Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1407/uEorJ0R6nkhE89lfgowUDEf2u6U.roa
File: uEorJ0R6nkhE89lfgowUDEf2u6U.roa (raw, json)
Hash identifier: dBjWpOs8IFOJU5olNNqhmN1EOyeub7PeosyQFuigKkk=
Subject key identifier: B8:4A:2B:27:44:7A:9E:48:44:F3:D9:5F:82:8C:14:0C:47:F6:BB:A5
Certificate issuer: /CN=5DA0A5ECC2182DB00EB85C62313D57B96B7FD68E
Certificate serial: 103C
Authority key identifier: 5D:A0:A5:EC:C2:18:2D:B0:0E:B8:5C:62:31:3D:57:B9:6B:7F:D6:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XaCl7MIYLbAOuFxiMT1XuWt_1o4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/uEorJ0R6nkhE89lfgowUDEf2u6U.roa
Signing time: Wed 24 May 2023 03:53:45 +0000
ROA not before: Wed 24 May 2023 03:53:45 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 134700
IP address blocks: 182.50.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4156 (0x103c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DA0A5ECC2182DB00EB85C62313D57B96B7FD68E
Validity
Not Before: May 24 03:53:45 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=B84A2B27447A9E4844F3D95F828C140C47F6BBA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:a4:f2:b9:d6:e0:e1:a1:0b:0e:44:1f:49:
86:ad:aa:36:51:8e:c5:21:a6:46:c0:62:4f:bb:c6:
bb:d7:90:1c:9c:7b:80:ae:dc:fc:63:db:1a:47:31:
e8:c1:da:91:11:24:84:ec:b6:f4:5a:1d:ab:4f:eb:
b9:ce:47:ea:a5:20:f5:38:ea:e2:7c:b9:2e:49:a0:
7b:f1:96:e7:70:be:ab:27:dd:ba:5f:24:0a:cc:93:
50:1d:7a:0a:6d:04:1c:e0:16:61:a6:10:35:71:dc:
82:4b:b8:56:19:b3:55:76:0c:4c:35:dd:f4:99:d1:
c3:8f:b5:2b:64:6e:57:78:11:ad:27:50:42:7d:d2:
58:c1:dd:af:49:4b:50:bb:da:f9:39:7b:45:76:19:
f0:6f:bb:89:45:3d:26:1f:26:69:e2:3d:62:2a:68:
5c:bf:50:12:5f:17:30:58:4f:d8:da:bc:1a:c5:25:
e6:9b:1d:c5:07:7d:fc:81:90:c5:ef:5c:c3:91:64:
3f:07:2d:c1:e7:d0:f7:2d:ae:f6:f5:41:51:1a:e8:
d0:88:c6:52:7a:3a:ef:00:38:be:21:44:fd:76:bf:
a9:bb:a5:f5:1c:79:77:5a:ce:05:d9:b1:29:df:b6:
13:00:82:83:56:dd:b4:0f:3a:8b:ad:ea:30:51:3a:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:2B:27:44:7A:9E:48:44:F3:D9:5F:82:8C:14:0C:47:F6:BB:A5
X509v3 Authority Key Identifier:
keyid:5D:A0:A5:EC:C2:18:2D:B0:0E:B8:5C:62:31:3D:57:B9:6B:7F:D6:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/XaCl7MIYLbAOuFxiMT1XuWt_1o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XaCl7MIYLbAOuFxiMT1XuWt_1o4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/uEorJ0R6nkhE89lfgowUDEf2u6U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.50.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0b:d1:ec:df:79:f2:4c:e4:21:78:71:83:ed:8e:d7:8e:6d:
3f:86:f5:14:18:4f:3d:f1:20:ba:bb:36:61:94:a1:cb:c8:42:
a5:24:37:71:47:9b:7e:b4:53:d9:a6:b7:f0:8a:01:4b:cb:d0:
ec:e5:b8:54:05:5f:c3:ad:39:e4:10:e7:3f:18:57:be:29:e8:
6f:a3:2d:2f:69:0f:eb:4e:f8:22:c3:e6:cf:e9:1e:f8:f5:8d:
ce:5c:4a:2c:e7:0b:f4:19:2c:07:5d:8c:2e:ef:65:77:b3:eb:
f1:6b:f4:60:08:b5:23:af:ee:c8:ab:68:75:f4:dc:b6:b5:b9:
7e:a0:99:d1:45:fb:e0:8a:d7:58:be:dd:24:09:38:2a:af:22:
40:43:4e:21:21:20:8d:75:ce:4b:fb:68:9c:ee:6e:e5:24:38:
1d:01:3c:e1:ac:76:f4:b2:8a:5d:34:b0:d5:ba:e8:eb:fa:57:
7c:20:df:b4:6c:bd:85:2f:c7:aa:5d:44:94:85:2a:b8:90:ae:
73:46:4e:a5:f9:4b:2c:7b:e2:4b:d3:ad:99:34:ab:21:1e:89:
dc:65:5c:c8:1f:1e:86:5a:d8:1b:77:37:7a:b6:de:a4:22:cd:
20:14:bb:91:05:a5:a6:88:3a:72:e0:a6:90:d0:42:1d:73:d5:
4d:3a:48:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org