Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/h_mPYuBzqK5Wb2cQhs-MQbuEzU4.roa
File: h_mPYuBzqK5Wb2cQhs-MQbuEzU4.roa (raw, json)
Hash identifier: +yWQiMTJ0bbRKD7PrpqaGLSRo0FGgzQVcKtCR5LKLeA=
Subject key identifier: 87:F9:8F:62:E0:73:A8:AE:56:6F:67:10:86:CF:8C:41:BB:84:CD:4E
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 0F2A
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/h_mPYuBzqK5Wb2cQhs-MQbuEzU4.roa
Signing time: Tue 07 Jun 2022 02:16:14 +0000
ROA not before: Tue 07 Jun 2022 02:16:14 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 59067
IP address blocks: 202.89.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3882 (0xf2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Jun 7 02:16:14 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=87F98F62E073A8AE566F671086CF8C41BB84CD4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:85:a3:e7:11:cc:74:5a:fd:e6:32:ea:c8:
28:3f:40:b8:d9:1a:c8:0a:1e:00:01:1a:35:65:49:
80:7b:f2:c2:10:61:08:19:8c:48:63:5d:95:5a:9d:
d6:11:db:b5:13:49:9e:f6:76:be:ac:df:ce:95:1a:
be:b8:1e:f6:53:de:50:15:c3:9a:f2:93:d7:e6:87:
7f:03:40:67:75:68:9e:63:01:73:4b:8a:d3:54:fa:
32:07:3f:80:0f:e6:0f:81:ce:51:6c:7d:71:ba:00:
3d:c5:ac:df:f1:28:b8:db:66:61:44:f0:ad:d2:66:
a2:67:e8:68:fd:59:6f:ed:e3:df:27:55:1d:a3:07:
08:52:2e:4d:f7:e1:5e:45:1c:f4:d9:19:e6:74:8e:
8c:d7:be:02:88:ef:41:2e:a8:45:fa:51:b5:ed:96:
83:e6:bb:ef:31:0c:19:cf:df:a2:bf:3e:6d:31:4e:
18:1e:c2:a2:3c:a4:bf:c4:6b:32:d0:36:6f:ad:3d:
96:12:e0:3f:fa:8e:f1:5f:3f:ea:c9:f8:c2:4d:7f:
96:2f:04:1c:5c:5a:bc:50:b1:7f:6f:86:61:bd:92:
63:5d:bf:02:8b:f0:93:45:1b:61:44:b8:92:a3:48:
4b:3f:e6:08:e3:d5:dc:e9:71:66:3f:90:4e:86:8d:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F9:8F:62:E0:73:A8:AE:56:6F:67:10:86:CF:8C:41:BB:84:CD:4E
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/h_mPYuBzqK5Wb2cQhs-MQbuEzU4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.89.232.0/21
Signature Algorithm: sha256WithRSAEncryption
09:d6:d3:4e:63:f3:d8:f4:17:98:a6:31:a4:a8:97:66:9b:cf:
25:25:7d:36:df:a8:b4:54:d3:e9:9c:e6:3f:73:fc:e6:3c:c8:
d9:8e:e2:4c:12:20:e7:fb:6b:4d:23:0e:f1:ff:8e:d9:02:83:
db:8a:a6:bf:87:46:d7:00:31:bd:e2:1a:45:38:0c:a0:04:5e:
4f:0c:af:bb:f0:98:cc:04:90:e9:21:db:ff:10:94:40:9e:59:
3c:a3:b3:13:8e:3d:9a:7d:f3:38:2e:91:37:25:bd:19:71:59:
ea:18:ff:25:98:46:71:1d:ac:15:57:b6:d9:06:16:5b:5d:e1:
4f:06:f1:b7:10:a9:36:21:01:70:32:17:f4:7e:36:9b:ae:66:
31:4a:8f:6c:66:1c:fa:ce:ec:24:da:bb:66:c5:5d:5b:80:61:
08:8a:87:6c:92:63:2d:45:3b:ed:e2:20:49:98:81:de:c8:3c:
9c:3c:24:f6:77:3d:c6:f0:02:95:fa:9e:27:a4:cd:89:3a:a4:
1c:58:9b:b9:84:ec:7a:22:6d:e9:5d:26:00:ec:e2:c7:89:1c:
4e:03:87:e8:cd:e8:f9:87:97:7d:19:6e:14:af:3e:74:12:ed:
d9:6f:a3:a0:a9:30:45:c2:54:8b:e5:58:8b:2a:0e:a5:45:c6:
2e:1a:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org