Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/WsHe2EOa3l6Kxml9zhLc2yZxWqE.roa
File: WsHe2EOa3l6Kxml9zhLc2yZxWqE.roa (raw, json)
Hash identifier: uwLYmGreEJj/WJylcYsS2jHAdVEpLbUlFHxpluscaPY=
Subject key identifier: 5A:C1:DE:D8:43:9A:DE:5E:8A:C6:69:7D:CE:12:DC:DB:26:71:5A:A1
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1023
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/WsHe2EOa3l6Kxml9zhLc2yZxWqE.roa
Signing time: Fri 19 May 2023 05:54:00 +0000
ROA not before: Fri 19 May 2023 05:54:00 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 38814
IP address blocks: 123.49.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4131 (0x1023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: May 19 05:54:00 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=5AC1DED8439ADE5E8AC6697DCE12DCDB26715AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:48:e8:8e:ae:92:23:84:8e:af:a0:a4:6a:
58:73:6c:f6:92:3a:99:31:d3:c8:3c:84:0c:38:56:
eb:3f:66:d3:98:30:29:27:35:30:94:e1:df:b4:7f:
75:7e:3c:91:0a:94:9f:aa:32:20:20:d3:91:55:f9:
55:fe:c0:57:eb:ef:ea:c8:cb:77:e8:a1:36:2b:ce:
b1:08:27:ba:00:3a:26:87:6c:5c:88:b7:10:96:f6:
17:7b:06:3e:cf:f6:79:d2:e3:7a:db:5e:f6:98:59:
d2:92:00:39:de:d9:ad:0f:75:98:bf:54:7c:95:53:
4b:36:e2:17:a5:72:06:0b:db:ca:95:c5:98:01:7b:
73:e6:19:9d:74:d9:31:a7:e1:09:eb:64:6b:7d:1f:
a8:e5:ee:6d:cd:5a:c9:a4:a2:b2:2a:f0:f2:70:e3:
66:9c:66:95:d1:35:1d:85:65:44:c6:bc:97:30:67:
8e:3a:bd:0f:0d:77:91:80:c2:7f:5b:38:b5:72:09:
21:a1:7b:f2:b1:e5:34:36:b3:36:de:a5:31:97:0d:
54:3b:6c:f0:61:03:8c:d0:73:ac:71:14:f0:b5:44:
64:3c:82:29:75:60:b7:76:10:38:63:4e:8c:50:4e:
a1:c3:6c:2b:e0:f4:83:97:f9:e6:a0:9f:b7:a2:5b:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:DE:D8:43:9A:DE:5E:8A:C6:69:7D:CE:12:DC:DB:26:71:5A:A1
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/WsHe2EOa3l6Kxml9zhLc2yZxWqE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:0c:26:87:45:e3:7f:8f:c2:37:4a:3e:5c:f1:e4:dc:eb:85:
88:4b:5d:b0:08:c9:b3:dc:cc:d2:ae:11:61:86:3c:ca:c6:d0:
f0:52:49:72:72:6a:59:a8:3d:e4:95:be:6b:8e:9a:e9:93:ae:
9e:8a:aa:bc:f3:f7:3a:32:00:cc:dd:94:4d:18:58:e8:7d:26:
63:18:0c:d6:cf:a2:c4:c6:5b:54:6f:82:6b:38:d3:da:e4:56:
8b:c4:24:5b:69:f0:f5:8b:db:40:de:8d:8f:8e:5d:38:06:1b:
ac:fc:5e:7a:1c:cd:7e:b4:d0:ab:dd:bd:91:b0:6c:c0:6e:8c:
62:80:7f:65:b7:3b:a0:a8:9c:25:70:74:1f:42:03:68:1d:c1:
dc:84:f5:72:57:55:fd:0b:2b:23:88:09:37:4c:05:f3:39:dd:
fc:9c:c9:60:24:0f:e0:34:8d:44:ec:c4:07:00:3d:a9:f0:bb:
66:20:57:0d:bf:2e:57:a1:f9:4e:9b:20:78:63:d0:e9:9d:19:
f4:bd:b9:0e:80:d4:05:36:de:67:8a:e3:2d:96:be:11:58:8c:
96:c9:64:7c:27:ae:3e:77:fd:13:66:e2:aa:b6:15:1b:89:17:
ef:b5:47:b7:5b:dd:40:19:91:94:4a:4d:0f:e7:86:af:fc:58:
3b:e4:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org