Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/190/wcdOsL_V5qErOjQp0uXNmiftL4E.roa
File: wcdOsL_V5qErOjQp0uXNmiftL4E.roa (raw, json)
Hash identifier: o16UuCIEpZ3wWI5jfack2m+8qRWWbgTcpEVFz32S1yY=
Subject key identifier: C1:C7:4E:B0:BF:D5:E6:A1:2B:3A:34:29:D2:E5:CD:9A:27:ED:2F:81
Certificate issuer: /CN=E48FED76038496AD2AB1972D13468F4D3D403164
Certificate serial: 04
Authority key identifier: E4:8F:ED:76:03:84:96:AD:2A:B1:97:2D:13:46:8F:4D:3D:40:31:64
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5I_tdgOElq0qsZctE0aPTT1AMWQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/wcdOsL_V5qErOjQp0uXNmiftL4E.roa
Signing time: Wed 22 Jun 2022 08:21:35 +0000
ROA not before: Wed 22 Jun 2022 08:21:35 +0000
ROA not after: Thu 22 Jun 2023 08:15:23 +0000
asID: 24427
IP address blocks: 202.170.216.0/24 maxlen: 32
202.170.217.0/24 maxlen: 32
202.170.218.0/24 maxlen: 32
202.170.219.0/24 maxlen: 32
202.170.220.0/24 maxlen: 32
202.170.221.0/24 maxlen: 32
202.170.222.0/24 maxlen: 32
202.170.223.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E48FED76038496AD2AB1972D13468F4D3D403164
Validity
Not Before: Jun 22 08:21:35 2022 GMT
Not After : Jun 22 08:15:23 2023 GMT
Subject: CN=C1C74EB0BFD5E6A12B3A3429D2E5CD9A27ED2F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:57:c6:c5:f2:e0:f4:fb:da:8c:2c:8a:39:
f7:68:58:81:c7:79:bf:32:31:56:61:e5:66:a7:25:
e7:9f:86:54:c4:3a:51:44:7f:a3:c0:18:47:c7:b4:
41:69:b0:97:ca:27:97:a5:91:70:96:ae:c9:e9:fc:
b8:36:c6:e2:9f:08:7a:8e:0c:20:f3:d0:18:4b:8f:
54:90:87:bc:fb:c6:63:32:1a:6b:04:a2:0a:16:33:
1d:2c:0e:35:86:62:f3:02:59:b7:91:e1:fa:a3:d3:
a1:08:74:3a:28:b0:78:be:b9:74:99:5a:ef:28:11:
29:59:29:b9:78:75:37:94:6a:fa:02:6e:b2:72:d9:
55:f1:5d:b5:cc:5a:3a:23:23:64:6d:63:87:a1:25:
ad:31:64:ec:12:dc:82:ea:05:b1:fa:92:cd:96:b4:
f7:32:95:c0:3b:64:35:c1:3a:c1:0e:0f:ad:2c:7c:
3b:87:19:61:b8:95:ac:48:0d:1d:a6:b1:38:f8:ee:
ea:b0:4a:fe:72:7c:80:9c:bf:c2:8d:ba:5f:63:b5:
5c:bd:24:bb:1f:92:bd:f2:cb:27:bf:42:ba:9b:66:
f6:06:46:29:39:03:91:21:2e:7c:20:79:47:72:c9:
1b:ec:27:87:70:51:9e:ff:2c:ae:b7:24:19:41:db:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C7:4E:B0:BF:D5:E6:A1:2B:3A:34:29:D2:E5:CD:9A:27:ED:2F:81
X509v3 Authority Key Identifier:
keyid:E4:8F:ED:76:03:84:96:AD:2A:B1:97:2D:13:46:8F:4D:3D:40:31:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/5I_tdgOElq0qsZctE0aPTT1AMWQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5I_tdgOElq0qsZctE0aPTT1AMWQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/190/wcdOsL_V5qErOjQp0uXNmiftL4E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.170.216.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:e8:05:a7:0e:95:b2:0b:7c:2d:89:70:54:04:f6:96:5c:c0:
be:4b:b1:05:ef:13:ef:62:53:68:af:03:e5:7c:ff:7d:4a:8a:
3a:3a:29:43:f9:7b:42:19:31:cb:32:a4:75:73:34:1d:04:2c:
04:3f:3a:06:20:5f:55:ae:82:0a:94:fe:26:b9:e2:8b:86:d9:
8d:b0:49:3e:67:df:57:69:88:10:3d:27:5f:8d:1f:2a:df:6d:
63:2b:fd:f8:aa:e8:4b:d8:43:ee:4e:57:74:41:ab:14:15:6f:
12:59:2a:54:4b:dc:1f:f2:48:03:d4:6a:e8:b7:74:21:40:f5:
d5:89:f2:5d:db:64:cc:b2:15:72:0e:fc:12:0d:1e:3d:cb:6c:
62:1f:3d:d0:51:86:64:be:df:2a:0c:f9:5d:97:bf:76:ca:c5:
7d:ba:5d:e7:b8:86:4a:35:0f:4c:ce:25:77:70:e5:ad:37:7a:
f3:0c:49:9e:f4:44:3e:ae:e1:7c:01:c9:0f:74:61:6e:21:83:
12:82:b9:fa:0c:b6:af:72:e8:e1:a6:19:d3:d2:7f:3b:5e:52:
31:d9:1e:06:a0:75:91:72:e0:cb:17:a4:bd:0c:b5:3e:51:47:
bc:cf:e6:d3:58:8b:11:29:bf:0e:36:c2:73:b3:03:be:41:b7:
fb:22:6d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org