Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/7a4e4VAisEATnexR9eEIxtUOPoM.roa
File: 7a4e4VAisEATnexR9eEIxtUOPoM.roa (raw, json)
Hash identifier: UclE0vW2nY0/JJor+gHzsUwEBxYdf97uFAX08EJrGsw=
Subject key identifier: ED:AE:1E:E1:50:22:B0:40:13:9D:EC:51:F5:E1:08:C6:D5:0E:3E:83
Certificate issuer: /CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Certificate serial: 07
Authority key identifier: 02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/7a4e4VAisEATnexR9eEIxtUOPoM.roa
Signing time: Thu 27 May 2021 05:05:31 +0000
ROA not before: Thu 27 May 2021 05:05:31 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 134762
IP address blocks: 43.226.50.0/23 maxlen: 23
43.226.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Validity
Not Before: May 27 05:05:31 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=EDAE1EE15022B040139DEC51F5E108C6D50E3E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:1e:7e:94:08:25:89:94:ee:3f:d7:00:21:
77:3b:8e:24:68:fd:44:31:0d:97:17:f2:16:9e:55:
96:da:63:51:7e:b8:b9:33:ba:43:d2:93:e6:f1:a3:
58:3d:68:b0:b8:35:8c:c8:55:37:0b:f2:df:4e:e4:
58:1f:32:fb:f5:93:dc:4c:97:a0:0a:3f:d0:b0:87:
0b:fa:48:9b:5a:c5:6a:26:b6:00:59:8d:11:02:15:
3a:d6:f4:97:cb:a9:6a:9e:64:0b:66:1e:71:cd:f9:
1e:59:2b:99:4a:96:6b:c7:2a:a0:6c:df:fb:36:50:
ab:55:2d:91:9e:ae:a1:9e:eb:e5:b5:99:54:74:f2:
84:b2:be:3f:33:a6:cd:9f:de:90:64:62:4f:19:00:
16:da:e8:21:b3:a6:b4:9c:bf:19:09:b4:4f:f0:76:
85:6a:5c:07:52:2a:82:b5:46:e7:10:0d:75:f8:c5:
07:78:34:b8:1f:11:48:65:52:bb:25:2b:84:ce:6e:
84:20:68:ae:fa:e2:40:5d:54:b9:e9:89:3c:eb:b4:
3d:29:3b:1f:7d:c1:aa:2b:7a:1f:c4:e9:db:ca:df:
30:93:80:57:68:d1:55:7e:5c:e3:61:ba:95:72:3f:
4c:23:2f:56:48:05:3f:b2:b2:55:71:ab:d2:c6:49:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:1E:E1:50:22:B0:40:13:9D:EC:51:F5:E1:08:C6:D5:0E:3E:83
X509v3 Authority Key Identifier:
keyid:02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AmBeOP5HEmDd56zml0Pi89Ty8MY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/7a4e4VAisEATnexR9eEIxtUOPoM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.50.0/23
43.226.76.0/23
Signature Algorithm: sha256WithRSAEncryption
11:95:c3:17:9a:de:52:90:8c:fd:76:da:0b:2c:d2:8f:e8:62:
14:01:48:54:92:90:40:2f:3b:e4:47:cc:ca:ec:8b:b7:7e:6a:
95:6c:78:2f:49:9e:5b:e0:01:40:ed:82:9c:d4:f7:b4:f2:e7:
ca:55:2e:a5:46:97:6a:b8:ad:a5:ce:53:4d:c2:72:1f:f6:06:
e7:49:27:4d:38:e0:d8:b6:79:aa:af:36:30:3b:22:61:27:b1:
21:ef:5a:d9:fc:8d:7d:51:c4:3e:f5:f5:09:f8:95:9d:c0:47:
f3:e1:a9:40:dc:2a:23:49:95:2c:74:10:7e:f9:b5:56:bd:96:
c7:b2:a3:0f:d2:13:26:0b:ca:ca:54:a6:ae:35:3d:76:d2:13:
37:93:8a:4c:d2:eb:13:70:2c:72:26:ae:67:fd:c5:95:71:bb:
ca:74:92:b6:0e:7b:63:9f:27:b5:44:e0:4b:52:e0:d8:74:1e:
0a:14:fd:80:4b:d9:d4:e2:f3:b1:62:94:4f:ba:6b:2c:17:e4:
31:44:ce:b8:21:fe:d6:8b:fe:88:99:24:9e:fa:09:34:bf:2d:
d1:ee:6c:95:bb:78:cf:cb:98:03:6c:df:bd:e4:4c:15:d7:a4:
b4:3c:c7:7d:4f:86:bb:5f:c6:c5:c2:bb:6f:75:80:7e:37:78:
f8:b5:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org