Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/Genc5Z36qGdhXjOR_hW2HhRJY6o.roa
File: Genc5Z36qGdhXjOR_hW2HhRJY6o.roa (raw, json)
Hash identifier: 6pekjLsEXClelZsoIV2T+YaC7FWXTKm01RWigNwPZ04=
Subject key identifier: 19:E9:DC:E5:9D:FA:A8:67:61:5E:33:91:FE:15:B6:1E:14:49:63:AA
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0A47
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/Genc5Z36qGdhXjOR_hW2HhRJY6o.roa
Signing time: Wed 20 Jul 2022 04:48:36 +0000
ROA not before: Wed 20 Jul 2022 04:48:36 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 996
IP address blocks: 101.49.128.0/23 maxlen: 24
101.49.130.0/23 maxlen: 24
101.49.132.0/23 maxlen: 24
101.49.134.0/23 maxlen: 24
101.49.136.0/23 maxlen: 24
101.49.138.0/23 maxlen: 24
101.49.140.0/23 maxlen: 24
101.49.142.0/23 maxlen: 24
101.49.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2631 (0xa47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jul 20 04:48:36 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=19E9DCE59DFAA867615E3391FE15B61E144963AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:c4:a7:42:82:dc:e4:c1:71:6e:06:34:c2:
c2:1f:5a:59:c3:57:5d:d3:1d:13:c7:76:4e:31:06:
cc:81:d0:00:56:c1:ad:e2:27:55:52:d5:59:e7:36:
f8:d5:c9:07:a8:21:1b:4d:67:7f:bc:43:fd:5c:8b:
73:b6:4c:b5:6a:3f:e3:72:ae:44:6e:fd:80:be:97:
7c:19:61:51:a6:d2:50:98:4a:56:d3:5e:4a:fe:83:
a9:73:98:7b:1c:3b:fc:aa:7d:45:ae:71:57:c5:b8:
db:ba:b3:7f:1b:d6:a1:e0:81:fc:7a:7e:02:fe:5f:
4c:32:54:a2:8a:ee:c5:ab:8c:66:6c:51:f8:11:c1:
b7:1a:b3:f2:da:a1:46:25:25:fc:61:5c:b4:e5:0a:
81:69:3e:c2:45:4a:a7:89:8c:ca:35:9e:a6:47:5d:
fe:91:37:8d:f0:fa:9d:77:98:2c:1a:80:ab:c1:5d:
bd:f2:46:b0:9e:91:55:dc:e3:c9:c8:f7:08:2c:f9:
ed:03:e2:49:4f:69:1f:98:9d:b1:58:df:34:89:8a:
8c:d3:e7:0b:07:27:37:db:f7:7c:19:fd:34:36:f9:
1d:51:cc:e1:58:6e:c3:f5:be:55:7f:2a:e9:8e:b2:
c5:9c:27:c1:63:94:10:f4:60:3d:e4:6e:e6:17:3d:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E9:DC:E5:9D:FA:A8:67:61:5E:33:91:FE:15:B6:1E:14:49:63:AA
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/Genc5Z36qGdhXjOR_hW2HhRJY6o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.128.0/20
101.49.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:4b:5d:99:1d:88:2d:09:b3:d9:55:ca:76:a4:6f:00:a4:c8:
12:56:5f:f0:f4:41:0a:93:08:ff:80:99:a7:89:a1:8d:27:37:
1c:85:43:08:73:0f:53:98:10:ab:ea:8b:e9:19:c3:e6:e1:ce:
44:8f:45:7b:4f:58:98:d2:3e:cb:c8:46:f5:c2:be:f3:10:e9:
5d:a9:ad:54:51:a9:9c:13:81:7a:82:4b:4c:1b:5b:bd:e8:3b:
6e:e1:c1:41:6b:91:5e:41:68:8e:32:65:40:fc:25:52:93:52:
9a:63:4e:1e:0b:09:85:ed:d0:09:44:88:77:5a:4e:1b:95:7c:
e9:c2:5f:6a:be:69:bd:3e:22:96:e3:a2:9d:d7:cb:6b:6c:25:
08:e8:90:ca:58:73:82:aa:81:e6:de:27:1c:74:36:c2:49:65:
ac:77:1a:4d:dc:d3:19:8c:44:d9:92:bc:9a:ef:b2:0a:49:96:
31:e8:ab:03:48:f6:a0:b1:3d:4c:df:22:96:f0:2d:b1:e5:5c:
c5:20:55:6c:2d:89:3c:34:64:b8:4d:8d:46:bf:73:18:77:2c:
98:87:f1:1c:ea:2a:fb:05:ed:8b:34:49:af:33:2c:0e:63:15:
a2:68:58:1e:e6:1e:84:2f:6e:7f:79:db:45:b6:a9:65:c2:39:
31:b2:55:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org