Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/u1aY5YgzT9r6KhTTE4_y_EgBHsQ.roa
File: u1aY5YgzT9r6KhTTE4_y_EgBHsQ.roa (raw, json)
Hash identifier: 3I9QKS20B2IgbUn9bKdTKnyKUvKcwcF+Cz5Vi6SGm8s=
Subject key identifier: BB:56:98:E5:88:33:4F:DA:FA:2A:14:D3:13:8F:F2:FC:48:01:1E:C4
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0BD7
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/u1aY5YgzT9r6KhTTE4_y_EgBHsQ.roa
Signing time: Wed 21 Sep 2022 02:20:51 +0000
ROA not before: Wed 21 Sep 2022 02:20:51 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 996
IP address blocks: 43.254.128.0/22 maxlen: 24
101.49.128.0/19 maxlen: 24
101.49.160.0/19 maxlen: 24
101.49.240.0/20 maxlen: 24
103.236.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3031 (0xbd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Sep 21 02:20:51 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=BB5698E588334FDAFA2A14D3138FF2FC48011EC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:bb:b3:9d:68:f8:41:47:ac:db:c0:a1:41:
16:16:7b:73:b6:78:67:ed:16:5c:a6:7f:df:86:c7:
25:6b:56:c7:4a:f6:4f:8a:5f:02:9c:a2:3d:eb:24:
c7:9d:6e:d0:59:a3:84:70:30:cb:d8:92:9a:7d:2d:
33:e3:ee:80:0b:c9:ac:5f:42:ea:c5:45:07:f7:ed:
50:25:3a:62:a0:bb:bb:f5:cc:68:09:ed:aa:d1:aa:
e4:a8:f4:84:60:8c:39:e9:d8:22:b1:65:de:6c:bf:
49:40:c1:23:13:28:9d:8b:47:d2:bb:f7:0a:e1:6d:
26:df:a5:c9:c4:d2:ee:96:95:6c:2f:34:ef:a0:5c:
98:eb:29:78:83:f3:04:4e:5b:ea:f1:6e:25:c9:25:
6c:de:bd:18:6e:47:dc:af:d8:02:75:c5:fe:05:ae:
28:65:8c:03:fd:97:a9:82:1e:83:e1:b3:c2:41:d9:
ff:55:fc:bc:97:43:d1:74:26:b2:72:79:31:27:2b:
a5:94:be:70:ce:a1:7d:39:3c:51:16:8d:c8:71:86:
c3:b0:34:b2:86:20:b6:5d:e2:17:9c:e3:60:03:38:
c2:8d:f6:a2:f8:fa:45:2e:a4:64:33:84:f4:db:62:
f3:8f:95:d3:0b:fd:5c:4d:2b:ee:5f:7f:3b:0b:57:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:56:98:E5:88:33:4F:DA:FA:2A:14:D3:13:8F:F2:FC:48:01:1E:C4
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/u1aY5YgzT9r6KhTTE4_y_EgBHsQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.128.0/22
101.49.128.0/18
101.49.240.0/20
103.236.232.0/22
Signature Algorithm: sha256WithRSAEncryption
48:ba:26:a5:4b:42:c6:79:99:97:e2:1b:92:9a:c0:15:e1:ef:
25:3e:d8:ef:64:7b:78:c4:f1:d8:3c:96:bf:a3:6e:28:13:53:
96:51:5a:fd:a7:c1:22:42:8d:7c:b1:8b:c9:02:e1:55:f7:41:
86:d8:5f:a1:7c:ec:8c:fc:26:b7:8a:ed:bf:02:90:9b:b9:c7:
3e:97:8b:5e:da:0c:b4:61:42:04:23:99:fb:65:af:06:61:4b:
76:be:63:ad:a1:d2:e0:18:8a:7e:27:07:89:c3:53:d4:0d:17:
2d:b5:e3:06:ef:36:66:8a:5d:e4:90:22:20:f3:70:8f:77:98:
03:3f:c8:b8:33:44:38:60:d2:7a:cf:f5:fb:4c:a3:d5:9b:a5:
fc:70:fd:65:80:e5:6a:46:8f:b1:9d:f8:5e:fa:9e:e5:e4:57:
cc:96:ce:63:6a:f5:f0:9c:eb:e8:d2:01:bf:47:81:26:05:f5:
d5:fd:9c:9a:57:7c:66:4f:c3:65:cb:74:81:88:73:87:42:1d:
f4:bb:d7:a9:16:88:0d:9d:e5:fa:56:4f:67:f5:01:30:e5:5a:
e2:8b:ee:e0:77:c0:a5:0e:ca:37:ef:e5:57:10:e7:36:57:ee:
03:b5:20:0f:02:a3:a8:e8:8f:55:13:5a:93:d2:20:fc:97:eb:
71:6a:a2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org