Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/S8hAJzSPE5YKO6GXrOyAfdt6yUI.roa
File: S8hAJzSPE5YKO6GXrOyAfdt6yUI.roa (raw, json)
Hash identifier: gKVyhConnQujJjmmnoxtsm9pa3VGKh0u3BWH0yDPSMg=
Subject key identifier: 4B:C8:40:27:34:8F:13:96:0A:3B:A1:97:AC:EC:80:7D:DB:7A:C9:42
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 1010
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/S8hAJzSPE5YKO6GXrOyAfdt6yUI.roa
Signing time: Fri 19 May 2023 05:53:41 +0000
ROA not before: Fri 19 May 2023 05:53:41 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 63677
IP address blocks: 27.0.204.0/22 maxlen: 24
27.0.208.0/22 maxlen: 24
27.0.212.0/22 maxlen: 24
103.208.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4112 (0x1010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: May 19 05:53:41 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=4BC84027348F13960A3BA197ACEC807DDB7AC942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:db:17:c7:06:76:bb:bb:35:dc:32:0c:a5:
6a:62:d3:ae:02:d6:ff:a0:30:40:cf:a2:44:37:fa:
bd:7e:4b:7f:bb:30:56:c9:30:6a:76:80:3d:41:73:
fc:96:60:1b:48:97:d9:8a:06:e6:c0:15:1e:6a:95:
d9:3a:0c:f4:89:bf:0c:4e:65:97:30:f2:ec:c6:c4:
67:15:c0:54:9c:c6:79:f6:e1:e3:57:7d:87:98:c2:
a3:28:ee:de:2c:28:4e:ea:a8:b9:be:83:6a:57:8f:
dd:47:6a:2d:d8:e0:14:bd:c0:fb:3e:26:bd:05:13:
6f:35:8c:c2:77:d9:67:77:ac:a6:6f:e6:c5:f0:f1:
33:46:ba:fc:41:b0:98:84:b1:be:88:20:46:a4:47:
99:ed:af:2b:20:45:bb:67:b2:72:be:33:e5:16:b1:
5a:0e:a9:ed:f5:fe:80:29:2b:b1:5b:81:6f:03:2e:
c2:0f:3f:e0:89:40:dc:52:d4:cc:21:73:fd:ab:00:
51:ac:19:fb:96:bf:1f:7b:43:2e:2c:2f:f1:e6:b1:
56:23:74:d6:4f:95:0b:31:df:85:d5:9f:5c:d8:16:
63:86:e0:26:4d:e2:63:54:38:6c:ad:76:e8:be:6e:
28:b0:c4:bc:8c:f3:50:99:eb:20:f3:a9:50:1d:6a:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:40:27:34:8F:13:96:0A:3B:A1:97:AC:EC:80:7D:DB:7A:C9:42
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/S8hAJzSPE5YKO6GXrOyAfdt6yUI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0-27.0.215.255
103.208.48.0/22
Signature Algorithm: sha256WithRSAEncryption
93:85:c9:0b:33:0a:44:e5:1d:e0:00:0b:e4:5f:5b:19:42:57:
5e:79:8c:84:30:1f:79:0b:24:f2:af:ed:55:58:3a:ef:1f:5f:
06:f1:de:93:54:40:cc:df:08:78:56:12:a8:06:22:36:6d:db:
e7:32:e5:b2:1b:b6:4b:84:a6:90:d1:ac:33:38:64:3a:e3:f9:
fe:2d:23:bf:38:6f:7e:30:63:37:00:6d:67:79:f9:a6:14:3c:
6e:cd:0c:f7:3b:cd:5f:15:95:fd:d1:08:72:1e:41:1b:0a:aa:
67:b9:8c:aa:b2:94:00:d0:4e:42:e7:05:13:71:8c:1c:59:71:
e5:f7:a5:2a:11:0e:40:29:85:cc:7e:ef:33:d6:05:12:32:7b:
a2:05:e6:ca:79:1b:0d:a4:1a:0b:13:af:a5:89:e4:c1:f1:32:
9e:b7:0d:e3:67:bd:8b:5b:93:42:78:32:13:68:e9:14:eb:4c:
5b:12:60:51:db:a4:6a:c6:32:31:01:61:13:be:7c:3b:4c:3f:
b3:aa:ea:7e:26:7b:bf:96:98:1a:b3:91:a0:c5:49:27:39:fb:
13:9f:c2:aa:9a:85:0b:98:79:92:98:f9:c5:aa:c5:20:11:c3:
a0:18:ee:0a:03:dc:4d:c5:7d:33:e4:73:c5:f4:b7:46:95:22:
9d:ed:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org