Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/XqfSkM_o_rpdVK7XN1g4EqsgAZY.roa
File: XqfSkM_o_rpdVK7XN1g4EqsgAZY.roa (raw, json)
Hash identifier: 4sdZHBK8k4Gki3cZvKLlk0XQt8Ju52k5c0ITJrMqGpQ=
Subject key identifier: 5E:A7:D2:90:CF:E8:FE:BA:5D:54:AE:D7:37:58:38:12:AB:20:01:96
Certificate issuer: /CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Certificate serial: 09
Authority key identifier: 02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/XqfSkM_o_rpdVK7XN1g4EqsgAZY.roa
Signing time: Thu 27 May 2021 05:05:32 +0000
ROA not before: Thu 27 May 2021 05:05:32 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 134762
IP address blocks: 43.226.49.0/24 maxlen: 24
43.226.53.0/24 maxlen: 24
43.226.54.0/24 maxlen: 24
43.227.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Validity
Not Before: May 27 05:05:32 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=5EA7D290CFE8FEBA5D54AED737583812AB200196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:c8:f9:ac:7f:da:d0:fb:01:2e:6f:7e:b2:
ca:7c:13:33:5d:04:48:17:33:a9:9f:0b:93:07:53:
70:24:8e:7f:af:a8:b2:5f:0a:f9:7b:a4:39:0e:45:
f9:d3:00:0f:8e:7c:2a:80:15:95:cf:fe:ab:e9:28:
d3:d3:91:14:c3:58:3f:30:bb:83:89:44:0a:99:76:
3e:14:6b:08:be:f1:1e:a2:d3:c1:20:18:8b:93:4c:
98:33:b2:20:94:e5:25:9b:ae:1e:90:81:32:26:70:
5e:2c:98:f6:64:c2:3e:6e:ec:06:e6:91:08:8d:74:
8f:66:62:7f:84:f5:7b:69:f2:c7:55:21:fc:f3:0d:
af:2c:d8:91:7e:6d:76:39:0f:11:28:fb:d1:36:c2:
3f:00:94:65:39:18:f7:c7:72:62:33:64:53:c6:46:
f6:1a:d2:c6:58:86:45:62:37:1b:46:3b:18:59:f1:
14:6c:03:11:fb:7f:47:c6:b5:c9:77:2e:e6:a2:73:
66:1d:6b:b1:6d:48:f2:5b:db:41:8f:b4:57:69:29:
f8:96:92:80:b6:83:16:4b:b0:ff:0b:5a:fd:1f:f8:
e9:68:73:ea:c2:f9:6f:0b:c2:e5:4a:88:3b:85:88:
c7:41:6b:d1:58:43:b1:76:0f:ee:bf:65:24:33:ad:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:D2:90:CF:E8:FE:BA:5D:54:AE:D7:37:58:38:12:AB:20:01:96
X509v3 Authority Key Identifier:
keyid:02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AmBeOP5HEmDd56zml0Pi89Ty8MY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/XqfSkM_o_rpdVK7XN1g4EqsgAZY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.49.0/24
43.226.53.0-43.226.54.255
43.227.68.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b1:30:46:a2:db:b3:25:c1:df:d1:48:1e:5d:48:b5:0e:49:
b3:a9:f9:72:36:33:d7:92:34:2d:f2:d3:bb:7b:92:bc:56:4f:
d4:82:4f:42:a6:e1:d9:85:4f:5f:1e:44:7f:9e:c6:3d:07:1c:
14:2a:76:de:23:60:79:33:bf:b8:4f:cc:94:16:60:e7:cd:a6:
6d:68:cd:0c:eb:92:ae:de:97:ca:ab:f3:74:1d:11:e3:83:90:
9c:14:4a:6d:e8:da:3c:1d:3d:34:43:fe:d8:d8:eb:df:22:6d:
13:21:c8:37:53:7e:ae:7b:e4:18:f6:bc:a3:8b:fa:72:7e:a0:
17:ad:77:16:ff:89:eb:18:c2:6c:ec:23:a9:17:e3:03:03:24:
09:7f:a3:08:89:14:f1:71:0f:7d:c3:52:34:e5:98:ea:54:04:
b1:74:1d:bc:35:a2:92:d2:7d:da:82:14:10:c0:e9:b5:17:3c:
82:28:3a:c3:44:5c:24:31:ac:b3:1c:a6:44:6b:a1:ac:56:f5:
b1:2c:ea:c6:5d:87:d1:e3:09:cc:81:5b:64:76:6a:3b:5d:99:
3a:dd:6b:46:5b:96:87:4d:34:0b:73:9b:17:14:aa:8a:97:3d:
ee:38:5a:85:69:39:42:a5:df:dd:f2:92:83:ad:14:ab:35:b1:
8e:21:0e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:08 2023 by rpki-client on console-ams.rpki-client.org