Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/Bdg5HMeFMjrhMulnBSRMfMYwmFQ.roa
File: Bdg5HMeFMjrhMulnBSRMfMYwmFQ.roa (raw, json)
Hash identifier: 6cE49OngaxNq11mgpmvON21l5NMzlqfcl2To86MnX9U=
Subject key identifier: 05:D8:39:1C:C7:85:32:3A:E1:32:E9:67:05:24:4C:7C:C6:30:98:54
Certificate issuer: /CN=A68DCF97A1BFF797FBA88969B7D17DD03E6A13A4
Certificate serial: 05
Authority key identifier: A6:8D:CF:97:A1:BF:F7:97:FB:A8:89:69:B7:D1:7D:D0:3E:6A:13:A4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/po3Pl6G_95f7qIlpt9F90D5qE6Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/Bdg5HMeFMjrhMulnBSRMfMYwmFQ.roa
Signing time: Thu 27 May 2021 05:05:50 +0000
ROA not before: Thu 27 May 2021 05:05:49 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63678
IP address blocks: 27.0.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A68DCF97A1BFF797FBA88969B7D17DD03E6A13A4
Validity
Not Before: May 27 05:05:49 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=05D8391CC785323AE132E96705244C7CC6309854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:47:21:51:72:d7:e1:42:11:24:e5:73:3f:
0c:64:2c:62:e6:a8:a8:74:99:49:2b:a2:c8:a7:ff:
b2:41:02:3a:dd:e2:c9:f0:40:a8:f5:eb:4d:44:15:
48:01:e9:e7:c8:84:87:b8:b1:9f:1b:06:c1:a7:9c:
fa:50:66:bd:55:f4:ad:dd:a2:0d:b8:fb:71:8b:ce:
f2:d3:e0:9c:3f:f0:f7:71:94:00:60:6b:de:bc:59:
6d:35:1c:c8:5e:12:a9:f4:81:15:d2:10:ad:d4:18:
63:47:51:93:59:9c:3e:72:63:a2:19:83:75:cc:c8:
91:c9:bb:b2:fb:82:25:3a:f8:c2:1a:07:9e:4f:ff:
fa:4b:f9:dc:ff:e9:bb:1b:de:79:f6:6f:22:cd:51:
a6:49:71:ee:07:62:8f:f6:95:46:77:10:0b:a5:c2:
d1:57:ee:09:6c:25:74:bd:aa:b0:4b:c1:e2:fd:12:
00:ee:8c:60:d5:4f:65:8d:c8:ae:28:b8:fe:79:bf:
4b:f1:ba:4a:5b:cf:2f:40:fc:16:34:8d:7d:dc:ea:
04:b1:5d:66:19:98:ca:23:bb:62:ba:06:47:72:00:
2b:e4:e3:fa:80:6f:81:45:7c:0a:3b:66:a7:e1:78:
86:70:c9:ee:23:7c:4d:c2:54:bd:b0:38:73:85:19:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D8:39:1C:C7:85:32:3A:E1:32:E9:67:05:24:4C:7C:C6:30:98:54
X509v3 Authority Key Identifier:
keyid:A6:8D:CF:97:A1:BF:F7:97:FB:A8:89:69:B7:D1:7D:D0:3E:6A:13:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/po3Pl6G_95f7qIlpt9F90D5qE6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/po3Pl6G_95f7qIlpt9F90D5qE6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/Bdg5HMeFMjrhMulnBSRMfMYwmFQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1c:f6:9c:8b:45:fb:85:e3:41:fc:a7:4a:ac:49:2c:63:48:
67:09:6e:0d:19:c1:ff:4a:4b:c6:c9:45:54:13:31:83:c0:e5:
64:cf:d6:0e:b1:7b:5f:0b:44:7a:0e:c2:d8:93:0a:d3:17:46:
a4:cf:8d:70:e5:76:f9:b3:af:16:62:62:d1:8e:13:b7:fb:fc:
26:35:68:1f:e5:25:9f:23:10:95:be:3c:47:ff:f6:1e:9c:b9:
38:10:76:5b:48:08:8c:6e:5e:80:21:a5:0e:b6:ba:a2:0a:22:
e0:0d:57:39:6c:29:63:73:80:88:31:84:ce:1c:91:19:cb:4b:
c8:21:d1:69:e5:2e:dc:75:2d:e8:4a:79:20:d2:74:51:29:52:
5b:92:4f:3c:f9:dd:0b:17:4b:fe:4d:00:40:e0:ca:5f:ff:1c:
0c:d3:fa:d7:4c:e1:cd:69:37:51:87:84:9c:de:30:55:b8:88:
55:2b:c8:9d:a1:f0:33:1f:20:1b:43:45:95:58:2a:0f:ad:4b:
c5:af:18:4a:13:06:57:04:b1:33:1d:73:6f:47:4a:20:58:18:
7e:0b:60:88:0c:5e:fc:68:aa:fa:84:fb:e7:1b:6e:e3:74:7f:
ef:c8:12:ae:ae:ef:dc:6b:a3:b0:60:5a:27:c2:d4:a8:95:77:
5a:e7:83:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org