Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/mQydHZzTAO542uhQOieQQp9aZgs.roa
File: mQydHZzTAO542uhQOieQQp9aZgs.roa (raw, json)
Hash identifier: Co/GPamJpFFlX9zkpHsEO8x3D7FMNpUvW3PdjSR+1A0=
Subject key identifier: 99:0C:9D:1D:9C:D3:00:EE:78:DA:E8:50:3A:27:90:42:9F:5A:66:0B
Certificate issuer: /CN=78F1EEC94794DA5530B552AFC84232040D5A5455
Certificate serial: 0796
Authority key identifier: 78:F1:EE:C9:47:94:DA:55:30:B5:52:AF:C8:42:32:04:0D:5A:54:55
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ePHuyUeU2lUwtVKvyEIyBA1aVFU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/mQydHZzTAO542uhQOieQQp9aZgs.roa
Signing time: Mon 23 Aug 2021 09:22:27 +0000
ROA not before: Mon 23 Aug 2021 09:22:27 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 59067
IP address blocks: 202.89.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78F1EEC94794DA5530B552AFC84232040D5A5455
Validity
Not Before: Aug 23 09:22:27 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=990C9D1D9CD300EE78DAE8503A2790429F5A660B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:c5:97:83:24:4d:4b:b4:a2:9d:f0:f3:ad:
6a:12:56:07:12:24:aa:f5:8f:f2:81:49:d4:52:b3:
2f:93:50:39:c8:19:b2:23:70:0c:df:59:16:0c:e2:
ba:75:67:4b:17:2e:9b:d8:e4:3c:8f:2a:37:5a:30:
da:23:b0:0c:01:4d:90:6e:f6:7b:6d:36:0d:c5:3d:
de:99:f8:0d:1c:49:e9:05:d6:c2:a0:80:7f:32:42:
ef:97:b6:1f:6a:88:e6:08:61:9d:16:af:73:f0:53:
32:43:36:c8:5b:7c:10:ba:1d:3f:02:dc:17:f4:2e:
45:c0:50:16:44:15:34:d4:59:d2:bb:31:7d:80:76:
6f:f2:dc:63:df:a6:18:ab:da:5e:f5:93:14:b3:4d:
9b:1a:38:45:6f:d0:19:c1:91:cd:bd:c0:8b:ac:a5:
83:5b:f8:eb:8e:04:41:98:82:c4:41:5d:56:fd:6f:
76:76:40:ee:f6:72:dd:34:34:58:53:ca:64:36:66:
d1:f6:7c:3d:e9:00:ae:05:7a:a1:67:86:ee:7c:fb:
63:52:69:bc:05:c1:4d:81:48:3b:7a:11:7d:f2:fb:
22:d5:68:69:50:ea:2a:10:cb:1f:60:a0:84:85:1c:
41:05:5f:1a:d6:fe:ba:68:ce:54:bb:c0:d2:b8:41:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:9D:1D:9C:D3:00:EE:78:DA:E8:50:3A:27:90:42:9F:5A:66:0B
X509v3 Authority Key Identifier:
keyid:78:F1:EE:C9:47:94:DA:55:30:B5:52:AF:C8:42:32:04:0D:5A:54:55
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/ePHuyUeU2lUwtVKvyEIyBA1aVFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ePHuyUeU2lUwtVKvyEIyBA1aVFU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/mQydHZzTAO542uhQOieQQp9aZgs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.89.232.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:a4:ed:ad:bf:0e:5b:4a:cc:0b:05:58:73:4e:c2:09:26:47:
d9:82:2b:8e:ae:71:e0:47:d4:64:15:1d:80:05:06:ba:4c:f9:
b7:56:85:ae:b4:f7:ff:34:98:f0:39:02:ab:cd:9a:b0:10:bf:
95:1c:9c:30:56:ec:21:06:ad:1a:f1:17:3b:25:c5:95:e9:fe:
58:b3:a2:e7:2b:6b:4a:75:45:0d:15:2d:e7:ab:33:f2:de:b5:
11:02:bb:8e:1c:29:6b:0f:cd:6a:d9:72:8c:70:16:87:7e:d0:
43:72:bb:da:e5:25:71:03:e6:f6:4c:8b:7b:4b:3e:a3:5e:30:
7c:f5:72:20:79:01:37:a9:05:c5:e0:99:f3:c3:8a:46:f6:30:
52:f7:5c:52:4d:f1:36:52:5e:d6:a8:88:c2:e6:f0:7a:5e:12:
4b:e3:53:e4:ca:18:2f:ea:cc:c0:9b:43:28:da:45:b1:28:48:
7b:23:72:91:7f:e7:c3:3d:92:7f:12:64:8d:cd:89:98:8f:d0:
20:01:84:f3:f5:eb:1b:4d:3f:c4:6e:2f:ae:ba:8d:2c:dc:51:
a6:86:8d:df:fc:ec:9d:6f:50:a0:c2:1c:93:ae:6a:6a:6d:8a:
41:16:f4:b0:58:46:ce:b0:96:6c:69:c5:40:ad:08:6c:d4:56:
fd:7c:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org