Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/k5nRlqCixR53_PyXxE2_uT3Fkuc.roa
File: k5nRlqCixR53_PyXxE2_uT3Fkuc.roa (raw, json)
Hash identifier: 9Jwr8gDY2IKl4jgBR2eTxrX4/Ov0+gCYt0yVEI2xoSo=
Subject key identifier: 93:99:D1:96:A0:A2:C5:1E:77:FC:FC:97:C4:4D:BF:B9:3D:C5:92:E7
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0A76
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/k5nRlqCixR53_PyXxE2_uT3Fkuc.roa
Signing time: Fri 22 Jul 2022 06:30:17 +0000
ROA not before: Fri 22 Jul 2022 06:30:17 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 996
IP address blocks: 101.49.20.0/22 maxlen: 24
101.49.28.0/22 maxlen: 24
101.49.44.0/22 maxlen: 24
101.49.128.0/19 maxlen: 24
101.49.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2678 (0xa76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jul 22 06:30:17 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=9399D196A0A2C51E77FCFC97C44DBFB93DC592E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:44:9e:a6:77:67:25:b2:5a:83:80:58:48:
e5:a7:45:1f:65:86:68:2b:3a:ee:de:39:ae:04:f4:
12:c9:09:80:df:e1:f1:18:9d:de:5d:c3:48:1b:f0:
18:78:b8:04:cb:3e:8f:43:dc:0d:65:1b:0a:2a:7e:
eb:ec:a3:d3:38:d4:fc:13:a6:1f:b9:80:e9:f4:f0:
09:4a:23:66:8b:46:e5:b9:97:83:4b:7a:2e:c8:5f:
17:32:9e:97:93:38:ec:a0:9a:ae:52:c3:bb:2f:1e:
b7:f7:94:bb:26:66:97:5e:2c:af:76:a9:74:41:04:
a0:72:d5:96:a3:6c:05:a9:11:a0:35:cd:c6:eb:ac:
79:53:8a:ff:f9:df:c7:62:d4:e1:bc:4e:c0:ed:a1:
39:42:f1:a5:90:1b:c5:45:c2:a7:ed:77:d5:f8:b7:
aa:51:18:4a:7d:02:a4:fc:31:17:ee:dc:ec:a8:0a:
56:fd:16:dc:80:44:9a:95:e6:fb:a5:ca:5a:d6:0e:
c1:05:cd:90:fa:f2:da:ea:20:9b:e3:c2:93:70:a3:
2d:9d:b7:85:d3:00:8c:66:da:f0:8b:8a:12:48:4e:
b3:e9:ed:6e:7e:2f:31:9a:3c:bd:50:dc:2f:b8:f4:
c1:17:1f:c0:6c:ad:1e:75:c4:e3:90:a1:d1:65:fa:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:99:D1:96:A0:A2:C5:1E:77:FC:FC:97:C4:4D:BF:B9:3D:C5:92:E7
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/k5nRlqCixR53_PyXxE2_uT3Fkuc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.20.0/22
101.49.28.0/22
101.49.44.0/22
101.49.128.0/18
Signature Algorithm: sha256WithRSAEncryption
47:e1:94:21:45:97:73:4a:fc:02:f4:2c:f6:fd:31:25:a1:5e:
7c:dd:05:b7:1e:d4:39:f6:3a:e6:14:13:4f:07:04:db:07:9c:
da:3b:c5:24:f0:23:28:80:07:90:51:69:90:b3:2f:cc:1b:7b:
b2:81:79:2a:6a:1d:b2:c2:92:51:85:cb:7e:69:35:d2:ec:4f:
22:c7:d9:7f:07:00:80:d0:f5:09:cb:8d:16:e0:57:43:34:21:
24:ca:ab:ba:52:51:b6:89:e6:65:33:6f:83:9d:3e:c1:31:91:
94:00:8b:72:3b:a5:17:4e:33:9c:96:b9:5c:70:ad:34:2a:93:
7f:4f:76:f3:fb:18:be:45:b9:6d:b5:39:ec:83:1b:7a:d1:92:
21:24:e4:86:2e:76:8b:27:89:35:91:b4:a4:1d:67:b5:6d:80:
f5:00:f7:f2:e7:57:19:0f:bc:6b:83:92:01:38:57:45:20:d3:
4d:5b:b3:4d:9d:50:01:8f:32:08:0a:e2:2d:a7:fe:5b:cb:8e:
80:1f:5b:c8:6a:01:e1:02:4a:e0:b4:83:5a:fe:1d:12:db:fc:
64:4d:d7:6d:12:7c:34:0b:da:74:7f:3c:b3:15:56:76:f4:26:
52:af:d3:f3:66:da:73:37:78:bc:2f:5b:14:3c:67:dc:4a:e6:
da:25:4a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org