Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/187/C41fGX8zjVNogE1htkGJ7rFRbtU.roa
File: C41fGX8zjVNogE1htkGJ7rFRbtU.roa (raw, json)
Hash identifier: QxaNjRCLMqaePx6Pz08cwiCKVWHZ7fEwssQbjmyPDWY=
Subject key identifier: 0B:8D:5F:19:7F:33:8D:53:68:80:4D:61:B6:41:89:EE:B1:51:6E:D5
Certificate issuer: /CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Certificate serial: 070C
Authority key identifier: 2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/C41fGX8zjVNogE1htkGJ7rFRbtU.roa
Signing time: Fri 05 Aug 2022 02:43:25 +0000
ROA not before: Fri 05 Aug 2022 02:43:25 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 398704
IP address blocks: 219.72.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804 (0x70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Validity
Not Before: Aug 5 02:43:25 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=0B8D5F197F338D5368804D61B64189EEB1516ED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c7:c7:82:f6:56:9a:77:3c:06:fa:37:a2:d3:
ef:61:1e:3f:c2:a0:eb:1a:1b:93:79:b2:f2:35:b0:
89:15:f7:23:fb:44:27:e2:19:9e:18:d2:2f:a8:4a:
6b:57:87:03:d8:a4:7f:8d:40:18:b6:67:48:37:a7:
0c:6f:28:e7:13:c7:e7:05:72:f2:98:45:45:00:1e:
dd:94:3b:fd:d4:ce:b6:4c:ec:54:e9:b4:b2:67:88:
a6:77:2b:32:0e:dc:e1:4d:87:fd:0e:0c:f6:52:8b:
68:d3:7f:2c:3a:ac:bf:9b:6e:bb:47:01:10:b0:3a:
8c:3b:da:87:a7:da:27:a6:6b:bd:58:7b:15:4a:1c:
03:8b:d6:7f:20:76:48:36:da:b3:6d:c5:f7:df:ae:
cf:46:4e:80:06:f5:8c:2d:8f:40:b5:05:ce:12:0d:
a5:3e:fb:b2:2b:f5:4f:b0:c3:9f:a4:44:ec:bd:f9:
f9:70:35:f4:38:17:89:51:49:93:74:33:74:f3:2a:
3b:49:44:a6:11:1b:e3:a9:47:09:6f:37:49:e7:75:
2b:6c:c1:0d:4c:91:48:1e:1b:79:44:c0:d9:08:1d:
68:64:65:51:b0:cb:e4:9d:cc:af:38:a1:35:bf:00:
49:2b:05:f6:82:26:af:98:ad:cb:59:20:67:31:b6:
6b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:5F:19:7F:33:8D:53:68:80:4D:61:B6:41:89:EE:B1:51:6E:D5
X509v3 Authority Key Identifier:
keyid:2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/C41fGX8zjVNogE1htkGJ7rFRbtU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.72.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d7:c2:8b:43:09:96:92:2f:69:0e:a8:22:62:cf:6a:65:43:
f9:1b:b5:a8:65:70:39:7b:f4:a3:08:7b:ea:4f:36:28:ad:37:
c3:c3:16:65:03:40:81:48:03:e4:3c:0c:b1:c3:13:d5:e5:e5:
eb:3e:9f:dd:75:43:07:e7:6e:3d:42:72:a8:7d:8d:bf:dd:e4:
54:d7:15:41:22:81:00:7e:8d:ee:93:62:7e:f6:88:fe:56:95:
84:39:4c:17:2b:62:c1:14:a2:16:31:d5:f4:3c:0e:0a:18:14:
a1:62:a9:dd:fd:5a:e8:a9:2c:3a:3b:4c:90:4f:58:26:62:24:
f2:01:13:0b:3d:7d:8e:fa:1c:70:29:29:2c:88:d7:3d:88:0b:
9e:a8:3b:ef:41:35:fc:13:87:cd:ea:da:b0:3f:4f:0f:08:e5:
fd:79:22:e6:4f:a5:2c:1a:47:92:72:fc:b2:38:11:ed:43:b6:
19:80:da:47:4d:cd:83:34:b3:b5:fe:e8:1f:6d:1e:1f:ba:e9:
33:ad:69:bf:cd:16:db:66:76:95:fc:79:08:3d:7a:52:77:9b:
08:cf:bb:d9:c0:6c:0f:79:58:90:36:7f:9f:46:61:fa:7c:b6:
02:02:93:9b:25:3f:d1:35:b1:f6:27:21:c8:d2:98:75:e4:cc:
77:49:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org