Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/MFw1mze2OQXcFcB63jQVwCqsCHc.roa
File: MFw1mze2OQXcFcB63jQVwCqsCHc.roa (raw, json)
Hash identifier: Hih2fi60qq0oWOjJ4mNTPYwq5bDY9hgXcoidqpLHU78=
Subject key identifier: 30:5C:35:9B:37:B6:39:05:DC:15:C0:7A:DE:34:15:C0:2A:AC:08:77
Certificate issuer: /CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Certificate serial: 033B
Authority key identifier: E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/MFw1mze2OQXcFcB63jQVwCqsCHc.roa
Signing time: Thu 04 Nov 2021 01:40:35 +0000
ROA not before: Thu 04 Nov 2021 01:40:35 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 4515
IP address blocks: 123.49.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827 (0x33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Validity
Not Before: Nov 4 01:40:35 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=305C359B37B63905DC15C07ADE3415C02AAC0877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:61:84:85:f6:a2:5e:46:67:0f:5d:3a:fa:
0f:97:1c:23:d7:e1:6f:01:ba:ee:2d:84:d9:e5:11:
19:3a:65:fb:b3:d6:28:d5:9a:5c:6a:09:46:e3:22:
10:76:2a:7d:06:76:d5:d9:ee:33:8d:19:05:13:a9:
2c:db:cb:93:67:7a:99:be:89:30:d3:ec:83:85:f8:
ed:dd:91:b7:81:cb:7a:c1:e6:ae:e9:86:cc:9c:1a:
8b:8c:89:c6:b7:45:99:43:8b:94:4a:04:6f:d7:07:
27:10:58:fc:6a:e8:ac:37:c4:2a:22:fa:4b:ed:a5:
26:a2:55:a8:f9:a6:77:bb:25:05:ab:c5:fa:4c:8c:
7a:a4:43:cb:e4:ca:c2:8c:fa:de:fa:9c:68:f8:30:
1d:99:46:49:3c:6e:42:a9:29:94:52:fe:83:55:6a:
f0:66:e2:51:36:26:8e:c9:1a:98:29:69:87:d7:c3:
c2:ec:68:2f:93:8f:9b:f9:a2:91:e1:a5:a5:66:c8:
b4:f0:27:59:95:4d:99:0c:aa:07:f6:03:a6:0a:32:
f5:91:69:6a:32:4e:1b:23:ae:1b:9e:42:97:8e:50:
32:70:8f:fd:5e:05:2a:0c:37:10:0d:60:1d:e1:5b:
23:4c:01:cd:a3:a4:6f:b2:b0:92:f6:7f:68:5e:72:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5C:35:9B:37:B6:39:05:DC:15:C0:7A:DE:34:15:C0:2A:AC:08:77
X509v3 Authority Key Identifier:
keyid:E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/MFw1mze2OQXcFcB63jQVwCqsCHc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.242.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:91:b2:c9:17:4a:37:2e:86:90:0c:a3:ad:9c:7f:51:70:5b:
ac:b8:90:40:79:2d:4d:54:3e:f9:2d:44:a1:4a:3b:49:d6:49:
a3:a1:8d:43:5b:16:5d:0f:e8:6e:87:d2:25:11:6e:8b:10:3c:
8e:07:c3:1b:53:a5:52:a2:ca:ed:50:01:50:ab:d7:03:95:b7:
38:f7:65:c4:2a:18:fa:e6:ce:af:77:c4:09:9d:47:f6:c8:bd:
02:b5:f1:64:2d:76:26:b0:7f:22:fe:0a:f6:22:96:eb:37:69:
2f:83:4f:b8:bf:72:b6:db:8d:24:e1:0f:49:38:02:ba:59:0f:
96:61:04:2b:7d:86:ab:34:1d:78:97:ec:ad:cd:b1:f7:75:45:
f4:be:fd:76:c1:d1:06:d5:40:83:aa:a3:3f:be:22:b5:8c:8e:
9a:d1:15:79:80:b8:48:26:ad:de:b0:62:db:6f:77:d0:45:d4:
63:c6:f5:90:ee:c5:78:20:9c:42:63:24:39:1d:ac:6b:6b:d3:
a7:1f:40:fd:a6:b0:73:00:df:de:5c:b9:b6:7e:5c:ab:2f:75:
a8:fc:1f:4d:75:bd:5e:29:c1:a9:13:5f:3b:1a:e7:ba:f7:11:
cf:cf:d1:ca:0b:3d:f0:5d:73:ca:92:c9:1d:61:d9:a7:3f:7b:
b9:8e:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org