Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/AV68fjoWs0t6lMbhH1uHAtzhpXA.roa
File: AV68fjoWs0t6lMbhH1uHAtzhpXA.roa (raw, json)
Hash identifier: 6LJ8VHD/BQ67GB5iK3dCWuk70cS1dji3VWra3jQAdHE=
Subject key identifier: 01:5E:BC:7E:3A:16:B3:4B:7A:94:C6:E1:1F:5B:87:02:DC:E1:A5:70
Certificate issuer: /CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Certificate serial: 067D
Authority key identifier: E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/AV68fjoWs0t6lMbhH1uHAtzhpXA.roa
Signing time: Wed 13 Apr 2022 09:41:12 +0000
ROA not before: Wed 13 Apr 2022 09:41:12 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63641
IP address blocks: 123.49.237.0/24 maxlen: 24
123.49.242.0/24 maxlen: 24
123.49.245.0/24 maxlen: 24
123.49.246.0/24 maxlen: 24
123.49.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1661 (0x67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Validity
Not Before: Apr 13 09:41:12 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=015EBC7E3A16B34B7A94C6E11F5B8702DCE1A570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:da:61:06:f8:79:79:ac:7d:04:cd:98:da:
4d:09:98:f6:b0:c2:90:1d:68:56:eb:c0:b8:2f:58:
fc:9a:c6:c1:e3:c1:fb:d6:cb:f7:05:95:6a:41:d4:
9e:99:5d:87:22:0f:3d:ff:bc:36:ad:00:17:0b:41:
91:5c:db:e1:e0:50:41:a3:89:78:39:6b:41:b2:15:
86:a4:c4:6a:53:99:e7:e0:e9:ef:4b:ea:a8:0e:b6:
c2:b8:0a:64:27:b0:8f:bb:02:1e:1d:15:df:de:0f:
b8:5f:fe:75:e7:e6:ec:6c:04:92:58:2a:dd:45:83:
f2:ca:90:32:13:64:63:1b:19:8d:03:4b:09:36:58:
6f:63:fb:f5:f4:27:bc:22:2e:1d:c4:5f:f9:6b:89:
0e:b7:a5:3e:34:29:b0:ff:81:df:43:f1:60:58:ed:
32:7e:56:a5:8b:b6:1b:f8:9c:0e:0c:ae:8e:86:c7:
87:c8:80:f5:a6:00:f6:c1:b5:4c:9d:7c:fe:b7:b9:
66:90:c1:46:62:98:5d:48:06:69:00:a2:d8:f6:20:
35:fb:19:fc:d8:4d:28:3d:cf:55:ea:ee:14:ef:ec:
54:75:68:1a:46:25:a6:0b:ab:b7:f0:c7:08:60:3f:
cc:ec:00:cd:db:98:eb:0d:d3:19:cf:22:82:43:81:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:BC:7E:3A:16:B3:4B:7A:94:C6:E1:1F:5B:87:02:DC:E1:A5:70
X509v3 Authority Key Identifier:
keyid:E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/AV68fjoWs0t6lMbhH1uHAtzhpXA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.237.0/24
123.49.242.0/24
123.49.245.0-123.49.247.255
Signature Algorithm: sha256WithRSAEncryption
16:f1:36:9c:8b:cd:e1:14:3b:0a:1a:5d:42:16:4a:51:4b:fe:
09:d1:c4:b5:1a:e8:7c:7b:95:e7:9e:15:1a:74:5f:bc:62:54:
d6:bc:ad:d2:4e:b8:8c:e9:97:16:6a:0c:76:3e:ec:1d:b0:89:
76:ea:54:2a:4f:43:5c:82:dc:f4:20:38:68:b5:a4:69:c1:c6:
e9:3f:d3:c9:34:cc:1f:c2:c8:5c:c9:9d:f0:31:f8:39:7b:94:
1f:c4:fc:42:bf:70:ec:fb:3e:a9:06:0b:88:26:35:35:3a:71:
70:87:06:bb:22:44:8f:fe:1e:54:08:19:d0:59:6d:37:c8:c1:
5d:52:ca:8f:6c:60:fe:a4:7d:f9:be:9d:42:06:2b:4e:29:e3:
b3:e7:6e:6e:0c:d2:f0:bf:14:28:72:c4:07:6f:d3:7c:73:9d:
b2:fa:79:a4:0e:70:e3:ce:87:ee:dd:c9:36:99:08:a7:15:13:
40:a7:52:7e:71:dc:98:45:fa:f7:d0:41:31:5e:9e:3c:8c:9b:
ea:69:de:15:21:42:36:5e:52:32:50:da:f2:25:da:93:88:ca:
ed:b4:7e:f3:f8:9f:dd:15:92:3b:f0:93:0f:99:72:6d:18:ca:
84:9d:db:48:07:c7:05:1a:1b:43:ce:2a:c1:c1:3c:77:0a:4d:
c5:c6:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org