Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/9LYHYXGIlAOYMUUo4Dqf4RgwRWk.roa
File: 9LYHYXGIlAOYMUUo4Dqf4RgwRWk.roa (raw, json)
Hash identifier: ME/ctZzg43Pm7Vi0o/J5qtkBBjPoYgxtyHIrnRwhXYQ=
Subject key identifier: F4:B6:07:61:71:88:94:03:98:31:45:28:E0:3A:9F:E1:18:30:45:69
Certificate issuer: /CN=A68DCF97A1BFF797FBA88969B7D17DD03E6A13A4
Certificate serial: 04
Authority key identifier: A6:8D:CF:97:A1:BF:F7:97:FB:A8:89:69:B7:D1:7D:D0:3E:6A:13:A4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/po3Pl6G_95f7qIlpt9F90D5qE6Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/9LYHYXGIlAOYMUUo4Dqf4RgwRWk.roa
Signing time: Thu 27 May 2021 05:05:49 +0000
ROA not before: Thu 27 May 2021 05:05:49 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 23650
IP address blocks: 27.0.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A68DCF97A1BFF797FBA88969B7D17DD03E6A13A4
Validity
Not Before: May 27 05:05:49 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=F4B607617188940398314528E03A9FE118304569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:0a:0a:2d:e9:ab:7b:dd:e4:0a:c0:14:4b:
49:47:17:7b:6d:8c:99:f5:1f:2b:61:52:18:78:ae:
f2:fe:d4:60:09:0b:18:ee:a3:0a:e8:42:eb:76:86:
7a:6c:01:0f:9c:00:d1:2b:5d:b9:c6:c0:e9:a7:87:
04:f7:cd:4e:a9:69:fb:83:41:bf:89:0f:a0:56:10:
62:c1:ba:7d:4a:b7:c8:89:7d:4b:7a:f9:3d:8a:ee:
a1:df:40:bd:b7:c1:91:ff:be:20:2f:18:f5:2b:e4:
26:40:b4:31:df:3c:e9:5c:38:4c:1f:ed:fe:7c:1b:
e0:bc:93:b0:15:04:98:fb:9e:36:40:9d:1f:73:fd:
40:93:45:1e:0f:2e:c4:ae:d9:df:62:ee:98:8d:c6:
a9:38:da:86:b4:30:90:8c:92:37:c3:e7:18:19:72:
15:6d:05:39:8c:6a:e3:7c:9c:cf:0a:de:29:a2:92:
43:b1:67:a2:46:9b:8c:3e:83:42:d6:43:8a:e8:b9:
71:9c:e0:81:c9:7d:31:ef:33:8c:a8:fd:23:ee:aa:
9d:13:3c:f0:4e:84:99:63:6e:49:77:9e:47:ba:0b:
f3:51:eb:c5:07:35:e7:fe:89:2b:ac:a4:bb:da:a2:
7b:4b:75:2f:38:48:90:25:7f:c2:97:0a:b3:8b:f6:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B6:07:61:71:88:94:03:98:31:45:28:E0:3A:9F:E1:18:30:45:69
X509v3 Authority Key Identifier:
keyid:A6:8D:CF:97:A1:BF:F7:97:FB:A8:89:69:B7:D1:7D:D0:3E:6A:13:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/po3Pl6G_95f7qIlpt9F90D5qE6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/po3Pl6G_95f7qIlpt9F90D5qE6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/9LYHYXGIlAOYMUUo4Dqf4RgwRWk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0/22
Signature Algorithm: sha256WithRSAEncryption
91:ad:ed:ac:ed:32:4c:c5:7a:79:aa:9c:52:7c:1b:49:4e:d0:
e2:ba:43:a8:5e:60:de:a1:39:93:67:91:83:f5:d0:0f:e8:33:
0d:e0:b2:05:26:e5:13:37:0a:c1:40:59:1d:e8:49:3c:7d:5a:
b9:6c:8f:3a:94:d5:12:2a:eb:4c:6b:2c:aa:82:c2:66:41:22:
85:69:1b:72:48:04:79:d1:e2:72:f3:74:c0:c0:99:30:0b:d7:
26:63:32:f2:8f:92:a2:93:0f:5a:6e:fb:b7:d4:e6:70:ad:22:
ad:79:7e:1e:a2:ac:64:2f:53:d1:48:0a:fa:b7:f1:b2:6b:20:
a1:b8:0c:4b:01:da:fc:4a:75:3b:0d:32:42:96:0c:fe:0a:24:
c3:cc:6f:ed:05:de:1a:91:2c:ad:26:c5:fe:06:e2:3e:75:22:
7f:ea:15:b0:cd:bf:05:99:62:f0:31:24:5f:d2:a5:f8:6f:ac:
27:41:65:99:10:c1:89:aa:28:97:7b:74:a5:10:f2:f0:ad:c9:
9d:ba:84:f9:25:5c:c0:4a:9b:a5:dc:5f:a8:b7:d1:0e:aa:19:
c5:15:32:2a:d8:51:32:e8:c2:f9:0b:8c:1a:91:52:fd:d4:97:
1a:52:f1:31:63:79:f1:0c:66:96:c1:f1:35:4a:43:17:ce:fc:
22:b9:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org