Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/187/8tgouDxahWloqFWg92kjndNpzus.roa
File: 8tgouDxahWloqFWg92kjndNpzus.roa (raw, json)
Hash identifier: 9Ixk32eM9b0hpvvV8PIfR97wjUQHSfIPhLQGPQhu5mE=
Subject key identifier: F2:D8:28:B8:3C:5A:85:69:68:A8:55:A0:F7:69:23:9D:D3:69:CE:EB
Certificate issuer: /CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Certificate serial: 070B
Authority key identifier: 2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/8tgouDxahWloqFWg92kjndNpzus.roa
Signing time: Fri 05 Aug 2022 02:43:24 +0000
ROA not before: Fri 05 Aug 2022 02:43:24 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 18118
IP address blocks: 219.72.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Validity
Not Before: Aug 5 02:43:24 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=F2D828B83C5A856968A855A0F769239DD369CEEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:d4:39:11:fd:c7:c8:91:f7:00:49:61:aa:
0c:09:8c:41:08:f6:88:7f:c9:f8:80:e3:4a:7c:71:
e3:06:56:84:eb:e8:5b:3f:96:7f:fc:1e:73:13:ae:
6d:e5:b1:3c:0d:22:89:3a:b2:aa:5c:cc:b9:4e:63:
56:cd:a5:4f:85:5d:76:70:a1:cd:17:d0:5a:74:0e:
14:5d:e4:e0:77:db:62:9d:ae:d9:dd:e2:08:0c:dd:
a6:88:4c:5f:60:6a:4a:c8:55:09:e2:18:d5:58:75:
3f:eb:27:6b:bb:19:27:ae:ae:4f:bf:d0:88:a9:98:
4e:c3:f5:16:b8:87:84:21:3e:bb:0a:4c:cd:d0:38:
df:c8:3a:7e:10:95:da:2d:40:52:da:3d:6a:ce:f9:
8f:04:3c:f1:25:b8:f8:59:dc:49:fc:d4:ec:f6:04:
16:c5:d6:fc:7e:96:2d:38:69:81:dc:61:ea:6b:45:
b8:56:a5:a5:cd:01:4e:6f:94:ec:a8:e5:a8:9a:2a:
09:29:de:7b:31:dd:92:03:14:4f:d0:47:97:66:97:
48:59:cc:cd:43:b0:b2:b2:b2:98:a4:40:0f:43:f0:
e6:07:b1:4d:80:f0:73:47:43:be:2a:cd:ca:25:a6:
e9:a0:95:cc:ed:44:d5:ed:07:5c:86:71:7f:e1:89:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:28:B8:3C:5A:85:69:68:A8:55:A0:F7:69:23:9D:D3:69:CE:EB
X509v3 Authority Key Identifier:
keyid:2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/8tgouDxahWloqFWg92kjndNpzus.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.72.160.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ac:93:f6:db:3e:f4:df:2d:c1:52:77:b6:ce:3e:dd:a4:d6:
f0:10:55:e0:45:2f:ec:13:76:b2:15:df:63:11:5a:42:cc:6c:
d2:b0:0c:84:8d:6c:c5:32:c3:36:aa:07:1c:83:79:ac:fa:09:
43:75:18:ec:45:a5:28:b4:b8:cb:91:1c:5a:5e:46:c1:25:5b:
4b:d1:d2:27:2a:5a:a2:38:84:82:9b:02:1e:c8:23:1d:1f:d4:
27:c9:5a:43:e1:49:76:ec:4b:ea:cc:40:1f:29:1d:44:07:53:
07:17:ee:55:58:75:e0:ea:34:83:09:01:4a:a5:ea:c7:18:6f:
71:2a:43:fd:a2:dc:85:b8:21:01:10:3a:13:11:fd:c4:08:e2:
54:8f:0a:26:aa:53:eb:14:12:6a:63:cc:ab:23:ee:73:55:01:
47:7b:4c:e3:15:0c:ca:5e:f3:f6:5b:20:de:4e:48:6a:88:25:
a7:3e:2c:ac:f7:1e:9d:20:6b:18:55:0d:39:31:06:f7:75:f4:
6a:97:46:5d:11:01:e3:27:2b:27:05:07:75:0c:95:96:5e:77:
86:7e:12:33:c3:13:5d:a0:52:1a:2d:f6:b0:0e:84:07:af:1d:
ff:31:a6:ab:85:69:79:a2:ae:5d:7e:9a:89:84:a2:1b:3e:5e:
68:e2:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org