Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/kZrVqex5B20rAOBwEg4oqt5aQwg.roa
File: kZrVqex5B20rAOBwEg4oqt5aQwg.roa (raw, json)
Hash identifier: JFkBddcxaSYmyDmZ2rsa6u/t+HsfoDY7+KE+uIabl1g=
Subject key identifier: 91:9A:D5:A9:EC:79:07:6D:2B:00:E0:70:12:0E:28:AA:DE:5A:43:08
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 18C0
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/kZrVqex5B20rAOBwEg4oqt5aQwg.roa
Signing time: Wed 24 May 2023 03:54:04 +0000
ROA not before: Wed 24 May 2023 03:54:04 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 134762
IP address blocks: 43.226.50.0/23 maxlen: 23
43.226.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6336 (0x18c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: May 24 03:54:04 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=919AD5A9EC79076D2B00E070120E28AADE5A4308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:25:2e:56:51:7d:64:c6:b1:5b:36:44:56:
1c:03:3d:2d:0d:d3:92:ba:c0:fc:e6:f1:cc:ea:87:
fe:26:fb:42:c1:fc:39:4b:82:8b:cb:2b:52:bc:58:
91:9b:1e:d5:3c:c1:89:57:50:f2:80:4e:ec:f9:25:
5f:3a:96:b7:1c:a4:42:1c:64:46:10:d9:8b:16:62:
2f:54:ab:1e:4f:c3:75:07:eb:2c:df:f3:30:57:73:
f5:cf:7c:f8:57:11:7e:b9:27:ba:ee:5c:ad:5d:ae:
ed:ab:56:93:ba:62:0a:5d:31:0d:e1:f0:96:36:13:
45:ae:20:94:e6:96:58:37:2d:85:e6:ee:5d:f3:bb:
d0:53:85:fa:9c:64:38:29:bd:ed:ac:6d:10:86:a5:
75:ac:b1:4c:b3:ff:fb:8d:aa:20:73:e6:a0:e9:4f:
e4:25:07:68:53:1c:ba:17:e2:11:5a:c5:db:34:e6:
40:cf:a5:b0:9d:61:4c:c5:92:0d:24:f8:66:97:22:
3e:7f:e6:6a:0e:3b:cd:cf:27:29:ad:f4:2a:08:f4:
fc:55:c3:04:b1:c8:d7:fe:42:a7:12:dd:38:ae:87:
c8:f0:61:b6:67:db:a5:95:32:a7:9f:0f:d9:46:58:
fa:2f:6e:18:66:8a:cb:d2:97:7e:bc:dd:a0:6c:70:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9A:D5:A9:EC:79:07:6D:2B:00:E0:70:12:0E:28:AA:DE:5A:43:08
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/kZrVqex5B20rAOBwEg4oqt5aQwg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.50.0/23
43.226.76.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:61:7a:12:ae:87:77:b9:47:18:0d:12:35:85:63:1e:a9:f4:
d8:1d:4d:84:7b:29:28:23:92:50:e7:1d:c6:11:c7:bf:67:ab:
63:f1:b9:63:98:4e:09:7a:d6:e0:84:39:86:0d:1d:34:eb:ef:
4b:2c:73:41:a1:5c:a0:76:12:6d:66:f4:13:1c:01:6d:30:c3:
27:1c:33:ba:f1:dd:2c:e9:0b:5a:d6:b6:be:cf:87:a4:df:70:
a2:1e:a6:d7:6e:01:ba:ae:de:09:d1:e7:81:10:3d:31:f1:c0:
06:6c:70:2e:6f:51:6e:f1:a9:7d:3d:eb:af:58:a5:db:14:54:
7a:df:9f:04:8b:c4:55:a2:d9:84:55:8a:4d:99:4d:cb:30:54:
80:d1:98:f8:dd:80:c9:d9:2b:da:ab:e8:cc:ef:da:b6:f5:09:
ec:74:78:78:bc:18:c0:3e:0e:c5:73:7e:3b:32:89:8b:ea:40:
c1:19:37:ec:3d:81:60:88:3c:62:28:f3:a4:a1:aa:77:e6:74:
27:35:01:f6:6a:c2:96:eb:e1:6c:fa:98:3f:9d:12:04:5d:8e:
ab:48:46:93:43:3b:e5:57:58:f4:a1:96:58:df:dd:8d:3f:66:
34:20:c5:4f:7c:d3:4c:58:0b:98:f1:59:c1:70:f8:a0:0c:6d:
ff:70:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org