Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/jE8QoN-2cQOsqMP7817ZhApaLtE.roa
File: jE8QoN-2cQOsqMP7817ZhApaLtE.roa (raw, json)
Hash identifier: daTIYkrDZ+kCURrWOqTZtAqz8dDwgx9NM8XyrP+oYoU=
Subject key identifier: 8C:4F:10:A0:DF:B6:71:03:AC:A8:C3:FB:F3:5E:D9:84:0A:5A:2E:D1
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0AD6
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/jE8QoN-2cQOsqMP7817ZhApaLtE.roa
Signing time: Tue 09 Aug 2022 05:00:14 +0000
ROA not before: Tue 09 Aug 2022 05:00:14 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 996
IP address blocks: 101.49.20.0/22 maxlen: 24
101.49.28.0/22 maxlen: 24
101.49.44.0/22 maxlen: 24
101.49.128.0/19 maxlen: 24
101.49.160.0/19 maxlen: 24
101.49.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Aug 9 05:00:14 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=8C4F10A0DFB67103ACA8C3FBF35ED9840A5A2ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:8a:b1:01:45:fd:3f:24:96:d9:26:ec:72:
4b:d3:87:02:21:fb:9e:ca:8a:18:38:b1:6a:5c:05:
4c:ca:f7:f6:5c:e6:1a:3d:e9:e4:06:ce:ae:6c:52:
93:1b:23:55:72:0e:00:d1:15:00:99:4a:fb:95:7e:
be:2e:6d:b4:04:4e:70:a9:48:30:37:82:2b:63:bd:
4d:ea:6c:f8:80:ed:c7:84:31:53:a4:ad:e2:e0:8d:
e6:60:c2:97:ce:79:00:d6:e2:4e:20:6d:c0:25:7d:
42:94:f4:fc:58:cd:7a:37:3b:8b:a6:17:5a:8e:d1:
a9:a5:02:1e:27:98:d2:9d:d7:6a:cf:30:43:c9:91:
35:42:c5:87:dd:82:98:77:aa:a8:2c:10:57:3b:2d:
0f:dd:89:5d:20:9a:b0:a6:df:92:e3:15:6f:ce:69:
ba:1a:20:21:1e:72:07:e6:0c:c6:cd:a3:04:fc:18:
be:c9:d0:7d:48:63:97:07:91:81:bd:4c:22:de:36:
73:1c:c1:21:e5:7e:af:87:06:7a:bb:d0:11:6c:a3:
50:b3:8f:8b:f8:32:7c:f4:42:15:69:4b:8f:1e:46:
6e:ca:5b:48:f8:5a:d9:c4:a9:32:6b:f6:f5:32:06:
77:43:3a:ac:71:0a:a1:d1:9a:5c:e6:61:c7:f0:ed:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4F:10:A0:DF:B6:71:03:AC:A8:C3:FB:F3:5E:D9:84:0A:5A:2E:D1
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/jE8QoN-2cQOsqMP7817ZhApaLtE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.20.0/22
101.49.28.0/22
101.49.44.0/22
101.49.128.0/18
101.49.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:f1:d8:6d:a0:f1:22:0c:d4:fb:8a:67:48:b1:15:18:4c:b9:
2c:e1:68:74:19:9f:fc:eb:2f:2f:aa:86:3b:79:6c:37:e1:f4:
5a:4a:4f:08:0f:f8:8b:ab:96:e0:fe:11:cf:57:0d:a9:99:c8:
88:2e:27:f5:5b:40:87:a5:bd:57:f1:29:62:a5:06:b0:c8:c4:
ca:a9:4c:cd:48:eb:28:5e:4e:4a:e8:1d:2f:ec:d2:7d:5e:10:
cd:c8:38:f8:c1:90:d7:9a:e8:90:a4:20:35:ef:30:04:5a:07:
03:12:b0:a6:8e:2c:86:a6:86:bf:3a:a2:3e:64:74:1d:78:31:
5c:ae:c2:86:31:0a:4d:e5:98:a0:f9:b6:31:3d:08:5b:bc:0e:
25:0e:d8:8a:d2:cf:ae:9d:70:d2:37:32:d0:27:b5:a4:8b:99:
e3:71:05:bf:82:87:d0:40:a9:ca:ed:ee:e8:9d:28:80:91:ac:
c5:13:b1:1b:91:ad:21:96:21:7b:f1:38:ae:8f:7c:fb:7c:99:
3f:17:b6:ab:2d:14:73:c9:61:22:84:89:a2:bf:bb:74:fe:9e:
c8:e4:c4:29:3c:3f:06:82:db:15:07:da:6b:8a:35:b9:ed:60:
09:24:bb:a5:26:9e:c8:85:a0:16:63:be:62:8a:c9:72:7c:b5:
93:e5:5c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org