Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/mCez-PC3FGUD2R8Z9t199jHCiuQ.roa
File: mCez-PC3FGUD2R8Z9t199jHCiuQ.roa (raw, json)
Hash identifier: YfxfUq7oIuHQ1+WTHmv/kXndP8eyr4Q8lHcOS078l4M=
Subject key identifier: 98:27:B3:F8:F0:B7:14:65:03:D9:1F:19:F6:DD:7D:F6:31:C2:8A:E4
Certificate issuer: /CN=32891C582E37674795E9690ABA407FC676ECA1E1
Certificate serial: 04
Authority key identifier: 32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/mCez-PC3FGUD2R8Z9t199jHCiuQ.roa
Signing time: Thu 27 May 2021 05:03:15 +0000
ROA not before: Thu 27 May 2021 05:03:15 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 9808
IP address blocks: 202.141.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32891C582E37674795E9690ABA407FC676ECA1E1
Validity
Not Before: May 27 05:03:15 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=9827B3F8F0B7146503D91F19F6DD7DF631C28AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:40:3d:57:7d:ba:00:80:20:c4:ed:f1:1f:
a3:d2:4d:8c:94:93:b9:3b:02:d4:e6:92:dd:9c:46:
89:30:28:9d:c7:cf:1c:8e:d0:f5:56:d7:fd:4e:0a:
27:e7:ed:b6:83:db:50:d1:92:07:8a:40:64:1c:55:
08:b9:32:32:d8:94:06:95:77:88:0e:e2:25:b1:05:
43:82:79:19:d3:cb:0b:99:b6:05:3b:ac:3f:bb:34:
87:81:7d:d8:a5:12:d5:e4:02:a5:f0:d0:9e:e1:80:
2a:0b:fa:ad:37:f9:20:76:0b:81:26:d2:76:40:72:
67:e6:15:5d:af:18:3c:8a:4a:f8:8a:c6:f5:58:06:
9d:29:eb:c9:b5:38:12:a5:c0:45:58:83:82:7d:5c:
ff:aa:1c:aa:17:07:eb:e8:55:48:70:43:bd:b5:f8:
fa:83:df:25:7d:e8:b5:70:ec:70:87:bf:1f:a5:f8:
5f:1b:22:23:99:bc:29:bd:a9:c2:52:51:be:48:95:
4c:d1:92:94:a3:23:44:d5:12:c3:38:be:85:8e:8c:
f1:0c:8d:2f:62:f9:a3:9a:dd:10:f5:fd:e3:2c:ef:
3f:39:b2:03:17:f3:42:5e:ce:c5:aa:60:88:f8:2c:
a9:01:f5:91:79:b8:23:a5:a9:66:1c:37:70:6c:03:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:27:B3:F8:F0:B7:14:65:03:D9:1F:19:F6:DD:7D:F6:31:C2:8A:E4
X509v3 Authority Key Identifier:
keyid:32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/MokcWC43Z0eV6WkKukB_xnbsoeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/mCez-PC3FGUD2R8Z9t199jHCiuQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.141.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:a0:0b:2a:50:94:d7:24:2c:5c:51:bb:b4:ab:0f:17:26:db:
14:80:c1:25:5d:06:9e:7f:69:1e:a6:59:f0:2b:dc:1f:30:d1:
fc:6f:1c:49:87:8b:8e:c8:14:82:77:f5:e0:6e:ed:36:a7:8e:
56:be:56:52:aa:98:71:50:b8:d9:a7:39:8c:fd:53:7b:b0:17:
35:69:e1:8f:f6:5b:91:d4:60:b9:6e:6f:73:b5:b3:87:c3:83:
6b:1e:a0:e3:2f:3a:d8:a0:89:77:79:4b:dc:5c:33:fc:db:69:
7d:08:b7:60:ae:c5:03:76:4a:28:d0:37:8d:8c:ad:53:e4:5f:
46:69:30:0f:35:41:b5:6b:57:6c:8e:84:7e:d6:62:d0:29:02:
9d:8d:dd:18:9d:9d:d4:05:38:33:73:80:51:0d:08:07:1c:03:
6f:ed:c2:82:18:5b:8e:0d:7a:3f:5d:08:2b:dc:d7:c6:47:36:
6e:0f:07:0b:26:e6:4a:0d:72:29:c5:af:a3:62:9c:94:87:8d:
76:a3:ec:26:0a:6e:6b:0d:67:ec:a4:15:00:cd:4c:98:1f:d3:
31:c7:14:0d:07:2e:17:bc:ab:86:0a:52:b6:8b:52:5b:8b:e3:
87:23:01:e2:4b:eb:78:90:d4:69:2a:9e:98:2b:bc:65:f0:24:
85:56:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org