Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1407/9v9k3-R4zv3bdgo9PpbLCu7vlFQ.roa
File: 9v9k3-R4zv3bdgo9PpbLCu7vlFQ.roa (raw, json)
Hash identifier: B9Mk2FjQV0xKDvQ2GI/c8KYiMj6nq7rsbHL1ueIFeGw=
Subject key identifier: F6:FF:64:DF:E4:78:CE:FD:DB:76:0A:3D:3E:96:CB:0A:EE:EF:94:54
Certificate issuer: /CN=391146A4B4B07D231183202CF701601D7B5ED705
Certificate serial: 03
Authority key identifier: 39:11:46:A4:B4:B0:7D:23:11:83:20:2C:F7:01:60:1D:7B:5E:D7:05
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORFGpLSwfSMRgyAs9wFgHXte1wU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/9v9k3-R4zv3bdgo9PpbLCu7vlFQ.roa
Signing time: Thu 27 May 2021 05:02:51 +0000
ROA not before: Thu 27 May 2021 05:02:51 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 134700
IP address blocks: 182.50.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391146A4B4B07D231183202CF701601D7B5ED705
Validity
Not Before: May 27 05:02:51 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=F6FF64DFE478CEFDDB760A3D3E96CB0AEEEF9454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:7a:ca:e8:e8:52:b5:8c:cf:87:6b:ab:a5:
e5:fb:13:06:c3:cb:5c:d5:2a:ea:ba:8a:1a:c3:9a:
7a:90:e5:cc:26:96:aa:1a:3d:3a:d8:6f:98:1c:f4:
6c:d7:52:94:a4:34:84:7a:4e:02:08:76:9a:e2:dc:
09:c6:b3:13:e5:3e:9c:ee:1d:15:15:de:53:a8:5a:
25:f9:af:3a:a0:e0:52:f8:e8:84:f8:c7:6b:ed:41:
59:f8:c5:cb:ae:20:be:b3:55:91:0e:63:b9:23:71:
a4:d9:1d:7d:5a:2b:a0:a0:b5:71:43:1d:ec:8f:f6:
e1:0a:ba:31:2d:18:cb:f7:75:8c:67:07:98:84:2a:
3e:70:6a:f1:c1:e6:f4:2e:f5:df:cb:d1:75:d1:9c:
de:41:11:25:5a:90:f3:8a:48:e8:2d:c3:5f:86:9f:
45:4b:9d:07:a9:0e:40:f0:bb:b9:bc:51:d6:66:ab:
a4:15:63:ce:8a:9f:fe:1c:16:03:0c:4a:17:92:6d:
6d:8e:21:65:d9:5f:f8:b6:5d:30:8f:0d:0c:ef:88:
d1:2c:83:69:39:61:47:63:71:4d:35:1f:99:91:9d:
84:a3:0a:26:d1:25:41:ee:aa:97:08:10:e3:d0:f2:
de:38:8d:fb:57:20:80:cb:66:a5:c3:e3:4a:37:7d:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:64:DF:E4:78:CE:FD:DB:76:0A:3D:3E:96:CB:0A:EE:EF:94:54
X509v3 Authority Key Identifier:
keyid:39:11:46:A4:B4:B0:7D:23:11:83:20:2C:F7:01:60:1D:7B:5E:D7:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/ORFGpLSwfSMRgyAs9wFgHXte1wU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORFGpLSwfSMRgyAs9wFgHXte1wU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/9v9k3-R4zv3bdgo9PpbLCu7vlFQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.50.7.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b5:27:30:10:82:c4:3f:99:67:9d:bb:b8:eb:31:4b:59:d2:
3e:c6:ac:da:c6:b5:f7:14:69:1a:4e:0c:30:71:96:00:40:94:
b0:92:7e:6b:e0:7a:9b:78:41:bd:f3:1e:94:cd:c2:05:26:ae:
7e:74:3c:94:2c:d6:7e:fc:10:51:46:55:b1:d8:02:8d:65:be:
64:89:41:91:cf:88:b9:f7:74:39:8b:a8:2b:c8:3e:f2:77:8d:
51:12:00:8e:4b:23:0f:e6:9a:77:81:2b:03:4e:8b:27:06:97:
0e:10:36:e1:3f:27:8e:be:57:a4:0b:8a:60:ed:90:ca:5b:50:
c3:9a:21:af:4d:21:54:22:2b:b0:2d:86:b8:05:ab:78:32:26:
71:ae:ec:63:77:08:99:c5:45:bf:d2:71:ef:5b:a1:7d:30:52:
03:c5:0b:35:68:2d:ac:48:a3:64:e9:b2:9b:76:a7:b5:d2:d5:
ec:e2:73:e2:50:c0:73:7f:cc:5f:b2:75:69:4a:df:fc:96:63:
b7:dc:1c:4d:21:39:15:43:09:88:a3:28:80:88:67:9f:85:c4:
2d:47:5b:2a:39:a3:c6:bc:95:7a:3a:74:d8:bc:13:b0:49:92:
53:36:37:4c:ab:af:07:6b:6c:31:d0:47:15:69:26:d0:36:fc:
a5:65:5a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org