Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/Iu1dztrnxlhlrpZzOS0Dpijsue0.roa
File: Iu1dztrnxlhlrpZzOS0Dpijsue0.roa (raw, json)
Hash identifier: 2bxLv5pGcjlESmSyyRHVNO1IU3zaw7XlDgEssIX9ga0=
Subject key identifier: 22:ED:5D:CE:DA:E7:C6:58:65:AE:96:73:39:2D:03:A6:28:EC:B9:ED
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 0941
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/Iu1dztrnxlhlrpZzOS0Dpijsue0.roa
Signing time: Tue 07 Jun 2022 02:14:35 +0000
ROA not before: Tue 07 Jun 2022 02:14:35 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 9808
IP address blocks: 202.141.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2369 (0x941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: Jun 7 02:14:35 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=22ED5DCEDAE7C65865AE9673392D03A628ECB9ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:87:fe:31:33:00:c1:94:83:94:06:9e:07:
88:4f:80:85:37:c9:19:10:7f:8d:67:23:b2:8e:56:
96:be:7d:87:3e:d6:95:dc:4f:da:4a:7f:60:71:07:
63:03:4b:bd:b9:37:05:96:4b:c0:c6:df:3b:ab:51:
31:51:f7:55:ad:10:4d:7c:7e:2d:c1:fe:86:f1:52:
56:da:9c:4a:9e:63:66:1a:fb:cc:ee:af:06:ac:68:
f4:16:a6:7e:8a:cd:40:47:fa:3a:97:7d:6d:51:74:
9f:a8:44:11:9e:2b:80:95:64:2c:ec:81:93:61:94:
4b:20:53:1b:be:bf:be:fc:95:dd:4b:1e:2c:2a:7c:
7d:09:12:0a:1c:c1:9b:c0:7e:02:ca:97:db:c2:a8:
7a:b6:42:52:0b:86:86:e0:64:1b:fc:46:21:9e:39:
62:5a:cc:ff:42:4d:7d:90:e3:e2:52:f2:74:cf:5d:
49:9c:1e:94:14:30:e8:77:8a:cf:39:05:7c:40:fa:
95:00:9e:fe:53:51:1f:57:04:53:c0:b4:0b:db:dd:
86:fb:8b:3d:30:5e:80:b9:ef:dd:ce:bf:50:c7:86:
53:cb:5b:9a:4d:a9:ef:b3:f6:10:23:66:63:d4:69:
4b:8b:75:7f:95:51:be:2d:a1:8c:b9:1c:81:6c:47:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:ED:5D:CE:DA:E7:C6:58:65:AE:96:73:39:2D:03:A6:28:EC:B9:ED
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/Iu1dztrnxlhlrpZzOS0Dpijsue0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.141.176.0/20
Signature Algorithm: sha256WithRSAEncryption
95:ad:ca:b3:ea:35:f5:85:c2:d3:39:07:00:94:71:19:af:50:
a6:65:f3:b4:b5:fa:ce:36:8e:68:be:f6:53:ea:4b:13:de:46:
6f:65:63:93:44:5f:18:f7:65:43:7b:09:49:1d:f3:85:59:f6:
c6:3d:86:96:9b:da:78:33:37:29:28:8c:83:62:92:2c:7b:5d:
0a:ed:10:b3:38:20:11:d6:08:94:37:12:4a:31:0b:35:6b:c5:
75:fb:82:0e:cf:27:59:92:64:67:9f:77:ce:6c:1b:55:ac:17:
b9:da:9f:0e:47:51:e3:79:0d:ff:bf:c6:1e:02:7a:1c:b9:24:
81:04:f3:37:57:21:2a:5c:6e:fc:43:db:9e:89:fa:e1:f8:19:
22:b3:63:6d:bd:d9:fc:2c:e7:6e:27:6d:4d:a8:7b:be:93:92:
83:d0:ad:79:a6:38:ac:f1:7a:a0:b6:bd:7e:dc:e6:e7:73:c7:
05:27:95:b6:41:70:d4:b3:ad:dc:42:68:7a:25:86:af:f7:71:
a0:69:fd:6b:0f:bc:69:a3:03:ac:0a:a7:12:76:d0:e7:fd:4f:
5b:7e:db:29:97:c0:66:e8:6d:4e:4f:95:e4:22:05:a5:c0:15:
5c:51:29:50:6c:01:02:9b:64:e8:a2:00:5c:02:5c:f3:cd:5d:
8a:3f:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org