Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/XRVNIWpXYFDJcpZG4q0DS_L5ge4.roa
File: XRVNIWpXYFDJcpZG4q0DS_L5ge4.roa (raw, json)
Hash identifier: MPOAlZPdXpeMpsdMAyZRACzSiaVZUJL1+ZMRLvjmURw=
Subject key identifier: 5D:15:4D:21:6A:57:60:50:C9:72:96:46:E2:AD:03:4B:F2:F9:81:EE
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 1011
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/XRVNIWpXYFDJcpZG4q0DS_L5ge4.roa
Signing time: Fri 19 May 2023 05:53:41 +0000
ROA not before: Fri 19 May 2023 05:53:41 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 23650
IP address blocks: 27.0.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4113 (0x1011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: May 19 05:53:41 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=5D154D216A576050C9729646E2AD034BF2F981EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:0f:24:b0:48:b4:9d:2f:53:ef:bc:8d:88:
e8:f9:4b:b3:de:0b:02:f6:b9:97:b3:89:48:71:f4:
5a:5b:d5:77:43:e8:75:7d:6b:68:20:39:17:9a:7b:
15:a1:f4:e7:cb:ff:75:ba:f4:70:27:d5:3e:b1:a4:
06:d8:9a:32:62:59:57:9f:2b:e1:31:e5:a2:46:b9:
e2:e9:c4:a3:c9:43:fe:ec:3e:3d:dd:89:a2:ee:67:
40:03:18:38:c7:e6:d2:af:42:12:59:fb:74:ae:20:
1e:61:60:bc:ae:d7:b5:26:ce:94:b6:a9:83:f3:03:
39:4f:12:67:9b:be:af:6a:98:a7:e9:bf:5c:d8:ff:
f3:30:3d:91:7e:6d:97:ee:8e:bb:a5:6d:4e:d5:3d:
c0:08:50:94:83:63:9a:ac:8e:d4:9d:ed:74:60:9b:
d3:31:d9:f1:ad:0d:08:5c:9b:d6:8e:08:f2:4b:43:
38:01:69:05:54:6c:90:55:59:d5:7e:ca:4a:ee:6e:
fd:c9:6a:be:0d:74:65:bb:49:b8:2a:ac:88:08:f4:
50:62:09:05:31:73:29:3d:bb:f7:08:d7:1f:c5:e3:
97:4e:4a:0d:33:0b:55:23:56:0d:3e:50:26:db:93:
73:11:5a:34:88:2c:f9:47:0c:c7:a0:fb:a0:34:72:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:15:4D:21:6A:57:60:50:C9:72:96:46:E2:AD:03:4B:F2:F9:81:EE
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/XRVNIWpXYFDJcpZG4q0DS_L5ge4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0/22
Signature Algorithm: sha256WithRSAEncryption
95:7c:04:7b:94:e1:09:34:df:d0:9f:35:b8:22:b2:af:10:a0:
00:ec:ec:d7:59:29:ea:9b:a3:6f:ea:8c:72:1c:32:7d:fb:6a:
96:d7:cd:11:da:4e:45:69:bb:ac:b7:bf:69:39:7f:5c:04:bf:
91:d0:56:23:6c:ae:9c:8f:53:ae:09:4d:a6:a0:0e:dc:a2:74:
a6:f4:2a:95:72:18:71:59:c3:a6:fe:c2:89:e3:ab:01:c9:d0:
48:48:7c:e7:b2:93:e3:74:2a:fd:3d:ff:1e:00:4a:24:ec:02:
9f:c0:e9:35:c3:6d:4d:d0:36:2e:04:53:35:0f:b2:95:80:78:
1b:40:1f:da:3d:5d:45:ac:8b:4c:f9:d8:77:64:d7:5e:e4:d7:
e0:7d:cf:32:65:01:d0:a0:c0:3f:b6:bc:f5:73:90:67:58:92:
00:8e:6e:54:84:be:4b:32:30:a8:83:33:34:18:cc:14:38:15:
41:b2:fc:2d:ad:89:e3:d5:f4:41:00:7c:6b:27:8b:97:de:c4:
59:09:0a:e6:7f:10:c4:7c:8a:97:8a:31:b4:41:0d:fa:f1:00:
1b:4d:cd:98:38:05:81:53:30:f1:b7:e2:0d:e2:4e:09:4d:35:
44:31:46:ee:35:0f:85:d6:c3:f1:9b:9d:6a:cb:56:ca:ae:86:
04:a2:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org