Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/nBzXMKqaWwij2flPBbQ8Z-JNiXQ.roa
File: nBzXMKqaWwij2flPBbQ8Z-JNiXQ.roa (raw, json)
Hash identifier: qLUj5qb8Qpv1MY3m5g0CeZ0I3aBHMVlShaugSNMnyDg=
Subject key identifier: 9C:1C:D7:30:AA:9A:5B:08:A3:D9:F9:4F:05:B4:3C:67:E2:4D:89:74
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 0967
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/nBzXMKqaWwij2flPBbQ8Z-JNiXQ.roa
Signing time: Tue 07 Jun 2022 10:06:40 +0000
ROA not before: Tue 07 Jun 2022 10:06:40 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 134762
IP address blocks: 43.226.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2407 (0x967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Jun 7 10:06:40 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=9C1CD730AA9A5B08A3D9F94F05B43C67E24D8974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a8:08:27:4e:5c:89:9b:a3:f8:1c:ab:17:98:
87:3a:77:20:a1:1a:01:56:cb:9b:71:17:ed:8e:b0:
57:1a:ec:ca:7c:56:f3:be:f8:16:ab:70:cb:ca:67:
bc:59:87:c9:89:9b:2d:0d:f3:c4:98:8b:65:3d:a5:
7b:06:af:74:36:2e:13:1c:e0:24:76:6f:e4:2d:0f:
b7:2a:88:5a:e7:2e:38:d3:73:e3:79:6c:0b:6b:18:
54:4c:4f:b4:26:4d:80:3d:e7:f8:de:d1:e8:b3:d6:
03:35:61:d4:35:2c:25:09:30:17:a1:9d:cd:8f:b2:
32:60:b8:8c:c5:60:ac:f9:ce:2f:2d:9f:f0:bb:97:
3f:12:8a:98:d3:f8:9d:2c:1c:4d:4a:d0:de:fc:0a:
ec:0d:c3:fc:21:b9:7d:92:e6:bf:fa:8a:f6:71:93:
68:9a:4c:12:34:82:29:38:c8:45:1c:41:d6:4f:fe:
d1:51:7f:00:b9:32:30:6c:39:de:e3:5c:4f:c0:94:
c3:20:c6:01:fc:cb:d7:ad:6b:db:4e:6e:56:85:4e:
57:c8:7f:42:82:19:14:91:ff:21:70:10:24:de:f2:
fc:0a:eb:f2:66:58:32:c4:a8:99:9b:03:30:10:fa:
eb:fe:36:15:67:41:65:f1:63:d5:e4:bc:be:1e:0e:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1C:D7:30:AA:9A:5B:08:A3:D9:F9:4F:05:B4:3C:67:E2:4D:89:74
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/nBzXMKqaWwij2flPBbQ8Z-JNiXQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.64.0/21
Signature Algorithm: sha256WithRSAEncryption
56:3f:f0:11:a0:4a:a2:73:b0:2c:c6:93:7f:64:05:7f:cd:47:
20:14:1b:8b:c7:ef:a5:a0:36:68:ce:68:71:a5:df:c9:36:82:
c0:c2:5e:62:08:05:22:68:d5:b9:30:3c:00:e7:6d:a8:a7:0a:
bb:49:ae:0b:ea:a6:51:23:9a:0e:ea:6d:50:55:05:ef:10:d1:
52:2a:d5:cc:1a:ab:2d:5f:8d:9d:19:30:b4:6b:be:18:6f:c3:
d6:c4:21:c0:80:37:23:e9:cd:4c:ac:f4:7e:24:34:0b:10:53:
eb:60:b8:9a:be:21:8f:a9:d8:46:d7:ed:3e:4d:80:33:09:8b:
cb:55:80:72:a6:69:4b:e2:cb:ec:f0:8f:ea:7e:2c:63:37:e6:
4f:b0:d7:e6:86:b0:30:1c:44:19:b2:2d:d8:c8:f8:06:bc:52:
25:83:dd:9e:32:0d:1b:7a:4a:d1:8a:c0:c7:af:16:7b:e5:a8:
52:30:1f:3b:e5:8c:90:55:d5:3e:52:75:c9:94:cf:c3:46:31:
5a:66:45:6c:3c:10:af:cd:d3:f2:8b:6a:60:09:b2:63:ee:ff:
5b:a7:83:43:21:4b:30:ee:9e:ed:80:1a:65:69:a0:d1:be:24:
d0:b9:14:15:1a:2a:d1:fe:61:2c:f9:6d:79:93:c3:93:f8:0d:
4d:d6:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org