Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/qa8Vy2yRE6XiwrvhaC2V1vzdW7Q.roa
File: qa8Vy2yRE6XiwrvhaC2V1vzdW7Q.roa (raw, json)
Hash identifier: TnyCys9VEUIlzn1TUFGDz2vVcODTkWe9iGRCM/IZc58=
Subject key identifier: A9:AF:15:CB:6C:91:13:A5:E2:C2:BB:E1:68:2D:95:D6:FC:DD:5B:B4
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 096D
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/qa8Vy2yRE6XiwrvhaC2V1vzdW7Q.roa
Signing time: Tue 07 Jun 2022 10:06:44 +0000
ROA not before: Tue 07 Jun 2022 10:06:44 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 134762
IP address blocks: 43.226.49.0/24 maxlen: 24
43.226.53.0/24 maxlen: 24
43.226.54.0/24 maxlen: 24
43.227.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2413 (0x96d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Jun 7 10:06:44 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=A9AF15CB6C9113A5E2C2BBE1682D95D6FCDD5BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:a3:71:31:d3:b5:09:b2:0c:3d:a2:38:ec:
6b:20:66:33:2f:f4:cd:ca:77:79:37:b1:34:3d:80:
41:33:5b:b8:8b:eb:f9:a2:61:2a:08:57:4c:28:75:
ef:84:c2:17:9f:0b:5a:bf:b5:93:e5:18:fa:e0:47:
98:01:33:3c:de:3e:2b:63:65:3f:57:31:d1:ca:89:
ed:f2:3c:c5:55:7c:57:85:0b:94:7e:1c:0d:62:1d:
9b:b7:f8:87:60:3e:03:1d:6a:32:b8:dc:5b:49:ba:
00:8f:d6:fa:d5:17:82:57:6a:4c:c8:ea:ab:3d:fe:
ee:89:b8:8d:08:be:87:75:10:e0:65:7a:16:c8:1a:
41:8d:f5:c2:90:24:3c:3d:ce:eb:19:bb:10:a2:b4:
f2:9c:d5:d1:07:ae:d9:54:bb:56:14:b3:77:d5:18:
a2:18:e1:2d:bd:ca:a1:01:2b:ee:69:ac:34:7f:fe:
d4:e3:fa:7d:e7:bc:9a:b9:27:0c:46:2d:61:0c:4b:
cf:a5:f5:b1:43:65:f5:fa:de:f7:cb:57:ed:e5:b4:
a7:74:18:e8:c8:48:fc:dd:02:e7:5e:5b:e9:bd:0d:
42:48:e8:de:4f:fe:8e:da:a3:df:61:15:bb:8f:0a:
42:44:64:17:0e:0e:28:a7:00:ee:2c:17:0b:99:bb:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AF:15:CB:6C:91:13:A5:E2:C2:BB:E1:68:2D:95:D6:FC:DD:5B:B4
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/qa8Vy2yRE6XiwrvhaC2V1vzdW7Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.49.0/24
43.226.53.0-43.226.54.255
43.227.68.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:53:f0:cd:e3:fd:f5:59:da:f7:6d:26:5d:2a:ec:6a:94:10:
73:4d:fd:ea:44:03:23:a6:0d:37:e8:82:4d:65:b5:9d:3f:0f:
2e:96:f5:1c:c8:1d:b3:31:6c:59:18:e2:d1:da:7c:37:ad:22:
c2:a5:59:ad:3e:b6:ae:ae:df:6c:5c:79:6f:e7:9a:40:a6:66:
ae:cc:51:1e:89:cd:89:8b:51:a3:16:8e:d5:00:f1:d9:3c:8f:
82:c4:c4:cb:da:1e:a6:e1:6a:2b:39:68:0e:78:99:4f:40:5e:
f0:fe:55:1c:85:ff:fe:2f:cb:0b:d0:c7:3c:cb:c0:2b:05:fb:
79:b6:fd:13:cc:98:d5:b9:d1:fd:27:03:3b:84:66:59:c1:92:
97:04:28:1c:3a:ba:cb:b6:8e:3e:be:1a:73:85:19:8e:92:03:
32:94:86:c8:21:f4:b7:10:31:df:db:b9:c2:a8:e8:3c:b2:41:
9c:68:11:59:71:b7:46:16:ec:70:9a:5a:5f:65:bd:2b:be:19:
c2:1a:bc:6b:58:ad:0d:80:6a:b3:09:34:46:5c:dc:b0:d0:bf:
8c:dc:1d:fe:0f:65:d2:77:ba:fa:ab:04:5b:23:60:85:72:64:
4b:04:8b:f6:a8:b4:cf:ec:f1:14:2b:b4:3c:63:fb:f3:b8:b2:
1a:9e:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org