Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/EhAYowsYuqum9BmXIvsm4FhCbWA.roa
File: EhAYowsYuqum9BmXIvsm4FhCbWA.roa (raw, json)
Hash identifier: o3/lQ/p8As0SHCjhsn6QJ9ocl2VWUfc2xrAjwfIzDVQ=
Subject key identifier: 12:10:18:A3:0B:18:BA:AB:A6:F4:19:97:22:FB:26:E0:58:42:6D:60
Certificate issuer: /CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Certificate serial: 072B
Authority key identifier: 14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/EhAYowsYuqum9BmXIvsm4FhCbWA.roa
Signing time: Wed 03 Nov 2021 06:43:37 +0000
ROA not before: Wed 03 Nov 2021 06:43:37 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 60721
IP address blocks: 223.29.253.0/24 maxlen: 24
223.29.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Validity
Not Before: Nov 3 06:43:37 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=121018A30B18BAABA6F4199722FB26E058426D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:73:96:68:2c:e4:2d:44:b9:95:dc:02:cb:
b2:e3:23:5f:a4:33:2b:ec:39:30:10:18:e1:56:2d:
00:4c:af:49:f3:a4:ec:c6:02:3b:ba:bb:02:ee:6f:
fc:e8:eb:95:02:2f:3f:80:47:92:f2:d8:1f:e5:07:
96:a5:b2:17:78:64:73:1e:46:78:b8:ef:ee:00:42:
28:d5:15:66:e2:16:77:e1:ba:eb:42:d4:0d:06:fb:
29:e3:91:6b:b2:62:f4:6a:5f:32:89:7b:35:34:01:
48:69:cd:a6:f7:0c:d8:b1:88:69:ab:f4:e4:67:a8:
b2:9c:81:31:ed:cd:45:0d:d6:b2:5a:6b:1b:b6:c0:
c8:e6:5a:06:f8:a1:8a:c9:4e:d5:a1:1a:e9:e4:6a:
0c:4d:8d:b7:f4:a9:37:38:7e:7f:b1:ee:d8:e3:d9:
ae:9d:a8:38:20:37:57:dd:f4:a2:30:33:fb:f9:02:
19:a4:cf:23:88:0e:7d:0d:34:81:4a:fa:fb:1a:a4:
ff:56:e4:82:87:30:8f:8d:71:b7:e2:e9:98:b9:51:
43:5b:1d:cb:8c:6d:72:80:ed:21:25:b6:6e:ee:d7:
36:f6:90:ac:fe:09:fd:5f:4a:10:5b:f9:bd:bb:34:
83:eb:88:ff:fd:03:43:cf:84:31:8d:31:cf:7e:2d:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:10:18:A3:0B:18:BA:AB:A6:F4:19:97:22:FB:26:E0:58:42:6D:60
X509v3 Authority Key Identifier:
keyid:14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FP89ERRuUxbiP-f4VCysMT_W9RA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/EhAYowsYuqum9BmXIvsm4FhCbWA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.253.0-223.29.254.255
Signature Algorithm: sha256WithRSAEncryption
10:93:c8:cc:0d:80:8d:a8:5b:32:98:93:d7:9f:66:3d:a7:e1:
f6:5c:4f:ae:43:0c:7d:cc:d3:d5:dd:c3:02:66:24:47:fd:b9:
16:58:65:19:b0:93:27:4e:a4:4a:e9:98:7d:40:e5:81:be:40:
83:c7:b3:eb:b4:61:eb:e9:9a:1c:5b:38:6a:4c:d5:e5:1b:65:
d3:52:9e:af:d5:03:3d:52:33:2b:bc:1e:7f:dc:2a:02:ab:e2:
3f:40:cc:09:49:d0:e6:7d:e8:8c:12:9f:02:c5:f8:bb:fe:58:
05:3d:32:3d:75:54:d3:ce:ad:9c:9f:ff:4a:93:49:ab:74:2b:
f0:64:49:ce:63:23:93:ec:63:4c:de:f6:8e:8f:cb:e7:3e:52:
76:d1:81:01:a4:b5:6b:be:a9:4f:00:34:ee:6a:cd:56:aa:c3:
49:7d:7b:27:c0:2a:50:83:94:b5:61:ad:26:c4:38:7f:57:e5:
0a:26:75:da:63:fe:7b:a6:7e:80:73:b3:af:51:de:9d:27:19:
b8:df:58:56:c8:b3:10:be:2c:c4:47:14:24:9a:fb:9b:a6:81:
bb:a2:a8:ef:9a:93:a6:69:73:63:ca:d7:9d:d4:8b:09:af:35:
0e:0b:ea:ab:22:c2:1a:1c:3d:be:c9:5f:53:f6:7e:02:8b:c3:
8b:28:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org