Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/9Az4w1gsdx609_pFSbOiMd3kWuw.roa
File: 9Az4w1gsdx609_pFSbOiMd3kWuw.roa (raw, json)
Hash identifier: rqrJx5aptkc8+glBEnJ7BLRVz17h+NthAPK2k0036Cw=
Subject key identifier: F4:0C:F8:C3:58:2C:77:1E:B4:F7:FA:45:49:B3:A2:31:DD:E4:5A:EC
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 094C
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/9Az4w1gsdx609_pFSbOiMd3kWuw.roa
Signing time: Tue 07 Jun 2022 02:13:54 +0000
ROA not before: Tue 07 Jun 2022 02:13:54 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 63678
IP address blocks: 27.0.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: Jun 7 02:13:54 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=F40CF8C3582C771EB4F7FA4549B3A231DDE45AEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:0f:93:2b:b5:b6:c2:a5:11:4d:09:97:33:
35:95:72:48:3e:d1:bc:e5:24:c9:de:d4:25:1e:0b:
41:32:c0:db:b1:fb:32:52:14:58:07:d7:ba:6e:e3:
6a:5f:0b:af:df:8d:4d:79:79:da:58:e2:15:dd:72:
aa:a9:0c:47:b8:1b:9f:18:0f:9e:00:62:9c:98:b6:
1f:fb:9c:07:0e:d0:d6:a7:d2:41:60:0b:75:7d:a1:
43:fb:b2:0f:34:5a:fc:66:99:1e:75:23:85:c7:a4:
68:11:cb:4d:63:46:a7:c4:3a:15:bf:89:0d:23:ad:
c2:aa:67:6b:a3:db:bc:05:01:39:d2:0e:f2:c4:ca:
41:b9:80:7f:23:8d:57:b3:c5:48:f1:9d:0f:25:0a:
23:fe:cc:4c:db:22:3d:98:92:46:2d:5c:ce:70:1a:
35:4c:b7:50:90:cb:b8:cf:c2:39:62:5b:ef:09:bc:
ae:47:56:34:b7:95:23:8f:4c:71:0f:69:64:11:9b:
a8:78:46:40:f6:a5:c0:59:dc:f5:de:8a:87:a0:e3:
ef:12:1e:73:16:40:24:d7:37:47:c7:c6:88:33:9d:
20:ee:1d:eb:0e:3a:7e:c1:8b:21:d4:6d:57:a4:ec:
22:f5:76:25:44:c7:d4:08:08:87:2c:74:e7:a2:cf:
47:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0C:F8:C3:58:2C:77:1E:B4:F7:FA:45:49:B3:A2:31:DD:E4:5A:EC
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/9Az4w1gsdx609_pFSbOiMd3kWuw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e4:be:47:b2:1a:f5:48:7a:eb:ec:28:e6:9a:30:1a:c3:45:
2b:39:9b:0c:cf:4e:79:5f:a9:53:1a:b2:64:70:e7:b5:bf:69:
bc:82:be:03:0d:18:f4:c2:0d:80:43:70:dd:6c:41:73:0e:cc:
7b:1a:49:47:1d:24:e8:ff:6f:b1:7c:c2:c9:3f:d0:36:44:d0:
0a:e4:e5:fd:3e:d0:21:8e:ab:43:7c:98:56:b8:e6:a2:ce:c5:
82:a2:bc:54:7c:1c:fa:b4:2c:2e:47:85:0e:ac:6f:37:a9:26:
eb:0e:5e:3a:16:b7:b7:e6:0a:ae:f2:98:0b:4a:19:4b:91:6b:
57:70:36:77:76:32:af:26:4e:68:e6:c0:b1:1e:fc:58:a0:76:
6e:36:6c:d6:10:4c:04:b2:a6:29:30:ed:c8:1d:c7:09:55:e1:
4b:4b:51:21:4b:5c:98:d5:99:1d:49:95:8e:d2:fb:2d:8d:14:
d5:27:f6:53:5b:ea:b2:85:51:74:a4:ed:89:e2:6d:de:af:73:
34:bd:c1:5d:ca:fe:d6:05:6b:87:0a:d9:c9:e6:f2:5d:97:57:
f9:87:fe:c3:03:b1:fc:2e:df:71:3d:e7:e2:8d:98:67:f7:d2:
7e:c1:b2:03:93:14:2e:26:ca:cc:a6:42:46:dc:42:1b:97:6a:
b2:34:ff:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org