Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/SZEozlJJdchkVyVyv4cRolVc9Hk.roa
File: SZEozlJJdchkVyVyv4cRolVc9Hk.roa (raw, json)
Hash identifier: 4ckUHtHoQ2dMbOy6vVwoPySt3zdkRGvcDq1WZbwsYaY=
Subject key identifier: 49:91:28:CE:52:49:75:C8:64:57:25:72:BF:87:11:A2:55:5C:F4:79
Certificate issuer: /CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Certificate serial: 067C
Authority key identifier: E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/SZEozlJJdchkVyVyv4cRolVc9Hk.roa
Signing time: Wed 13 Apr 2022 09:41:12 +0000
ROA not before: Wed 13 Apr 2022 09:41:12 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 4515
IP address blocks: 123.49.237.0/24 maxlen: 24
123.49.242.0/24 maxlen: 24
123.49.246.0/24 maxlen: 24
123.49.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1660 (0x67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Validity
Not Before: Apr 13 09:41:12 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=499128CE524975C864572572BF8711A2555CF479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:ec:fb:b9:86:d9:4d:e2:16:11:75:cb:39:
88:65:17:5e:cd:47:de:dc:fd:cd:95:d5:0e:f8:b6:
f1:dd:a5:f7:a6:79:e0:a7:24:99:d0:dc:c9:d8:e5:
53:6b:67:39:8f:ce:f7:6e:0b:e8:54:8f:37:02:26:
50:a4:f0:27:ab:4f:31:91:56:22:b0:40:a7:f6:06:
28:78:08:42:3e:93:c3:9c:95:6a:ff:8f:d7:78:52:
2c:b3:74:a4:c9:ab:39:82:65:b0:ca:91:77:9d:df:
49:ff:83:35:d7:4a:5a:83:07:bd:f3:e1:78:30:ae:
ff:1a:6f:bb:7b:8d:a7:ec:c5:e4:b7:00:32:66:cc:
72:c5:89:a1:d1:d1:08:21:fd:4f:6c:fa:03:28:86:
de:4e:7d:c5:74:26:72:5f:b3:34:35:a3:be:bd:d7:
da:51:d2:c2:cb:31:6c:28:0e:e2:ca:06:6b:d2:ff:
38:9a:bd:8a:f2:5e:93:e1:97:8b:ac:4f:a1:e4:38:
52:e9:e9:34:92:32:64:01:23:a2:6f:c2:9a:5b:cc:
1e:e8:65:15:25:81:1e:6e:0f:56:8a:c8:5f:ec:9b:
93:0a:26:36:0f:41:6d:0a:e8:a7:29:6b:df:8c:30:
5c:ed:49:a8:ab:60:d9:19:74:5d:45:74:ef:d4:fc:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:28:CE:52:49:75:C8:64:57:25:72:BF:87:11:A2:55:5C:F4:79
X509v3 Authority Key Identifier:
keyid:E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/SZEozlJJdchkVyVyv4cRolVc9Hk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.237.0/24
123.49.242.0/24
123.49.246.0/23
Signature Algorithm: sha256WithRSAEncryption
31:08:14:58:10:3e:36:ea:3f:0d:46:96:d8:f9:35:15:20:78:
86:c1:a0:20:64:33:67:76:3c:9e:75:c0:95:c5:20:3c:36:dc:
39:de:a2:ab:c7:0a:c0:ae:69:e3:4e:ae:13:00:5e:4a:64:21:
30:c0:a7:7f:66:90:a7:2c:96:56:45:d4:3d:f5:fb:2c:b4:cd:
35:9c:77:10:9d:20:e2:2d:74:25:2b:27:01:9b:7b:63:6d:6a:
2b:0b:83:e1:18:a0:10:eb:1e:bb:cf:08:a0:65:4a:d8:fd:79:
21:88:b9:7b:49:ad:03:41:0e:db:9c:ec:e4:82:20:7e:95:26:
21:1f:a4:60:7b:1c:5b:73:e2:0e:cf:45:71:00:44:fb:dc:11:
0b:54:54:89:ae:f2:d6:87:9c:08:02:31:7d:49:22:53:40:f1:
d8:2f:07:b9:b6:74:d9:08:c5:87:36:17:1f:40:db:0a:62:7a:
85:99:a4:80:5e:82:f2:1f:5a:d3:63:6c:f2:67:a3:2b:12:af:
d7:5d:84:12:dc:0e:99:b6:ea:95:be:78:04:f6:a0:cd:67:68:
ce:30:50:a0:2b:a3:f7:93:a4:be:e0:1b:82:ea:f0:3b:b6:4b:
2f:8d:0e:e2:f6:30:23:12:0d:5a:51:8b:9f:87:28:01:04:bd:
bb:89:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org