Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/kLHN4_kJin9adFefKk6fq0gg3FQ.roa
File: kLHN4_kJin9adFefKk6fq0gg3FQ.roa (raw, json)
Hash identifier: B8ItezTZ0JpgOA328ddLVe2YgVj0DOqpokrpugMJVIQ=
Subject key identifier: 90:B1:CD:E3:F9:09:8A:7F:5A:74:57:9F:2A:4E:9F:AB:48:20:DC:54
Certificate issuer: /CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Certificate serial: 03
Authority key identifier: 02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/kLHN4_kJin9adFefKk6fq0gg3FQ.roa
Signing time: Thu 27 May 2021 05:05:30 +0000
ROA not before: Thu 27 May 2021 05:05:30 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 134762
IP address blocks: 43.226.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Validity
Not Before: May 27 05:05:30 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=90B1CDE3F9098A7F5A74579F2A4E9FAB4820DC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fc:58:af:ec:4b:f4:c3:c2:fd:2e:ab:29:6f:
ed:83:1b:09:ff:cd:c6:16:b4:ca:4e:cb:e5:67:1d:
35:94:92:b3:aa:42:74:ff:cc:8b:45:7c:b8:c7:89:
05:c3:ba:be:6b:41:46:a9:e3:8c:07:1c:f6:ee:30:
82:4c:b8:a5:db:5d:62:23:e9:14:68:72:6d:e3:e1:
5b:f0:cd:29:49:0b:74:2b:5a:05:f9:7c:91:97:5b:
a3:18:65:79:37:19:5c:76:98:09:3d:4f:7d:50:90:
ac:4c:a7:7b:a6:a7:28:b1:b7:73:b5:ab:dc:1a:24:
fe:fc:52:5b:28:06:3e:5b:66:16:f8:45:72:c9:e9:
35:b1:0a:e9:50:b6:77:f2:c1:cf:2e:71:52:17:14:
2a:45:ed:1f:99:02:18:6a:65:89:03:66:af:e5:53:
cf:4d:55:aa:8a:d8:89:0f:c5:d9:61:b0:f4:bb:38:
68:20:d6:7c:30:72:52:4c:7d:bd:bc:db:ba:a7:44:
a3:70:ad:9f:d2:82:0a:01:2f:bc:b6:1a:e0:54:13:
fa:50:8b:68:31:6b:32:73:e0:49:ce:da:54:6a:2e:
0b:dd:33:13:07:43:89:b5:6e:f5:bb:53:6a:33:11:
a1:9a:f5:f4:dd:44:88:e1:0e:a8:c1:00:b4:a9:f9:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B1:CD:E3:F9:09:8A:7F:5A:74:57:9F:2A:4E:9F:AB:48:20:DC:54
X509v3 Authority Key Identifier:
keyid:02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AmBeOP5HEmDd56zml0Pi89Ty8MY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/kLHN4_kJin9adFefKk6fq0gg3FQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.64.0/21
Signature Algorithm: sha256WithRSAEncryption
03:85:fd:7d:88:cd:13:47:00:da:ae:69:90:96:0e:ff:32:ef:
13:8f:27:65:bd:cc:a2:e7:59:f0:f8:58:1c:94:61:7b:bf:5c:
49:73:7d:3f:0d:f1:70:e2:2c:b6:b9:b6:b9:13:45:1d:7b:4c:
68:19:c0:47:56:b0:a2:b4:3d:cf:4a:3f:8e:20:60:2e:d7:59:
72:1f:32:98:96:5c:d1:6b:50:86:80:d8:25:71:29:3f:8e:e2:
f9:5a:13:85:a2:b0:8d:c2:18:d0:cf:34:44:36:24:54:e8:e3:
f5:ec:d3:93:ed:6c:5d:39:03:e7:26:9e:02:22:1e:37:08:6d:
d7:82:37:e3:17:c6:bd:99:7e:a7:0d:83:47:34:63:3f:01:08:
b6:de:f8:a9:05:b2:6f:4c:15:e0:dd:3c:8f:ed:8c:f1:19:79:
ec:7a:5d:b4:d8:fd:89:bb:41:0b:d7:23:8a:a7:57:e9:11:b5:
d7:ea:0c:89:9e:0c:d3:be:08:e1:13:2e:eb:d9:4f:a8:0c:5b:
42:ac:c2:95:3d:d6:ef:00:9f:0e:2f:f5:74:6d:41:5a:45:84:
29:c4:24:10:1f:ce:29:06:3f:28:f2:cc:2f:4b:d6:be:64:d1:
a5:5d:33:2a:5e:50:4e:c1:b5:0f:fe:d3:54:ca:b0:67:31:16:
f9:dc:0c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:06 2023 by rpki-client on console-fra.rpki-client.org