Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/C3QVE9bLePM3Jw25tPB7MjabYbU.roa
File: C3QVE9bLePM3Jw25tPB7MjabYbU.roa (raw, json)
Hash identifier: PD23eo4x89Kiz4F8Y5ghweewe9TpHuQS7UkRBr+cr24=
Subject key identifier: 0B:74:15:13:D6:CB:78:F3:37:27:0D:B9:B4:F0:7B:32:36:9B:61:B5
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 0D56
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/C3QVE9bLePM3Jw25tPB7MjabYbU.roa
Signing time: Tue 07 Jun 2022 02:16:47 +0000
ROA not before: Tue 07 Jun 2022 02:16:47 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 61317
IP address blocks: 49.128.4.0/22 maxlen: 24
103.244.116.0/22 maxlen: 24
223.29.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3414 (0xd56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jun 7 02:16:47 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=0B741513D6CB78F337270DB9B4F07B32369B61B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:f5:bc:6b:64:e7:b5:aa:07:c9:f6:49:df:
23:f2:94:5e:f8:8f:c0:28:5e:a2:e4:92:8b:c5:5d:
6c:0d:ea:54:d0:b9:61:b9:b9:98:10:12:2e:1f:2e:
10:7f:f2:1a:5a:f9:21:9d:aa:29:8e:ff:b2:74:1d:
d3:82:7a:24:0b:d3:77:0e:4f:4b:65:e4:fc:26:a8:
9f:16:44:83:7d:a7:ee:4f:e4:f1:e5:38:6c:94:42:
86:26:95:fa:d4:8f:b7:c5:cd:36:f4:15:10:eb:00:
ec:51:3e:bd:cd:46:50:cf:14:ba:27:e1:f6:45:f4:
25:3b:20:61:62:c1:fc:06:0a:b9:0a:75:ed:b1:95:
32:dc:65:a8:db:bc:bc:52:4f:21:c1:ba:46:59:2f:
9f:b9:f2:f3:70:40:d1:09:a6:ae:79:62:93:eb:9e:
5a:70:8d:b5:a2:f3:2f:12:63:69:e0:f5:64:23:4b:
35:c4:ae:06:9c:63:ab:a0:5e:9e:f0:a3:58:f8:b0:
e1:88:bb:a1:66:89:56:45:62:a2:ad:84:3d:67:d4:
2d:77:0d:cb:90:34:b7:14:6a:c2:25:66:19:00:07:
9e:9e:87:ae:a5:2e:38:bc:cd:8a:f3:60:c6:d2:a6:
57:90:cd:75:f2:76:8f:c1:12:a2:70:f5:e2:b8:b5:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:74:15:13:D6:CB:78:F3:37:27:0D:B9:B4:F0:7B:32:36:9B:61:B5
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/C3QVE9bLePM3Jw25tPB7MjabYbU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.4.0/22
103.244.116.0/22
223.29.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:56:17:60:37:6e:89:8e:05:ae:f3:33:7c:d8:0a:9f:4e:f3:
19:57:27:f2:42:3f:33:50:55:9c:4a:b9:7c:bc:51:e8:bc:ea:
44:80:65:73:f0:3a:69:53:77:2d:7d:23:a7:8e:0b:36:5e:4a:
7f:08:19:2e:8e:34:21:90:b0:60:9b:d4:e9:7a:11:c2:a5:3a:
b8:b6:0b:f0:26:20:2b:cb:af:8e:65:26:5b:75:32:ac:f6:a0:
69:80:a4:b0:7e:d7:f0:7c:bb:e9:38:c6:81:25:43:51:e3:e4:
99:e8:e9:c1:d0:1b:73:5e:9b:11:82:fd:23:e0:6d:6f:90:53:
e5:b2:91:0c:71:0b:ca:42:3f:73:b7:c5:2f:b8:50:d4:20:8b:
fb:3b:d1:d2:8e:64:a8:ba:f6:47:0d:f7:e5:8d:a0:c7:da:1e:
a3:27:bf:41:6a:ba:ae:92:9b:29:29:f3:87:d0:d5:d8:35:e5:
0b:d4:66:45:d2:a6:c8:ba:74:b2:08:53:a2:46:e1:ef:60:6e:
49:9a:3c:2f:d2:e9:09:b9:04:cf:50:0e:d3:33:64:ce:ab:fc:
f4:10:79:d0:1a:18:49:09:9b:fb:ab:62:33:53:8b:a4:0d:72:
6c:0a:6e:c8:20:91:26:63:b6:9f:7b:f8:d1:8a:59:f7:82:06:
de:f0:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org