Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/n3WNGiZxFXPZbqFaa59UipWmO1c.roa
File: n3WNGiZxFXPZbqFaa59UipWmO1c.roa (raw, json)
Hash identifier: VWs3zsIGyKkWYuddV59PFJxvsAWnSaeLVZ93o+qRrGQ=
Subject key identifier: 9F:75:8D:1A:26:71:15:73:D9:6E:A1:5A:6B:9F:54:8A:95:A6:3B:57
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0BFA
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/n3WNGiZxFXPZbqFaa59UipWmO1c.roa
Signing time: Tue 27 Sep 2022 14:11:57 +0000
ROA not before: Tue 27 Sep 2022 14:11:57 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 4134
IP address blocks: 101.49.0.0/18 maxlen: 24
101.49.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3066 (0xbfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Sep 27 14:11:57 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=9F758D1A26711573D96EA15A6B9F548A95A63B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:0d:eb:db:ff:19:eb:0b:ef:67:78:6d:d6:
70:36:16:39:0a:00:89:32:71:a9:c8:b9:cc:e0:33:
8c:ce:24:6a:8a:09:f9:a9:50:ac:c9:c9:ad:15:ff:
5c:d6:dc:40:e0:67:52:66:c2:b5:ee:fa:55:2e:11:
5e:a2:8d:68:48:4d:a0:8a:bd:df:31:c7:c0:86:77:
8c:2f:08:e1:32:13:22:e4:95:dd:db:9a:50:92:c0:
08:99:5f:8c:45:aa:25:43:19:e5:4b:68:f4:3e:0c:
68:07:64:77:b5:59:76:47:c8:e8:ac:7d:6f:7b:a1:
e2:4d:7d:08:3a:54:d2:9d:86:75:f8:57:80:62:fe:
4f:a7:ce:1f:61:08:1b:11:36:ee:6c:a2:a2:6b:36:
58:0d:6a:f4:a1:c9:f5:38:f4:f9:c3:7b:ec:d8:04:
01:db:89:92:ce:d4:bd:28:33:15:88:51:3f:1f:c3:
6c:44:06:58:20:c5:12:67:c4:7e:a2:e1:51:62:61:
7b:e8:c9:f4:79:9d:38:da:63:c2:1e:89:af:8f:cf:
c5:ec:32:ca:1b:ec:7a:e2:a3:0e:a0:73:b2:6b:04:
4f:33:41:7d:4a:34:d3:9a:86:3b:f0:a0:e0:2a:75:
66:62:31:15:92:63:e5:4d:91:01:69:33:48:cb:3e:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:75:8D:1A:26:71:15:73:D9:6E:A1:5A:6B:9F:54:8A:95:A6:3B:57
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/n3WNGiZxFXPZbqFaa59UipWmO1c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.0.0/17
Signature Algorithm: sha256WithRSAEncryption
e8:db:66:08:a9:cc:5c:79:b8:aa:b8:fe:a7:03:f4:8f:d1:81:
9d:8f:87:fa:53:78:be:cb:83:a6:28:5b:43:f3:33:4c:80:c1:
4e:74:bb:01:b5:20:de:ea:b3:0e:21:f7:36:80:87:95:00:03:
8a:5e:c7:24:5f:d1:d8:c6:e7:80:d7:57:a3:e1:70:6a:58:dd:
d3:79:56:f4:5c:69:cf:21:3f:94:7f:c3:7a:53:20:3d:86:ea:
39:88:cb:28:fa:9a:a1:3f:ec:7d:06:71:cb:e2:72:93:3e:77:
73:01:e3:bd:72:0b:d0:89:54:f4:c2:0d:5b:aa:8c:15:13:52:
a6:46:52:52:9f:76:95:b1:8e:31:40:ca:77:10:85:de:8b:e8:
a9:6c:9c:d6:7f:16:ac:bd:3a:5e:e8:17:f8:af:46:92:33:b5:
f7:88:ea:a9:18:e2:6e:35:b1:3f:d8:00:77:d3:e5:df:d9:c3:
2f:46:43:12:13:c6:af:ef:7e:05:fb:c5:80:41:38:57:2b:fc:
93:c1:2c:60:4d:53:62:59:44:38:c6:7c:54:88:d9:b1:b1:3e:
23:ee:ce:a6:70:01:8f:4a:f6:7e:ac:fb:81:63:fe:ac:b7:18:
ff:4f:2d:b4:e7:8e:4f:82:07:68:91:37:8b:1a:4c:0b:c9:83:
dd:f8:c8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org