Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/a4Hz5Knt5pWiqUypFSRsS9f_f-E.roa
File: a4Hz5Knt5pWiqUypFSRsS9f_f-E.roa (raw, json)
Hash identifier: hYfwMtjC/8UbWDoV04SttnHgCL1WwW2pVBhcqa0zE94=
Subject key identifier: 6B:81:F3:E4:A9:ED:E6:95:A2:A9:4C:A9:15:24:6C:4B:D7:FF:7F:E1
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0A14
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/a4Hz5Knt5pWiqUypFSRsS9f_f-E.roa
Signing time: Tue 12 Jul 2022 04:18:08 +0000
ROA not before: Tue 12 Jul 2022 04:18:08 +0000
ROA not after: Fri 09 Jun 2023 06:51:49 +0000
asID: 996
IP address blocks: 101.49.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2580 (0xa14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jul 12 04:18:08 2022 GMT
Not After : Jun 9 06:51:49 2023 GMT
Subject: CN=6B81F3E4A9EDE695A2A94CA915246C4BD7FF7FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:6e:6e:b8:b3:83:b4:e9:5d:29:69:ec:3b:
6f:fa:0c:e9:f9:82:88:16:0c:bd:dc:88:e9:9f:19:
95:54:f4:fd:69:cd:04:f8:1c:82:6e:b4:12:9c:7c:
be:08:7e:f6:ca:82:57:c8:97:7e:93:bd:e6:13:03:
a6:f6:3f:13:d0:70:5c:72:41:4a:7b:63:73:64:21:
ce:95:0f:85:95:a1:0a:d7:ba:81:21:7d:ed:27:46:
6f:15:8f:37:78:c1:d7:bc:db:ca:eb:8f:36:d4:32:
2e:7e:ec:83:bb:30:b8:52:5c:f0:b4:48:ba:17:7c:
c0:57:92:cd:b7:c0:7c:e6:44:cb:9a:6c:ad:79:8e:
3b:c0:09:e3:19:a3:70:f8:f5:1d:71:a9:df:91:9e:
65:47:fa:81:78:30:20:0e:30:38:4b:bc:61:a6:85:
6c:a4:25:0e:fe:4a:e0:70:26:22:b5:c3:ad:72:1b:
3d:4f:03:7c:f3:6e:9f:b7:10:2f:8b:cc:76:cd:9e:
f6:23:99:f8:5b:11:b9:0d:32:16:4c:71:32:77:b4:
c9:d7:d9:63:b5:d1:f5:2e:08:a0:d8:c4:ff:ef:aa:
2d:54:f9:16:ed:97:42:c2:e3:39:48:dc:e6:30:3b:
8a:68:f4:40:d1:ed:26:59:9d:2e:ce:77:2b:a4:af:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:81:F3:E4:A9:ED:E6:95:A2:A9:4C:A9:15:24:6C:4B:D7:FF:7F:E1
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/a4Hz5Knt5pWiqUypFSRsS9f_f-E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:1b:1f:c8:10:9c:3e:1d:27:42:c0:e7:65:27:a3:8c:8a:12:
54:8f:f6:e6:3d:05:c0:84:c9:b2:cc:25:95:95:9d:d0:37:2b:
c6:d4:d7:bb:d2:1e:73:dd:34:15:06:b2:b8:b8:a2:7d:8f:34:
f6:2f:f7:80:47:e7:5c:f7:51:2f:34:bc:c1:18:73:06:7e:79:
8b:b2:d1:61:4e:cd:ce:06:0e:55:13:ff:dc:f4:d9:50:8b:6b:
74:36:19:f2:a8:4e:c8:66:cd:03:14:7c:9b:d1:e7:98:48:8e:
bd:17:0f:b2:97:4a:ed:00:de:9b:87:c7:25:bd:6f:12:7a:65:
db:e0:4e:20:0a:fb:c9:35:ea:7e:45:c9:ba:bc:3b:b5:b1:bf:
bb:5f:af:cc:c3:3b:6b:e1:a9:86:e5:a3:96:ab:ed:0f:42:f7:
62:09:c3:f6:2d:09:c1:15:64:a0:7d:73:a8:58:fc:f6:7e:3e:
e9:9d:bf:4a:47:5c:35:4b:bb:bc:9b:98:49:a1:a3:72:ea:16:
3d:2c:f8:d7:e1:53:eb:8c:35:6c:84:b5:d8:eb:23:f6:f2:76:
d7:88:30:e4:22:42:13:74:c2:f0:2f:c6:7e:21:55:58:8c:9f:
fd:12:f9:43:9e:11:8a:72:3d:a5:4c:7e:ab:b2:a8:32:74:83:
15:01:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org