Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/xaRR7-kWoYOkDJ-tjcMc4mTiHO8.roa
File: xaRR7-kWoYOkDJ-tjcMc4mTiHO8.roa (raw, json)
Hash identifier: 3PCSdPg9ekRloytgAe8IvSimWeid43gKT9xaS9P8KbE=
Subject key identifier: C5:A4:51:EF:E9:16:A1:83:A4:0C:9F:AD:8D:C3:1C:E2:64:E2:1C:EF
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 0D52
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/xaRR7-kWoYOkDJ-tjcMc4mTiHO8.roa
Signing time: Tue 07 Jun 2022 02:16:45 +0000
ROA not before: Tue 07 Jun 2022 02:16:45 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 207461
IP address blocks: 49.128.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3410 (0xd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jun 7 02:16:45 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=C5A451EFE916A183A40C9FAD8DC31CE264E21CEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:0b:f4:30:ad:a7:88:68:01:d0:78:15:ab:
b3:51:eb:b3:c6:a5:a3:64:3b:47:b5:f4:b0:b4:6f:
d5:65:83:c2:e9:04:8c:be:63:73:fd:13:99:19:d2:
1b:de:68:e6:3c:4b:04:22:c0:95:93:79:1f:8e:86:
fc:9c:13:25:d0:ea:09:d0:56:15:05:6b:8e:2b:d9:
62:1c:d3:e3:02:97:99:f2:39:25:e1:af:70:f8:49:
35:5d:da:af:b8:86:3a:9d:02:d4:89:ee:14:9c:d4:
e6:3f:9a:26:a3:56:74:0a:29:f0:16:16:de:28:03:
e2:8c:c0:40:b2:59:c3:51:3b:f5:01:0a:ca:e2:9f:
3f:b9:23:f1:3c:ec:79:02:2e:68:16:2d:af:12:c2:
8c:4f:d5:d1:57:30:cc:32:99:92:05:08:0b:5c:b5:
85:c1:ff:de:2c:04:5f:9e:bb:dd:0d:16:2a:0a:bf:
7b:56:36:e7:18:4f:8a:98:a2:00:f0:b3:77:dc:80:
a4:ac:a7:43:21:b5:41:67:c2:20:30:a4:e9:e9:16:
06:ae:26:08:63:46:f3:e0:21:2e:66:b7:7b:bc:c0:
d4:75:bc:bb:b0:1a:21:ac:20:2f:f2:7b:ed:52:27:
10:a7:f3:12:25:82:58:a9:7b:8c:50:c3:de:88:89:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A4:51:EF:E9:16:A1:83:A4:0C:9F:AD:8D:C3:1C:E2:64:E2:1C:EF
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/xaRR7-kWoYOkDJ-tjcMc4mTiHO8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.4.0/22
Signature Algorithm: sha256WithRSAEncryption
94:97:2b:72:10:60:91:9c:54:d8:0f:a7:28:77:ba:a0:f7:b4:
89:b1:f6:11:c9:18:9e:b8:af:c7:65:52:42:eb:87:80:36:0e:
32:54:64:7f:31:10:54:61:7d:88:64:f3:cc:60:2b:83:52:18:
1c:ea:61:cf:0c:b4:36:b8:dd:75:0c:1d:ec:69:d7:fb:11:d7:
7f:92:59:23:1a:ca:e8:d3:55:ed:b1:52:82:c1:b9:e2:9e:0d:
c6:23:10:e1:4a:10:a1:e0:5c:42:e7:28:b5:58:bb:d0:44:c6:
9d:25:c7:b5:f1:87:74:45:de:5f:42:19:7a:b3:bf:93:ad:7c:
0b:a4:c4:42:29:67:9c:af:2c:14:6e:2b:2a:ff:37:31:55:c4:
79:78:41:54:38:2b:09:82:7f:23:24:ad:35:4d:e8:d4:fd:c7:
21:c8:fc:00:77:e1:26:c3:12:02:94:a1:58:bc:64:75:64:5a:
a5:d7:d4:32:f9:e6:dc:6b:78:43:cb:fc:23:3c:3c:51:56:cd:
1c:24:f9:40:d5:cb:73:04:51:14:64:d1:24:e0:31:53:88:c3:
9a:55:47:3d:d0:cc:7c:df:62:b3:2c:69:13:43:58:5f:49:2f:
a2:0a:71:88:c2:2e:76:46:17:d2:b2:ef:37:c6:69:4a:6a:55:
2f:8b:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org