Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/qNeG6kXQAL8xHvbQyvx3BZuINNE.roa
File: qNeG6kXQAL8xHvbQyvx3BZuINNE.roa (raw, json)
Hash identifier: 16lrI1pFfrq4TAOsdO65gRtBm4eC9TsU8J0X1Fl5mc8=
Subject key identifier: A8:D7:86:EA:45:D0:00:BF:31:1E:F6:D0:CA:FC:77:05:9B:88:34:D1
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0A35
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/qNeG6kXQAL8xHvbQyvx3BZuINNE.roa
Signing time: Mon 18 Jul 2022 03:22:25 +0000
ROA not before: Mon 18 Jul 2022 03:22:25 +0000
ROA not after: Fri 09 Jun 2023 06:51:49 +0000
asID: 7018
IP address blocks: 101.49.0.0/18 maxlen: 24
101.49.80.0/22 maxlen: 24
101.49.84.0/22 maxlen: 24
101.49.88.0/22 maxlen: 24
101.49.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jul 18 03:22:25 2022 GMT
Not After : Jun 9 06:51:49 2023 GMT
Subject: CN=A8D786EA45D000BF311EF6D0CAFC77059B8834D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:34:74:3f:8f:51:bc:17:5e:10:c9:d2:d1:
60:09:8d:6a:c5:16:1d:37:ee:c6:79:71:7a:d2:e6:
cd:a1:d4:18:46:25:c8:8c:f1:11:fa:cb:00:71:7c:
62:a7:93:4d:1b:66:fc:8c:ab:23:ec:ad:7f:7a:95:
05:07:9f:9a:f3:5e:de:3e:3c:ee:8c:64:aa:89:bd:
78:e0:1a:7a:45:87:31:4d:3c:1c:98:57:4d:aa:c3:
2a:c1:70:6f:1d:18:0e:ee:16:f1:ed:a1:7c:4e:c7:
84:35:43:1f:94:d9:59:9a:57:8b:56:cc:ce:6f:64:
03:03:3b:e7:9c:3d:c6:6a:3e:cc:25:78:6c:71:f5:
b5:5e:78:41:6e:8c:12:35:75:b9:64:dd:2d:7a:2c:
ee:86:86:59:7e:5f:ec:02:74:d3:d3:15:3f:d1:db:
5b:c4:e9:b8:59:ad:ee:9a:11:60:dc:4e:21:70:3e:
18:1e:ed:f1:96:31:6b:62:ca:b6:f0:dd:07:fa:c4:
0e:97:81:4e:49:d0:46:0a:60:3f:b5:4a:c8:82:e2:
62:38:f3:4c:96:7f:e7:c1:7c:9d:98:ce:1e:80:a5:
c8:20:79:7d:af:ba:f0:bc:fb:a6:7f:ae:61:6a:ec:
70:a5:0b:d9:0d:ef:db:70:5e:33:91:27:f9:aa:b0:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D7:86:EA:45:D0:00:BF:31:1E:F6:D0:CA:FC:77:05:9B:88:34:D1
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/qNeG6kXQAL8xHvbQyvx3BZuINNE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.0.0/18
101.49.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:f6:75:6f:64:37:e9:a0:1a:17:57:f3:50:1b:18:31:92:cd:
73:72:8b:98:55:3f:74:5b:a8:ad:36:ee:7d:e7:33:02:a3:53:
08:08:71:a0:0e:09:57:0b:63:5b:40:d8:0c:ce:f0:2c:b4:7f:
f1:6e:1f:11:db:aa:e3:f9:22:a0:4d:06:40:3a:c2:b0:d4:6b:
eb:9a:d5:d2:f4:7f:8c:10:7d:0b:35:50:48:c9:92:bb:25:85:
a9:66:5b:cd:ac:97:42:c0:dd:10:ba:36:84:c5:00:53:9a:08:
6f:cb:4f:a0:73:44:31:e4:a2:20:20:32:b9:55:f4:6b:ed:20:
b1:8e:e7:02:fb:8b:e8:5a:16:5a:bb:8e:1d:b3:57:aa:14:92:
c6:a2:f5:e1:80:91:e8:99:56:3c:da:19:a6:db:73:f2:af:de:
66:84:c3:57:94:2b:fc:85:96:1b:66:bf:e8:8b:de:7b:ed:1e:
e3:fe:bc:fd:bb:58:b9:95:f4:d8:ce:70:d6:9f:ec:f4:d5:6f:
0f:b0:8f:d6:a2:7d:75:b9:54:db:4c:3b:4b:62:75:ef:06:cc:
20:42:b3:56:b8:08:af:d4:8a:b6:49:69:9e:27:2d:78:ff:ea:
be:53:db:41:8e:5b:5a:f9:6d:06:eb:5a:18:7c:3c:5b:48:cf:
19:a9:d0:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org