Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/Hyn0kN_Qh2v3xQ8UC97pgnn6VIo.roa
File: Hyn0kN_Qh2v3xQ8UC97pgnn6VIo.roa (raw, json)
Hash identifier: dIjoygYwiuDGnoPtlx9qbtqb6R4cXXycdu/LudrPLRE=
Subject key identifier: 1F:29:F4:90:DF:D0:87:6B:F7:C5:0F:14:0B:DE:E9:82:79:FA:54:8A
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0B55
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/Hyn0kN_Qh2v3xQ8UC97pgnn6VIo.roa
Signing time: Thu 01 Sep 2022 13:40:44 +0000
ROA not before: Thu 01 Sep 2022 13:40:44 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 7018
IP address blocks: 101.49.0.0/18 maxlen: 24
101.49.64.0/19 maxlen: 24
101.49.80.0/22 maxlen: 24
101.49.84.0/22 maxlen: 24
101.49.88.0/22 maxlen: 24
101.49.92.0/22 maxlen: 24
101.49.96.0/19 maxlen: 24
101.49.128.0/19 maxlen: 24
101.49.192.0/19 maxlen: 24
101.49.224.0/20 maxlen: 24
103.203.100.0/22 maxlen: 24
115.31.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2901 (0xb55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Sep 1 13:40:44 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=1F29F490DFD0876BF7C50F140BDEE98279FA548A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:51:d1:e5:81:fc:db:28:e1:2d:e5:c7:62:
6c:14:d3:70:16:f1:53:e7:e1:22:0b:af:c3:5d:e0:
89:59:b4:ec:1f:42:df:08:9d:44:1d:81:91:48:74:
85:1e:0a:bb:59:f4:70:89:e9:63:87:70:e1:60:0e:
77:55:67:22:c7:eb:c8:a1:e4:00:cf:53:87:5b:25:
b4:b5:df:5a:31:35:bd:7d:f7:a1:f2:c5:b2:b3:15:
57:de:1c:70:20:f2:aa:64:84:cd:79:dd:18:d0:e3:
c9:76:59:5e:aa:51:df:9b:bb:02:db:77:12:85:6d:
02:e6:86:8e:51:0f:c5:9a:ab:9a:ef:8e:68:02:a7:
01:99:fa:52:9c:a4:95:58:fe:9f:f6:e8:76:ae:c1:
33:23:da:f9:14:89:08:d2:77:ce:a6:8f:0d:97:e7:
e6:bb:73:a6:33:8c:c5:c8:38:d2:80:5c:71:ac:11:
b5:8f:41:3a:50:02:ec:62:46:81:a9:1c:e3:b7:98:
58:e2:d2:9d:f4:39:a5:da:fa:2c:7a:89:9c:43:6a:
f0:b0:28:e9:2a:5b:66:41:14:fb:3a:aa:39:4a:d6:
48:52:43:57:56:8c:34:96:a3:28:9a:07:20:7a:f5:
8b:9e:c5:50:b0:88:32:ec:b0:fa:1a:67:43:57:04:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:29:F4:90:DF:D0:87:6B:F7:C5:0F:14:0B:DE:E9:82:79:FA:54:8A
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/Hyn0kN_Qh2v3xQ8UC97pgnn6VIo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.0.0-101.49.159.255
101.49.192.0-101.49.239.255
103.203.100.0/22
115.31.68.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:14:8d:7b:95:2a:ce:f1:c3:10:bb:61:2f:46:45:2a:64:49:
93:5b:21:f6:06:93:6c:e6:6b:e0:d3:d6:25:68:50:f1:e1:5b:
c1:98:4f:77:3e:f7:1c:2c:48:28:66:5f:4a:02:3a:63:4c:fe:
75:4f:12:e4:34:ca:06:c0:c5:6f:67:da:e1:40:f3:8d:86:1c:
ef:b0:17:37:4b:1b:08:c3:91:27:f3:9b:b0:95:89:bd:67:d0:
77:8e:33:5a:64:bc:af:87:cb:60:e3:a9:fc:ae:0d:36:2f:42:
77:be:cb:a2:d4:43:8c:f0:eb:a6:61:f3:3c:d4:ed:ce:14:49:
d3:5b:d4:96:93:29:27:25:9c:6e:3d:14:2a:53:e1:d3:a3:8c:
28:3d:1d:ae:4d:0a:f2:36:e9:d4:68:6d:b9:34:a3:62:73:fa:
f5:d6:4f:8b:5f:cd:dd:21:b9:7f:d7:57:06:7a:db:62:56:a6:
4a:19:07:ca:9c:91:46:68:32:47:fe:90:2b:fe:59:8e:84:65:
5e:33:16:90:e0:61:34:a7:b8:44:f6:8f:21:ea:1d:04:a1:4f:
95:56:9e:5c:89:03:2d:80:48:4f:c3:ac:ed:c2:46:98:53:67:
01:25:e8:6e:48:4d:f7:3b:10:b4:24:cd:4a:ca:e2:ec:ac:46:
22:d6:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org