Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/GVAhBIDYV-0nkYmpavGvjj0zLhE.roa
File: GVAhBIDYV-0nkYmpavGvjj0zLhE.roa (raw, json)
Hash identifier: uU0mCWeBfgqXvboq82+4YqZoVcmzhT7VucSqBS7ALFw=
Subject key identifier: 19:50:21:04:80:D8:57:ED:27:91:89:A9:6A:F1:AF:8E:3D:33:2E:11
Certificate issuer: /CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Certificate serial: 072B
Authority key identifier: 14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/GVAhBIDYV-0nkYmpavGvjj0zLhE.roa
Signing time: Wed 03 Nov 2021 06:43:38 +0000
ROA not before: Wed 03 Nov 2021 06:43:38 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 207461
IP address blocks: 49.128.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Validity
Not Before: Nov 3 06:43:38 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=1950210480D857ED279189A96AF1AF8E3D332E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bf:fc:b0:2f:ec:31:e8:14:40:59:88:ff:aa:
e3:71:fe:08:9b:65:d6:41:d8:1f:37:36:d6:97:6c:
7a:ca:97:6c:de:58:a6:ca:bc:52:f0:6c:c6:1b:8d:
29:05:03:a2:ae:96:a4:6a:72:8f:3e:62:59:9d:f2:
21:19:97:21:ce:e4:de:72:c9:a6:82:3d:9b:24:b9:
1c:0b:96:db:c8:0a:75:98:1c:d7:9f:b9:a3:55:2f:
43:75:98:35:65:27:9e:04:d9:12:8e:ef:06:51:fc:
e8:83:96:02:0c:e9:c3:03:14:0f:fb:e1:d3:db:f1:
48:0f:a2:64:da:97:4f:bc:34:5f:78:84:d1:48:cf:
55:de:0a:5a:db:1d:39:77:dc:68:aa:4d:65:c3:eb:
a2:05:a7:c2:8c:f6:f9:35:15:c8:22:eb:c0:65:01:
6e:9e:77:fb:ee:93:47:17:aa:eb:72:f4:9a:a7:91:
48:08:93:07:43:f5:d4:4f:56:2c:5f:49:67:04:35:
73:96:bc:d0:37:7d:b1:55:f6:66:87:d4:57:04:45:
fa:cc:4f:70:b7:fd:d2:57:49:31:46:68:42:19:cb:
7a:72:8e:b7:8a:a7:4b:e7:c2:18:6d:36:0d:db:4f:
9b:c6:27:86:f4:57:4c:2b:39:32:81:70:93:a0:e5:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:50:21:04:80:D8:57:ED:27:91:89:A9:6A:F1:AF:8E:3D:33:2E:11
X509v3 Authority Key Identifier:
keyid:14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FP89ERRuUxbiP-f4VCysMT_W9RA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/GVAhBIDYV-0nkYmpavGvjj0zLhE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:6b:b4:f3:07:36:5f:75:cd:1e:f1:3a:1f:4f:50:63:90:4f:
76:2d:86:97:aa:61:03:09:52:05:52:5d:47:b5:21:a3:69:86:
5d:ce:72:60:5f:f7:4d:4a:38:75:50:78:bf:10:09:92:e9:4a:
6b:0e:b0:44:25:79:08:13:1e:73:13:01:7e:0b:13:c6:3c:fd:
05:54:bc:40:cd:7b:2d:79:70:97:33:ce:1e:ab:7a:62:87:21:
cf:7e:79:aa:57:77:99:17:94:ad:be:8d:8c:1a:be:93:87:1d:
f4:90:e3:79:a7:3f:be:8c:38:9a:4e:7b:e9:22:bf:26:49:ed:
5b:a9:e7:46:3a:01:98:cf:5e:a9:46:7d:30:2e:3c:c9:12:0d:
35:f5:54:c7:d2:44:50:a8:83:7e:18:1f:b5:d6:b6:e5:4e:e2:
16:a2:5a:2f:bc:c5:56:0f:24:12:1c:be:bc:ce:93:78:fb:bc:
79:c5:19:da:8a:1d:f1:b9:f8:03:48:78:52:0f:53:46:88:4c:
72:00:84:c8:d0:90:1d:16:82:de:b5:ba:8f:18:9d:81:f0:33:
63:2d:7f:33:ff:d3:e6:02:00:8a:30:b6:7f:32:bb:bb:ba:c7:
cd:55:28:b7:3f:6a:34:65:b8:20:10:44:9a:21:1b:9a:82:9d:
0c:e8:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org