Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/cfcHAvMmF4aahSnhROmoLrOLF3E.roa
File: cfcHAvMmF4aahSnhROmoLrOLF3E.roa (raw, json)
Hash identifier: OVB2l/xVP1pdeosX8GWp+U04l7o9mDTVbbltJ5MY+Vg=
Subject key identifier: 71:F7:07:02:F3:26:17:86:9A:85:29:E1:44:E9:A8:2E:B3:8B:17:71
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0957
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/cfcHAvMmF4aahSnhROmoLrOLF3E.roa
Signing time: Tue 07 Jun 2022 10:08:07 +0000
ROA not before: Tue 07 Jun 2022 10:08:07 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 7018
IP address blocks: 101.49.0.0/18 maxlen: 24
101.49.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jun 7 10:08:07 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=71F70702F32617869A8529E144E9A82EB38B1771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:7c:1c:bc:f1:f8:29:05:7b:9b:39:6a:33:
64:b5:bf:78:e5:0f:71:c5:5b:70:43:3a:37:fd:5e:
12:21:4a:53:09:02:69:06:0f:c6:4f:0c:d1:24:9f:
56:fe:40:cf:92:da:e8:75:b7:96:0a:ab:a8:8e:d9:
4d:cb:c9:13:b9:79:f5:f6:ce:3e:a8:44:7e:43:40:
87:f8:7a:4b:d1:1a:c6:58:7d:7e:a1:e5:91:32:9b:
46:21:07:0f:e8:76:9b:19:2e:6a:5b:ec:5e:12:88:
96:fe:02:c5:ce:4e:fe:f0:8d:90:89:71:b7:30:e7:
83:3d:59:cd:0c:3e:8a:d7:46:3e:8b:b5:ff:26:f6:
90:b5:ca:07:ed:79:0f:8c:74:ba:f7:dd:c8:f4:80:
c7:44:0e:fc:49:25:23:3a:f3:26:16:6a:5a:a8:3f:
17:69:28:f5:dc:63:c9:d9:29:c1:bd:2f:de:bd:f6:
e1:1f:5e:e7:d1:a6:70:78:34:ae:64:75:7e:65:87:
c9:94:de:ff:4a:d3:dc:49:64:6b:97:94:04:ef:08:
65:f8:5a:10:f3:22:4a:30:5e:74:37:d8:67:a6:4d:
05:2b:fd:18:e0:d7:c0:0d:57:47:54:1d:f8:0c:59:
7c:9a:cb:c0:e1:70:54:f3:17:2b:93:ae:a2:b1:8c:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:07:02:F3:26:17:86:9A:85:29:E1:44:E9:A8:2E:B3:8B:17:71
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/cfcHAvMmF4aahSnhROmoLrOLF3E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.0.0/18
101.49.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:73:71:f2:ed:8d:da:98:d9:1e:a1:82:97:76:bd:1e:c3:5f:
07:11:db:04:21:fa:29:a6:8b:67:2f:f1:57:aa:81:dd:da:3a:
dd:d7:71:1b:b0:bd:47:72:85:b2:f0:d6:a9:de:cd:cc:7f:4f:
ed:13:8a:b6:b3:e9:6f:4f:19:04:b9:7d:f2:89:48:30:17:eb:
f2:f5:eb:9c:61:4d:e1:53:6a:77:f8:8c:d5:fd:00:57:a6:27:
d7:fa:a8:9d:12:e7:51:31:0e:93:41:2e:59:40:f9:97:b4:9d:
e7:dc:dd:bd:24:b1:2a:2e:6f:c6:93:f2:26:56:6a:fc:6c:a1:
2a:1d:71:de:b6:18:b6:14:5d:3a:30:5c:17:74:fb:0c:86:e3:
3a:bd:ff:b9:88:0f:0d:2d:a5:7e:28:fa:41:7f:01:50:29:c7:
33:3f:c8:9d:44:44:54:f4:c0:f6:87:42:b1:b2:93:75:f0:08:
a8:2a:74:b8:a2:ab:62:db:30:87:24:45:28:dc:21:02:9d:bb:
f1:5d:8e:4e:dd:45:87:73:80:c7:4c:da:39:32:25:30:ac:28:
62:ea:66:3e:67:8e:08:6d:55:45:ce:08:3c:36:f2:30:bd:62:
85:5e:eb:5d:59:f4:c9:9a:62:48:d4:06:2e:80:c8:90:fb:a9:
45:23:fa:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org