Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/jUoiXNY74fS-Yr0C9L6ccViDP2k.roa
File: jUoiXNY74fS-Yr0C9L6ccViDP2k.roa (raw, json)
Hash identifier: CHatlLzUiWsiIPqgR+Nf/O+fXDqAuzSOpRP0eRaFbwc=
Subject key identifier: 8D:4A:22:5C:D6:3B:E1:F4:BE:62:BD:02:F4:BE:9C:71:58:83:3F:69
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 0D50
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/jUoiXNY74fS-Yr0C9L6ccViDP2k.roa
Signing time: Tue 07 Jun 2022 02:16:44 +0000
ROA not before: Tue 07 Jun 2022 02:16:44 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 60721
IP address blocks: 223.29.253.0/24 maxlen: 24
223.29.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3408 (0xd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jun 7 02:16:44 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=8D4A225CD63BE1F4BE62BD02F4BE9C7158833F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:80:66:12:68:9b:b3:5c:cd:6b:91:f5:b4:
e1:c3:3e:b2:7b:84:af:78:d8:c4:05:6e:b5:f3:94:
ba:d3:a9:b0:30:e4:2d:09:7e:9b:63:d3:df:7b:fd:
9f:9d:2d:83:d5:4f:89:c1:b1:32:f4:e6:e0:54:e5:
79:9d:3d:6b:5b:ce:00:24:60:78:25:6e:ed:ab:e4:
22:1e:01:89:6f:bf:59:83:a1:e6:9e:c4:8c:7d:fc:
32:41:c7:ab:69:ad:9d:88:61:09:7d:a9:c5:75:96:
47:95:f4:a0:7f:7a:8d:a2:28:5e:26:23:fc:63:16:
85:e3:e5:49:16:fd:5e:20:74:a3:67:22:ea:ea:a6:
9b:de:3d:1d:fa:81:41:65:57:c2:2d:88:7a:8f:c7:
e0:a4:d2:c6:6c:23:71:75:98:2e:45:c1:ec:f5:75:
50:5e:5e:19:68:a5:52:ba:fa:9d:01:dc:58:56:46:
6e:bc:5c:cb:1a:81:db:77:e0:c4:1b:c8:80:8e:5e:
b4:f9:f2:10:a1:e3:ae:8a:f9:af:ba:3f:38:0b:9e:
e3:c2:be:08:cf:12:24:7d:40:ef:56:ec:8c:d5:5f:
80:85:32:32:27:df:8d:84:33:15:ce:6a:c2:58:8a:
78:23:10:49:3a:03:84:8e:1c:74:c4:4f:aa:a0:3c:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4A:22:5C:D6:3B:E1:F4:BE:62:BD:02:F4:BE:9C:71:58:83:3F:69
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/jUoiXNY74fS-Yr0C9L6ccViDP2k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.29.253.0-223.29.254.255
Signature Algorithm: sha256WithRSAEncryption
09:6c:ab:66:24:63:fb:1c:fb:09:e2:3e:1f:70:6e:b9:d8:ce:
b6:f4:c0:76:18:f3:79:b5:40:3b:ba:51:fd:a6:3a:cf:ce:99:
8c:ac:e4:33:18:6b:9f:0b:30:a3:81:7d:45:ee:b6:e9:9d:32:
ec:30:ec:e6:0b:12:6f:f9:16:71:81:0d:55:ef:f9:5c:9e:f1:
56:0e:70:a2:e3:01:a8:a9:1d:bd:35:84:da:48:bc:54:b6:12:
25:17:be:65:37:bb:57:cf:bb:2b:46:8b:b9:38:d1:b5:2d:eb:
1b:80:d3:32:0d:9b:df:b2:80:ff:0d:7f:ff:c2:a1:bb:2b:10:
f3:81:02:3c:83:21:9a:8a:36:93:cd:b7:16:d5:e8:42:e1:73:
29:da:42:ee:2c:ca:a7:ed:0d:98:7c:dd:c6:2c:f0:60:3b:39:
8f:5e:6b:66:32:4e:ff:91:1a:c4:4f:e8:e9:42:5a:90:af:9d:
88:3c:d4:b9:6c:4f:ed:e1:99:40:6a:81:d0:72:22:d2:57:8e:
c0:0c:7e:7c:3b:72:90:51:6e:71:94:41:36:88:80:36:2c:95:
d5:3d:76:f1:5d:a8:b5:1a:27:26:f3:59:b1:60:4a:ee:1c:40:
95:a6:71:8d:05:a6:7a:56:04:c4:c6:60:92:2a:ea:4b:4a:e9:
e9:72:7f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:06 2023 by rpki-client on console-ams.rpki-client.org