Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/wswPfLbkRahlTJ5nduVpMNfxEAs.roa
File: wswPfLbkRahlTJ5nduVpMNfxEAs.roa (raw, json)
Hash identifier: gA0zLto4fc7qwxtIkwnmV4QPzsQ/b32BtmTGJMRkQTA=
Subject key identifier: C2:CC:0F:7C:B6:E4:45:A8:65:4C:9E:67:76:E5:69:30:D7:F1:10:0B
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 0942
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/wswPfLbkRahlTJ5nduVpMNfxEAs.roa
Signing time: Tue 07 Jun 2022 02:14:36 +0000
ROA not before: Tue 07 Jun 2022 02:14:36 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 9808
IP address blocks: 121.255.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2370 (0x942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: Jun 7 02:14:36 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=C2CC0F7CB6E445A8654C9E6776E56930D7F1100B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:40:5f:3a:74:af:81:0a:30:79:49:8f:14:
ae:e1:0a:c0:98:f6:db:44:43:6a:a2:69:24:f0:b2:
6e:ec:b1:4d:2d:e4:f0:85:64:06:9e:e8:e4:4a:80:
01:57:aa:b0:01:bd:6f:0d:45:c7:c2:64:09:b6:81:
75:5f:40:e1:c2:dd:70:4d:b3:02:d0:21:f4:86:5f:
65:35:fe:1a:37:37:56:88:46:b4:aa:43:86:a8:41:
32:78:11:b5:7e:5a:ce:ee:c3:23:81:db:3d:5d:80:
30:30:09:2b:df:04:7d:17:bc:31:3e:f7:9b:7d:d6:
3c:72:be:b0:76:d3:10:8a:df:56:9d:c1:89:f0:db:
3e:46:90:60:cb:57:94:53:b3:f9:1f:8c:b0:3a:b8:
89:ec:a2:ab:39:7a:7c:b2:5f:6b:54:6d:0d:3f:b6:
6c:31:53:89:ea:b8:51:d9:8b:b0:c1:31:29:51:b0:
6c:16:4a:98:94:87:12:ee:c2:aa:70:a6:4a:4a:01:
6d:26:87:8f:86:f9:6f:92:01:f4:f2:a5:45:58:e0:
b8:63:c8:1a:40:8e:8c:83:cc:62:f0:b1:7b:60:87:
16:f2:e0:07:aa:c7:29:39:8f:0b:72:dc:8a:27:ce:
03:ba:ba:cb:5a:4c:7b:c0:a7:e8:05:c9:dc:dc:6b:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:0F:7C:B6:E4:45:A8:65:4C:9E:67:76:E5:69:30:D7:F1:10:0B
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/wswPfLbkRahlTJ5nduVpMNfxEAs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:90:26:58:d7:77:a0:90:4f:9e:3d:9c:fd:ec:bb:e4:f4:36:
de:2c:bf:7c:71:2f:f3:7a:c0:62:1e:15:6f:88:64:8e:62:43:
60:ea:35:d7:2c:a7:e5:e6:35:80:4c:6c:e7:86:16:fc:54:3d:
45:3e:31:c6:59:8b:8e:63:de:f5:09:10:28:91:4a:02:37:e2:
c7:71:b0:ec:6f:61:55:a1:f8:1b:95:de:99:3d:65:5b:a4:8b:
c9:a6:44:ae:88:42:de:07:51:21:40:8e:29:a7:53:e7:72:8f:
43:3f:12:3f:60:58:13:40:a8:81:79:02:5f:76:1d:23:74:e3:
ef:9c:ad:bb:ba:fc:a2:cf:5d:01:71:5f:53:ec:5e:5c:e3:67:
92:64:ad:02:41:3a:1a:43:1d:51:91:d7:04:dd:58:a8:98:0f:
e6:18:97:01:f5:4e:6b:8d:25:6b:da:e9:91:52:69:20:a9:91:
0b:33:9a:f2:e2:4f:8f:e1:f0:9c:27:3d:5b:99:3b:cd:b0:bd:
1b:c6:db:e6:c7:9d:f9:fe:f5:4b:ae:2e:ba:fb:b5:3a:08:3c:
4e:40:6a:c5:b8:a3:88:dc:85:1a:96:79:d7:e1:45:3a:35:12:
95:b0:e7:fb:41:91:ca:1a:80:13:3d:85:d6:1c:bf:c8:88:81:
61:fa:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org