Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/OkNrNpFm-fjALxwSpDDMtV1yfQE.roa
File: OkNrNpFm-fjALxwSpDDMtV1yfQE.roa (raw, json)
Hash identifier: x4E5Ptv/VRcwhv/KWwx+2ablHmoscHOvFe2hzEHKJIU=
Subject key identifier: 3A:43:6B:36:91:66:F9:F8:C0:2F:1C:12:A4:30:CC:B5:5D:72:7D:01
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 094B
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/OkNrNpFm-fjALxwSpDDMtV1yfQE.roa
Signing time: Tue 07 Jun 2022 02:13:54 +0000
ROA not before: Tue 07 Jun 2022 02:13:54 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 23650
IP address blocks: 27.0.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379 (0x94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: Jun 7 02:13:54 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=3A436B369166F9F8C02F1C12A430CCB55D727D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:73:5f:44:8e:ff:8e:d8:9c:b8:f3:68:ef:
22:ea:0d:e8:ec:34:1d:eb:c2:28:35:fd:0d:16:85:
62:d1:8c:ef:b4:47:71:2f:b0:97:6d:44:f1:e2:57:
51:b9:d6:a5:2a:89:a6:3e:d9:7e:b1:a0:cd:da:6d:
30:dc:34:e9:69:b6:5d:37:07:a1:4f:d5:e6:40:c8:
22:10:cf:53:c2:f5:3a:36:08:38:c3:ed:50:b5:0e:
8a:12:e6:fb:cd:bc:e7:92:81:46:5f:5c:e9:5e:2a:
40:1c:2f:68:1c:b6:43:fd:10:08:1d:d9:e9:6a:6c:
88:31:7e:b4:73:cd:c4:37:04:e3:9d:b1:5a:d2:aa:
01:0f:16:55:7c:d7:d7:8a:98:b4:b8:27:b8:40:2a:
c0:37:4b:07:40:af:e4:03:46:0c:09:e0:2e:e0:e3:
eb:1d:bc:94:3a:e8:ee:90:71:cd:30:ec:f7:f1:08:
33:3d:73:05:5a:00:20:d0:48:eb:de:55:67:dd:84:
92:6d:52:8c:f0:7d:2d:12:9d:5c:cd:63:9c:cd:a3:
86:f1:8f:65:8c:4a:7c:fb:73:04:7e:a4:e1:09:1a:
0b:70:02:2c:e3:d0:b1:b6:e3:86:ce:c5:78:91:f6:
38:39:b7:8a:80:98:07:3c:94:9f:14:9a:99:17:3f:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:6B:36:91:66:F9:F8:C0:2F:1C:12:A4:30:CC:B5:5D:72:7D:01
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/OkNrNpFm-fjALxwSpDDMtV1yfQE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:5e:2e:3a:26:2d:af:e8:ef:d0:d2:f3:0c:a9:e0:f3:4e:1b:
cb:86:b1:84:ea:67:08:d2:4a:0a:f7:bd:ba:3f:cf:cc:8d:84:
59:c3:fb:b1:ad:bd:d4:33:de:6d:64:b4:b7:1a:bc:fa:0b:e2:
fa:cd:4c:3b:50:ab:cc:c9:4e:7f:ac:13:8b:73:5f:e3:67:cd:
41:31:e9:40:ea:64:f2:f2:5f:5d:11:6d:d7:c5:f6:5d:9e:38:
ae:ea:d7:f4:d5:12:5c:4b:65:a2:f1:48:81:b8:0c:c8:31:c4:
4e:c0:ce:10:84:f1:36:37:59:5b:49:7f:39:57:73:7d:7e:15:
fb:82:81:a4:56:55:f5:a2:34:39:56:9b:38:58:07:78:1e:80:
43:02:8d:cf:50:12:47:bc:87:85:3d:31:b9:c8:24:2e:28:2a:
ce:92:04:b7:5b:b2:f8:67:e9:ca:0e:56:33:d3:4e:bc:c5:f8:
1f:8f:93:20:e6:e6:46:70:bc:1c:f2:dd:69:81:60:f7:90:5d:
6f:37:c8:a0:0c:dd:38:9b:19:a6:75:23:c3:6f:4b:4c:1e:1c:
06:98:cd:ad:61:a0:78:8e:3d:9a:64:87:da:25:85:69:b0:fa:
1b:80:ac:e2:90:89:00:95:fd:a1:f1:65:51:ea:8f:9a:f1:33:
13:1c:57:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org