5:00:98:7D:DE:DD
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0C59
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/FRfOr-pW__UlEC4SNVu1AJh93t0.roa
Signing time: Sun 16 Oct 2022 06:50:34 +0000
ROA not before: Sun 16 Oct 2022 06:50:34 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 7018
IP address blocks: 101.49.128.0/19 maxlen: 24
101.49.192.0/19 maxlen: 24
101.49.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3161 (0xc59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Oct 16 06:50:34 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=1517CEAFEA56FFF525102E12355BB500987DDEDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:fd:94:36:c7:df:04:c7:19:b2:78:d7:db:
1e:de:6a:8d:6e:87:21:cf:a9:6a:37:6e:87:df:7c:
c8:5a:90:28:46:49:8f:de:c4:80:07:dd:59:fa:83:
28:03:6d:23:5e:67:19:a0:e3:a6:29:a2:7d:b3:2f:
07:8f:28:47:3b:87:c9:62:13:5c:64:74:e5:1f:4c:
90:70:43:1e:9f:9f:a3:e7:7c:46:0c:b5:9b:d4:3b:
5b:2b:9e:57:ad:7f:64:91:e1:12:d1:d9:eb:b7:55:
80:04:61:9f:d6:82:fc:dd:f1:be:72:13:2c:98:75:
14:84:8f:d1:7e:ba:eb:a1:6d:4d:86:09:71:1c:27:
dd:61:35:58:92:6d:89:cb:2b:c2:44:51:1c:9d:21:
36:eb:2b:e6:0f:3e:ac:7e:3d:e1:9d:ac:f3:a5:53:
be:11:ea:0b:fc:8b:ea:f9:b8:17:46:6e:73:a7:97:
0e:d1:97:ea:0e:e1:d1:05:78:c2:66:b2:56:be:cb:
60:0b:d0:33:57:f6:ad:6f:fe:d3:ab:e3:35:f7:9f:
16:ae:c7:12:2f:61:4d:ef:7d:df:de:ba:54:83:9b:
be:6d:2c:8c:a2:c7:8d:20:33:78:72:fc:9c:74:bc:
4d:08:92:ee:25:39:34:79:14:a7:e7:ef:c0:1e:7b:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:17:CE:AF:EA:56:FF:F5:25:10:2E:12:35:5B:B5:00:98:7D:DE:DD
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/FRfOr-pW__UlEC4SNVu1AJh93t0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.128.0/19
101.49.192.0-101.49.239.255
Signature Algorithm: sha256WithRSAEncryption
35:24:2c:e9:4d:9b:32:bc:fc:93:0b:42:7f:d9:cd:1e:09:83:
b4:5a:9d:0a:24:00:c8:89:a8:0b:9a:a4:be:47:09:3d:83:f9:
b9:2e:17:45:9e:1e:06:d5:d6:68:a5:c4:fb:aa:f8:73:27:4a:
3c:a6:66:f3:08:22:23:ea:a7:07:a3:4b:fc:22:9a:bd:0d:d5:
62:3e:60:0e:e4:a3:f9:a8:bf:55:04:0b:dd:8e:51:d9:40:0c:
65:6e:b2:e4:e1:f4:15:f7:22:09:98:db:b3:92:80:ae:69:b2:
04:ed:25:ea:9b:fa:a0:40:fa:e2:bd:5c:50:8e:a4:39:da:53:
1c:e0:d2:2e:b4:08:8e:c6:f9:7a:ef:fc:61:14:42:9d:ec:94:
5b:6b:39:bf:3b:88:c0:c2:a4:3a:03:f1:b2:90:3e:96:22:a1:
0f:ba:29:7d:38:73:37:22:ff:36:17:7c:21:48:54:15:36:81:
a6:98:d0:54:18:6e:ff:25:fc:fa:f4:7f:59:d1:5c:fc:5b:ed:
ef:d2:4e:a1:ea:4e:4f:a7:41:e0:e1:a1:cb:32:f6:74:9d:8d:
8f:ee:1c:b5:3b:ab:9c:82:dd:5c:94:fa:13:f4:f0:90:d8:6c:
2d:95:a4:94:92:68:59:9a:b8:28:19:22:f0:39:35:8c:ea:f6:
56:26:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org