Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/119/wximvkPmo-4CLs-yiPk6uarJH8o.roa
File: wximvkPmo-4CLs-yiPk6uarJH8o.roa (raw, json)
Hash identifier: oF3Mj8Vy9Qc7PcLInoOR6pQ49r16Bf5rTl1m0ywZ9G0=
Subject key identifier: C3:18:A6:BE:43:E6:A3:EE:02:2E:CF:B2:88:F9:3A:B9:AA:C9:1F:CA
Certificate issuer: /CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A
Certificate serial: 0B
Authority key identifier: F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/wximvkPmo-4CLs-yiPk6uarJH8o.roa
Signing time: Tue 22 Nov 2022 04:26:13 +0000
ROA not before: Tue 22 Nov 2022 04:26:13 +0000
ROA not after: Tue 21 Nov 2023 09:05:53 +0000
asID: 9807
IP address blocks: 219.235.128.0/21 maxlen: 21
219.235.136.0/21 maxlen: 21
219.235.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F556C3AAA1001F89DC0FCED5436A21BB4FF35D7A
Validity
Not Before: Nov 22 04:26:13 2022 GMT
Not After : Nov 21 09:05:53 2023 GMT
Subject: CN=C318A6BE43E6A3EE022ECFB288F93AB9AAC91FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:c9:69:57:47:45:20:6a:d2:34:59:a2:14:
c9:c1:81:be:f0:b9:c7:a7:6e:b1:3c:52:00:98:51:
07:d8:e9:33:53:71:68:69:61:42:7f:b6:41:b4:ed:
fc:ee:a2:76:d0:7d:aa:04:92:e6:18:d1:91:fa:0c:
49:f0:1b:26:37:59:4e:af:b4:03:a8:1f:a8:e7:07:
61:cb:20:27:b5:82:ea:01:1e:dd:fc:b1:25:eb:a8:
58:12:88:80:64:a9:68:55:58:7a:06:56:3d:23:9b:
dc:0f:ae:f2:c9:b0:a2:36:eb:04:6e:7e:8b:75:85:
89:09:bb:0a:7e:b7:4f:66:c1:10:2a:ac:96:6a:29:
6a:0d:46:0e:b4:f4:2f:ef:5d:dd:30:ca:03:bc:08:
26:35:a5:5e:89:93:46:22:db:01:d6:bc:9e:ae:66:
ca:95:6b:3b:02:13:9e:35:48:d2:e3:52:af:48:ad:
33:f6:d5:3b:0c:ac:94:21:55:91:fc:fd:dd:06:3d:
29:5f:6c:67:13:17:4e:f9:11:55:78:bf:68:fe:5c:
ba:5e:7b:5b:1e:ba:f3:87:8f:4e:81:dc:7c:db:8e:
ff:90:87:d2:1b:89:93:cb:87:a6:61:26:0f:93:55:
b3:61:b7:4b:28:3a:0b:0f:79:dc:ea:93:fb:ec:23:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:18:A6:BE:43:E6:A3:EE:02:2E:CF:B2:88:F9:3A:B9:AA:C9:1F:CA
X509v3 Authority Key Identifier:
keyid:F5:56:C3:AA:A1:00:1F:89:DC:0F:CE:D5:43:6A:21:BB:4F:F3:5D:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/9VbDqqEAH4ncD87VQ2ohu0_zXXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9VbDqqEAH4ncD87VQ2ohu0_zXXo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/119/wximvkPmo-4CLs-yiPk6uarJH8o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.235.128.0-219.235.151.255
Signature Algorithm: sha256WithRSAEncryption
7c:d1:06:44:fa:db:40:1a:51:c8:77:42:95:73:39:88:3c:26:
f0:bc:9a:a2:99:1a:b4:67:36:69:95:2f:39:fc:50:90:b1:b0:
ca:5a:4b:11:4d:98:94:bb:cc:28:c2:4d:0c:a9:54:1f:f0:20:
d6:40:3a:92:ac:f7:a2:87:d6:0e:35:ee:36:67:3b:e0:62:aa:
a5:81:34:2f:ab:71:ad:18:5b:4f:b9:5f:8b:8c:8a:d2:d1:8e:
97:5d:98:4f:4e:2e:93:23:0d:e5:93:fe:7e:10:7f:89:71:a7:
ec:6e:75:ff:93:56:73:15:e4:7f:92:fa:99:39:3b:33:a8:5c:
65:ba:a0:21:a9:b5:fe:81:37:17:f4:7b:9e:56:7b:c3:b7:e9:
c4:56:cb:95:73:45:2a:f8:94:0d:78:4a:45:84:96:89:00:e1:
ca:bc:15:35:df:8d:b9:a4:cb:90:17:bc:72:f3:21:22:7a:61:
25:bd:a8:ea:6c:2a:1e:5b:ee:a6:f4:40:c5:cb:4d:d6:fe:55:
8a:ff:33:31:ec:29:59:5b:57:46:98:97:bc:5a:67:70:80:a8:
d7:23:64:7a:ce:89:25:fe:89:d3:f2:fc:3c:73:cf:b0:9b:8c:
a7:03:e9:01:9b:df:cf:f5:7a:72:e4:1c:38:e8:aa:34:02:4a:
78:c1:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org