Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/fVj-lV25gCBS6L1DQWOjK26IyH8.roa
File: fVj-lV25gCBS6L1DQWOjK26IyH8.roa (raw, json)
Hash identifier: BLQfKsA3MPDrUX1Ic41UON2sjoBJ6YNOv+EHoAzqZCg=
Subject key identifier: 7D:58:FE:95:5D:B9:80:20:52:E8:BD:43:41:63:A3:2B:6E:88:C8:7F
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 0943
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/fVj-lV25gCBS6L1DQWOjK26IyH8.roa
Signing time: Tue 07 Jun 2022 02:14:36 +0000
ROA not before: Tue 07 Jun 2022 02:14:36 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 4134
IP address blocks: 202.141.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2371 (0x943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: Jun 7 02:14:36 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=7D58FE955DB9802052E8BD434163A32B6E88C87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:a7:b0:f7:2e:27:25:81:58:62:27:89:e9:
ef:02:84:47:9d:48:99:8d:73:b8:e5:f1:a8:2a:17:
e2:f5:ad:85:48:78:c6:54:62:90:a0:56:80:e9:1c:
5c:e3:33:51:4b:71:b0:9d:51:13:44:1a:ff:ba:d2:
93:29:da:a2:cf:db:45:a9:9f:b1:89:b2:99:d8:7d:
2e:7e:ac:6e:83:dc:a4:41:43:9b:30:70:cd:df:7b:
50:20:3a:d1:d1:ea:d3:ac:d4:9d:44:f3:dd:ea:42:
14:48:a0:60:6b:a4:98:bf:40:a1:f6:8b:8e:7b:17:
7c:33:90:b1:15:47:0d:29:a7:81:e8:3b:94:b9:89:
b6:c2:c5:dc:99:08:2b:7b:ec:01:d3:b4:e0:4d:80:
90:a8:a3:c7:9e:ac:8e:72:94:60:ac:d5:ca:ea:ae:
ef:f6:33:78:dc:1c:88:ef:30:57:47:92:0f:f2:65:
64:47:98:80:48:7f:15:5c:7e:7c:3c:7c:14:ae:74:
a5:1c:1d:3b:f5:b0:88:22:8d:3d:31:a1:25:63:4d:
6b:fb:91:0a:94:78:61:35:3d:82:5b:f4:05:96:36:
0e:cc:d6:aa:97:b6:a3:d4:91:25:73:f8:f0:b1:b4:
a2:42:5a:f6:c4:1e:69:66:15:96:35:cf:3e:0d:1d:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:FE:95:5D:B9:80:20:52:E8:BD:43:41:63:A3:2B:6E:88:C8:7F
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/fVj-lV25gCBS6L1DQWOjK26IyH8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.141.160.0/20
Signature Algorithm: sha256WithRSAEncryption
61:a8:42:e1:dc:4d:78:6d:e2:c5:0c:98:9b:9f:8b:fb:99:6b:
61:c9:a8:d2:b8:d5:8c:7f:91:ac:a2:91:99:7b:07:47:86:02:
58:81:28:b6:3a:a7:33:ee:53:31:45:a3:31:1e:54:94:19:5b:
06:3a:51:c3:88:02:b4:0b:36:76:da:33:26:ea:04:65:2a:08:
83:e5:b6:75:95:48:28:df:e7:24:a1:27:90:38:94:3a:f5:e3:
b1:ee:cc:86:c7:4a:63:e7:c8:30:ad:7d:50:71:62:86:19:20:
29:52:83:4c:64:72:c1:13:ae:23:4a:9b:85:32:50:0b:24:4e:
1f:e9:f9:68:d1:28:a1:aa:68:57:f4:86:a1:d0:8b:5d:7e:b0:
46:51:40:ab:3b:30:c8:a6:a7:0f:a6:b9:09:8d:5c:d5:ae:45:
2b:70:f8:20:5d:3b:37:26:18:86:b1:d3:04:2c:4f:47:17:fd:
d8:07:a1:c4:45:60:96:20:b4:d1:a9:98:e3:59:8e:52:99:cc:
23:22:69:ca:52:9e:92:b0:48:93:f8:dc:91:56:6b:f9:6c:58:
d5:33:e8:79:ab:3c:89:f4:d8:8e:b9:fe:01:f2:9e:6c:06:b8:
79:a3:ab:44:81:54:23:bf:a3:aa:e8:5d:a6:54:ef:8c:9d:25:
83:b2:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org