Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/ySo9g00OlhJtmbSpI_QF0fKlos0.roa
File: ySo9g00OlhJtmbSpI_QF0fKlos0.roa (raw, json)
Hash identifier: iWqUHzvXxAVuUYmp8mXxBNl9GpdhuNz0Ns5hpdLYCFo=
Subject key identifier: C9:2A:3D:83:4D:0E:96:12:6D:99:B4:A9:23:F4:05:D1:F2:A5:A2:CD
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 094D
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/ySo9g00OlhJtmbSpI_QF0fKlos0.roa
Signing time: Tue 07 Jun 2022 02:13:54 +0000
ROA not before: Tue 07 Jun 2022 02:13:54 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 63679
IP address blocks: 27.0.204.0/22 maxlen: 24
27.0.207.0/24 maxlen: 24
103.208.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: Jun 7 02:13:54 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=C92A3D834D0E96126D99B4A923F405D1F2A5A2CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:30:e3:89:ec:4f:0b:ea:07:04:58:dc:ff:
a3:34:08:09:79:58:c2:7d:85:4e:aa:a2:e5:c9:8b:
99:02:b6:24:c7:df:4a:7a:22:7b:97:7e:ce:84:01:
14:d0:55:d8:88:7a:37:ce:99:d4:9e:99:3c:f4:78:
50:e6:4d:e6:d4:2d:2d:bf:03:70:38:86:46:9b:e0:
c5:86:05:b1:9b:a7:1c:fc:34:1d:0d:24:e7:b7:4e:
99:85:80:33:ef:e3:59:cb:cd:55:69:43:d8:71:91:
b9:20:5f:e7:4c:0b:6c:65:86:b4:17:14:5a:45:fb:
57:be:f4:a5:29:59:8c:58:4f:a4:7f:0b:12:a2:89:
04:d2:81:d1:fb:35:76:9b:16:d2:b8:8e:73:e7:1e:
4b:63:f8:ec:ef:d7:d3:94:8d:d3:fe:e3:ca:6c:19:
af:b9:e2:0d:b9:1e:e6:19:2f:06:60:6d:05:01:37:
f6:df:82:d1:ff:29:20:6d:45:06:3a:49:56:04:6f:
ed:a5:dd:60:32:ea:4d:8f:bc:49:42:08:4a:ac:d8:
93:cc:bb:ca:06:3d:b0:29:64:61:43:35:9f:84:e2:
88:46:f2:e8:ec:c9:2f:5a:bc:3f:fe:54:30:11:00:
0b:ca:69:0c:30:ad:94:d0:d7:70:75:b1:ad:ee:bf:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:3D:83:4D:0E:96:12:6D:99:B4:A9:23:F4:05:D1:F2:A5:A2:CD
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/ySo9g00OlhJtmbSpI_QF0fKlos0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0/22
103.208.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:1f:e4:0f:46:1d:d4:32:f8:c2:d3:d2:43:02:eb:1b:f9:47:
25:ea:f7:66:c0:e7:26:02:46:66:40:0d:7a:63:33:08:bb:92:
0e:01:89:80:2c:f0:bc:ed:4d:dc:dd:77:93:bb:dc:ae:f2:31:
6d:de:48:75:bd:98:73:2b:b7:a6:2c:94:32:be:18:a3:cc:4a:
9e:83:8a:a7:b0:55:a0:d6:4b:50:99:c0:e5:75:38:29:4c:a1:
07:f2:a7:08:a2:fb:c9:a7:54:44:00:7b:57:57:20:5f:d0:a8:
fd:f2:6d:6e:8a:dd:26:3f:d3:47:f4:60:e6:56:df:7a:bd:83:
5d:88:2a:34:97:1f:f5:77:ad:b6:62:33:eb:48:4b:54:a3:9a:
29:01:54:ff:34:2b:16:81:96:60:5b:26:e4:14:a7:22:06:10:
9a:4f:44:e5:ae:5e:f6:c6:4b:c6:81:6c:87:29:ef:81:20:dd:
4c:bd:bc:c7:6e:24:67:3a:c1:b3:03:dc:e4:81:3a:65:6c:0d:
2a:b8:63:dd:5c:a7:ac:1c:89:3b:01:a1:d6:d4:d7:ca:d5:1e:
27:a0:fe:e9:78:f9:95:c9:f7:bc:3d:be:8c:4e:11:bb:bd:1b:
5d:90:0f:e5:3c:30:94:7a:22:fc:53:34:d6:af:80:01:29:8c:
e0:ba:d3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org