Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/HxjkSSLJKxPFKJ28If-aDVPn8cg.roa
File: HxjkSSLJKxPFKJ28If-aDVPn8cg.roa (raw, json)
Hash identifier: 1DQCPp4YmGU2jLmaKQNy5bz4VBHjgfvMzIXIcw3caME=
Subject key identifier: 1F:18:E4:49:22:C9:2B:13:C5:28:9D:BC:21:FF:9A:0D:53:E7:F1:C8
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 0960
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/HxjkSSLJKxPFKJ28If-aDVPn8cg.roa
Signing time: Tue 07 Jun 2022 02:12:47 +0000
ROA not before: Tue 07 Jun 2022 02:12:47 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 63641
IP address blocks: 123.49.237.0/24 maxlen: 24
123.49.242.0/24 maxlen: 24
123.49.245.0/24 maxlen: 24
123.49.246.0/24 maxlen: 24
123.49.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400 (0x960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: Jun 7 02:12:47 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=1F18E44922C92B13C5289DBC21FF9A0D53E7F1C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:39:50:a8:ba:a2:f4:4d:fd:1a:27:b9:55:
06:e1:cf:c7:f0:41:00:6f:f5:cc:ed:ec:26:aa:a6:
b7:c0:1d:ec:76:8b:ed:a2:48:f0:92:99:76:e6:e2:
36:27:8c:fe:ad:71:ac:da:9d:d8:35:28:01:9b:e2:
cb:f3:18:a2:11:9d:8f:ac:08:de:74:48:d1:d6:35:
a2:23:0f:a3:2c:e0:e9:75:71:bc:58:b6:a9:72:3f:
a9:04:a7:56:f0:47:7c:7b:8f:b8:91:89:72:11:ae:
6b:02:d3:28:54:29:15:60:c1:8a:d7:3e:93:7a:6e:
49:66:01:b4:bb:39:96:cd:ee:ed:51:ae:41:0f:e4:
54:3a:f6:87:d0:88:65:08:65:b3:28:d7:3a:bd:41:
e0:a7:d5:28:24:2c:75:3c:de:af:9e:a0:3f:54:14:
2c:24:43:da:bf:7b:c6:7d:1f:e5:6e:52:41:1f:d9:
2f:ba:c6:ed:8b:c2:83:cf:8e:28:c0:c6:62:04:87:
e2:a5:8b:b2:cc:9e:55:9c:21:cb:6c:3b:12:7a:4d:
6c:d4:2c:47:2f:4d:a2:a2:2b:02:81:5d:b3:4a:87:
62:e7:94:f3:de:ed:23:1e:bb:b7:98:29:a5:7b:b2:
c0:62:29:25:1c:65:d3:53:4c:15:d1:2c:63:f7:e7:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:18:E4:49:22:C9:2B:13:C5:28:9D:BC:21:FF:9A:0D:53:E7:F1:C8
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/HxjkSSLJKxPFKJ28If-aDVPn8cg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.237.0/24
123.49.242.0/24
123.49.245.0-123.49.247.255
Signature Algorithm: sha256WithRSAEncryption
84:18:48:01:ff:70:a4:c3:b7:65:3c:a9:9e:9a:c9:4d:32:26:
0c:dc:08:66:79:14:49:b0:9d:80:ce:58:00:4c:a0:e6:54:ee:
41:16:ce:ad:00:73:f2:69:ce:d5:2b:fc:34:44:b2:b0:aa:4c:
df:51:c5:44:f1:56:38:c7:56:08:79:1d:53:6f:2f:e9:ec:0b:
61:3c:d6:54:5f:74:a7:b2:15:6e:25:6b:a9:fe:8d:2b:d7:5e:
87:d0:9f:a7:af:41:14:4c:fb:6e:44:d3:cb:89:83:69:c0:3d:
22:54:de:25:43:bd:03:7a:87:b1:b0:80:1e:e1:df:a3:07:27:
77:cd:d0:ed:37:50:e7:01:c6:0d:2b:0d:21:2e:1e:9e:5e:97:
ac:52:eb:98:a3:77:62:87:16:d6:63:34:c6:20:ad:65:67:e8:
5c:05:34:19:bb:7b:e7:5b:7e:46:00:03:71:d9:1d:a7:07:3e:
83:6d:f8:0b:e1:e4:b4:b9:dc:db:90:c2:78:5e:17:20:09:aa:
75:83:f4:9c:be:38:6e:6d:3c:09:c9:12:a9:ea:6f:01:3c:7b:
18:76:a0:f2:71:95:15:a1:1c:79:0a:e6:1c:71:d4:83:d1:b6:
9d:cd:88:3a:66:78:29:f5:43:bf:5d:43:cb:42:9b:38:dd:7e:
9f:ce:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org