Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/dK-pm5HTs3TaNKTc98FGcPl3Sxw.roa
File: dK-pm5HTs3TaNKTc98FGcPl3Sxw.roa (raw, json)
Hash identifier: HOO9751Mowj9L43oVAVu4kYUP/x7UPSnf54gz5078oI=
Subject key identifier: 74:AF:A9:9B:91:D3:B3:74:DA:34:A4:DC:F7:C1:46:70:F9:77:4B:1C
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0A0C
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/dK-pm5HTs3TaNKTc98FGcPl3Sxw.roa
Signing time: Tue 12 Jul 2022 04:13:04 +0000
ROA not before: Tue 12 Jul 2022 04:13:04 +0000
ROA not after: Fri 09 Jun 2023 06:51:49 +0000
asID: 7018
IP address blocks: 101.49.128.0/23 maxlen: 23
101.49.130.0/23 maxlen: 23
101.49.132.0/23 maxlen: 23
101.49.134.0/23 maxlen: 23
101.49.136.0/23 maxlen: 23
101.49.138.0/23 maxlen: 23
101.49.140.0/23 maxlen: 23
101.49.142.0/23 maxlen: 23
101.49.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2572 (0xa0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jul 12 04:13:04 2022 GMT
Not After : Jun 9 06:51:49 2023 GMT
Subject: CN=74AFA99B91D3B374DA34A4DCF7C14670F9774B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:f9:e8:ab:db:da:2c:56:c4:97:e3:6e:09:
cb:1d:aa:63:94:70:44:77:af:82:68:1c:45:bc:02:
af:3e:41:5b:79:5c:ab:0b:81:20:f0:d7:c2:5f:85:
64:ea:1b:10:8d:c0:bf:7a:73:c0:c5:83:a0:c5:56:
fd:90:e2:09:47:4a:a5:d2:78:54:c6:9b:db:a0:23:
b5:85:ac:64:5b:10:b7:af:06:ec:ac:67:10:38:21:
4c:11:e8:e1:1a:65:98:81:73:9e:c7:25:3a:68:70:
c2:60:cb:c0:81:8c:98:8f:0c:61:c0:a8:dc:72:b7:
35:4f:a7:eb:02:54:07:32:35:c6:36:f9:59:a7:2e:
22:75:4b:06:3a:24:f5:f6:b3:70:33:b8:e4:d3:2a:
c3:f0:13:e6:4e:c7:0e:0f:fb:7c:de:ac:7d:8e:06:
87:dc:b4:a4:ff:36:1a:79:0f:8b:6a:32:ee:2c:d8:
34:4e:f5:0b:66:b3:e7:fb:1f:fb:d5:ee:e4:66:4a:
e2:55:5a:95:5f:cd:73:aa:c4:87:77:7e:21:31:db:
a1:85:71:18:24:bd:38:3c:03:77:6c:1a:49:54:89:
6b:71:dc:f9:20:04:a4:33:90:f8:21:c1:0b:0a:95:
62:a7:f7:e7:8d:5f:8a:d2:43:ee:09:ab:09:98:e7:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AF:A9:9B:91:D3:B3:74:DA:34:A4:DC:F7:C1:46:70:F9:77:4B:1C
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/dK-pm5HTs3TaNKTc98FGcPl3Sxw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.128.0-101.49.145.255
Signature Algorithm: sha256WithRSAEncryption
4c:94:6a:18:09:73:ef:74:7c:a4:14:54:c3:8f:f9:30:7e:b4:
da:e5:7b:1b:2a:4d:42:82:b5:61:f4:e6:a0:bf:05:7b:b3:ae:
51:44:3b:1a:43:cb:9b:d1:a5:de:b0:c5:df:34:d9:f1:6d:19:
b9:2e:a9:f4:10:64:7e:15:60:7f:94:94:0d:09:a8:28:c4:20:
04:dd:a1:aa:89:65:43:32:ac:6e:90:34:c6:af:ee:c8:99:20:
3d:7b:a8:3a:3c:b2:85:9f:e6:70:41:55:87:b3:eb:c1:00:24:
21:15:29:97:f6:d6:81:68:e2:f9:1b:bf:c5:b1:82:0d:05:2a:
b6:c5:03:68:b6:ce:12:49:65:35:8c:7f:85:7a:d4:99:f9:a5:
85:be:b1:8c:d0:a1:cd:1b:b4:34:48:74:1e:6b:d2:88:0f:77:
f6:0c:f5:50:15:af:da:5b:65:2b:06:0f:d0:4c:0b:ab:07:52:
8c:d8:2f:c7:0c:13:98:7e:6b:a0:37:87:9b:35:42:cd:0f:32:
81:95:4b:9d:7e:c6:d0:27:86:49:88:3d:2a:8d:04:db:a7:01:
2e:57:f6:27:ba:19:bc:cf:fd:af:c7:95:fe:55:69:99:cc:b5:
16:51:3c:60:75:38:ad:a5:6e:ee:c9:ef:b6:b5:e5:f1:a5:3a:
7f:51:f6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org