Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/mfDMQ4ZKqudltCM6sqbQeMBgw3w.roa
File: mfDMQ4ZKqudltCM6sqbQeMBgw3w.roa (raw, json)
Hash identifier: VRrAJdh1uBrlrdhK7LcZZjjZhy6UGWxqgaXT5U8/S10=
Subject key identifier: 99:F0:CC:43:86:4A:AA:E7:65:B4:23:3A:B2:A6:D0:78:C0:60:C3:7C
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 1012
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/mfDMQ4ZKqudltCM6sqbQeMBgw3w.roa
Signing time: Fri 19 May 2023 05:53:41 +0000
ROA not before: Fri 19 May 2023 05:53:41 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 63678
IP address blocks: 27.0.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4114 (0x1012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: May 19 05:53:41 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=99F0CC43864AAAE765B4233AB2A6D078C060C37C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:ae:60:be:2d:80:dd:65:56:54:56:42:39:
13:b2:68:eb:2d:78:d9:b9:4a:75:2f:6c:cd:c9:4a:
25:53:52:c6:6c:82:10:cd:19:16:22:13:60:fb:8a:
88:2b:49:85:0b:ca:46:1b:94:31:0e:a3:79:93:d4:
e2:74:82:90:f9:30:1b:0e:b8:32:66:ef:a5:39:57:
f3:8c:55:2c:f4:ed:98:da:fa:fe:4c:7e:8e:4e:e2:
ae:a4:3b:aa:ec:bd:09:16:aa:fb:e6:28:b4:17:b9:
da:db:3b:6b:b0:55:6f:c2:2c:ec:4b:1b:5e:fb:06:
f9:74:d8:ac:b7:bc:12:b9:a3:cc:f6:46:0c:b7:f1:
88:3d:92:e9:d3:43:32:50:64:91:f7:47:28:6f:37:
be:61:e2:aa:98:5e:12:ec:1f:20:f5:e5:1c:28:09:
18:b1:fe:18:5f:09:f8:c1:5b:bc:cc:8a:14:c3:6a:
11:b3:3f:04:30:c5:3f:c0:4a:22:d1:c8:84:ca:a2:
f3:f0:86:b3:85:e0:93:09:b6:a4:90:45:33:94:8b:
4c:f1:a0:f3:c7:dc:3b:ec:f0:9c:e9:cc:ee:69:44:
28:06:8a:86:0c:65:34:18:6f:08:45:a2:63:71:86:
f2:27:57:61:16:84:e7:d6:b0:e6:85:bd:94:84:f4:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:CC:43:86:4A:AA:E7:65:B4:23:3A:B2:A6:D0:78:C0:60:C3:7C
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/mfDMQ4ZKqudltCM6sqbQeMBgw3w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a6:12:12:3b:c8:62:83:4b:d0:84:03:e1:88:b0:23:57:f5:
d3:55:04:14:d0:c2:e4:01:23:9c:9b:11:f9:1a:0d:57:61:77:
27:76:b3:a7:d1:3d:89:46:59:9f:37:da:a6:74:ad:fd:42:d4:
8f:00:c6:da:62:a3:77:d9:f5:2f:d9:a3:3b:8b:4e:c5:08:69:
d0:01:4f:58:69:8e:da:af:97:f7:0b:8a:4b:f7:a9:b9:10:3e:
ac:b7:14:34:44:b3:69:82:3d:c0:ff:06:90:84:73:12:67:02:
65:ce:4e:90:dc:91:d7:f9:fb:94:7f:80:8f:9c:b1:e7:72:36:
ae:bb:3f:de:b1:22:c3:2e:14:6b:19:c3:84:e8:28:8d:dd:89:
6f:d7:a9:69:4c:a6:59:7d:25:20:d4:a5:ca:ec:fe:26:34:27:
d0:10:0e:5d:f0:a3:9f:b8:cc:71:9a:7a:77:73:49:d2:77:13:
4f:e7:3c:c1:e2:d5:67:49:26:23:23:2a:6f:45:12:f7:a7:47:
ba:c8:3c:d3:85:e2:df:02:b0:3a:26:cb:c2:c0:34:c9:ca:95:
de:2f:34:87:f4:c1:3d:ef:54:59:2e:35:20:95:08:c7:a0:47:
e2:8a:06:e6:53:eb:73:5a:a2:9b:ff:ba:07:4d:19:d1:00:da:
04:11:5c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org