Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/tpEwc8DWP-h-Nfa7nkD6oEHceBU.roa
File: tpEwc8DWP-h-Nfa7nkD6oEHceBU.roa (raw, json)
Hash identifier: U+UwKBIQZ3i3nYfjaTLfMfhm6MCy9plPW/ofO34nVvg=
Subject key identifier: B6:91:30:73:C0:D6:3F:E8:7E:35:F6:BB:9E:40:FA:A0:41:DC:78:15
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 1006
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/tpEwc8DWP-h-Nfa7nkD6oEHceBU.roa
Signing time: Fri 19 May 2023 05:55:05 +0000
ROA not before: Fri 19 May 2023 05:55:05 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 9808
IP address blocks: 202.141.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4102 (0x1006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: May 19 05:55:05 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=B6913073C0D63FE87E35F6BB9E40FAA041DC7815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:aa:80:82:a9:bd:4d:6d:2a:96:ed:e8:1e:
20:5d:95:be:1d:d0:3b:25:13:90:82:02:4b:a6:31:
72:e8:16:bf:53:08:a7:f6:a4:55:70:e9:b9:32:c3:
df:86:03:51:5c:45:88:12:da:de:1b:66:32:d5:c3:
51:c7:70:10:03:c0:57:20:ba:a0:3c:d6:d4:49:3d:
73:28:3a:7f:e9:ed:e1:9d:4e:33:6c:78:ca:52:3d:
93:12:89:bb:e8:82:c1:57:83:2a:05:36:69:34:07:
d8:bf:06:f5:d0:ef:57:09:09:6f:07:47:01:7f:df:
44:07:19:6f:2f:32:df:3c:46:3b:b0:9a:22:a9:87:
71:15:1a:16:c7:cc:80:f4:a2:b1:75:2e:74:31:3e:
62:25:64:88:f8:cd:50:e0:49:b2:83:f8:e2:9a:04:
7f:5c:4c:c9:6a:95:cd:6f:f2:73:c5:a1:ff:35:5e:
c5:cf:1c:25:2b:78:97:32:d0:c1:dd:8d:00:8c:e7:
a8:8b:36:8d:29:26:64:b0:51:f1:db:be:ed:e1:ee:
1a:3b:af:47:f7:7e:fa:6b:c9:9a:3a:3c:e1:3e:7f:
e9:c8:d9:5f:81:dc:62:4d:10:59:08:9a:f8:96:de:
81:d7:29:b8:c2:26:1d:18:aa:65:fe:ca:7b:28:aa:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:91:30:73:C0:D6:3F:E8:7E:35:F6:BB:9E:40:FA:A0:41:DC:78:15
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/tpEwc8DWP-h-Nfa7nkD6oEHceBU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.141.176.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:5e:b6:6c:39:08:55:a5:00:ee:6f:fa:23:28:7c:0b:39:7d:
b3:c0:c4:75:7a:92:fc:83:d0:94:95:13:b7:59:d7:db:2e:22:
46:f7:d8:9d:1d:9b:36:7c:e1:2d:14:b4:3b:27:25:f4:b6:29:
e7:1f:38:41:c2:13:9e:3b:35:b8:f4:44:38:ce:fa:49:66:4a:
00:56:eb:11:68:a5:ed:67:ab:c0:00:59:77:f1:43:cb:65:02:
73:49:99:8c:8f:fb:b6:de:b7:1b:81:82:b9:9f:fa:23:6e:d8:
31:97:0e:e0:1b:82:59:b5:69:7d:74:43:0e:e8:eb:f2:f3:90:
14:2a:54:a9:12:22:79:cd:48:9a:4d:44:19:ec:b8:55:6c:b3:
70:3d:82:15:26:3b:a2:71:8e:e9:2c:9f:53:d8:d9:81:a3:5c:
be:9b:11:58:2c:6b:47:b0:c3:ef:3c:84:c4:dc:a1:c6:50:02:
df:62:9b:24:4d:bf:b7:3a:74:15:02:98:c6:71:61:d4:3c:57:
31:9c:63:f9:d3:5e:52:10:75:24:97:0a:16:31:01:db:83:b9:
4a:4f:a7:90:d8:2e:c2:6a:56:30:c6:19:4c:9f:04:99:ec:52:
37:e7:15:d1:78:15:ce:9d:a6:5c:81:90:1b:37:cf:8a:2c:aa:
e3:1d:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org