Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/bRGVeAuO4kagll_SDShCfAG0m8g.roa
File: bRGVeAuO4kagll_SDShCfAG0m8g.roa (raw, json)
Hash identifier: tSWw3tWeU/gNuMweBaA+5ieYX+u/qB68bq4yGG2GquI=
Subject key identifier: 6D:11:95:78:0B:8E:E2:46:A0:96:5F:D2:0D:28:42:7C:01:B4:9B:C8
Certificate issuer: /CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Certificate serial: 0654
Authority key identifier: E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/bRGVeAuO4kagll_SDShCfAG0m8g.roa
Signing time: Fri 08 Apr 2022 08:36:49 +0000
ROA not before: Fri 08 Apr 2022 08:36:49 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63641
IP address blocks: 123.49.237.0/24 maxlen: 24
123.49.242.0/24 maxlen: 24
123.49.245.0/24 maxlen: 24
123.49.246.0/24 maxlen: 24
123.49.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Validity
Not Before: Apr 8 08:36:49 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=6D1195780B8EE246A0965FD20D28427C01B49BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:11:73:51:11:a1:1e:98:33:cb:c3:ed:03:
92:7a:83:4f:77:5e:90:9d:38:1e:9a:87:92:4d:ba:
e5:1e:85:de:ae:0b:2e:db:b0:cb:f2:f3:9d:33:ed:
a3:50:8b:d9:85:42:50:0f:39:b0:71:1c:92:80:e9:
6e:94:fc:eb:3c:36:ca:e8:9b:f7:84:9d:56:b2:a7:
b7:e2:1e:f2:63:58:e7:da:c4:0e:d0:0e:e6:c5:de:
f3:29:29:55:08:28:47:cc:02:9e:b1:06:bc:6a:f2:
86:b1:c6:2f:29:16:cd:38:a5:01:3a:88:14:12:e9:
eb:f9:fe:5e:b8:81:ed:13:51:73:01:c3:e4:82:d8:
17:f5:6d:e9:06:0a:0a:e7:90:d3:cc:ee:0a:77:73:
13:7b:dc:01:eb:81:98:d7:81:a4:8c:c5:e8:02:4a:
6b:16:2f:e6:b5:98:5b:a9:15:c4:a7:87:81:01:a8:
59:bd:6d:6c:3b:0d:e4:cd:92:8c:20:16:7d:04:dd:
17:07:d0:ed:70:1e:76:29:7c:dd:a8:56:27:cb:4f:
ea:4d:5d:de:79:dd:b0:91:7b:6a:1d:00:4b:16:4c:
a4:51:10:dd:39:01:07:35:f5:31:14:f1:c7:75:bd:
6f:75:33:31:ae:dc:26:d4:32:3f:93:58:5b:c8:fd:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:95:78:0B:8E:E2:46:A0:96:5F:D2:0D:28:42:7C:01:B4:9B:C8
X509v3 Authority Key Identifier:
keyid:E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/bRGVeAuO4kagll_SDShCfAG0m8g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.237.0/24
123.49.242.0/24
123.49.245.0-123.49.247.255
Signature Algorithm: sha256WithRSAEncryption
7c:40:42:1b:f0:cf:74:41:e3:0f:2b:42:2e:31:26:19:87:71:
61:95:05:b4:6a:7f:e9:87:e1:00:13:ab:07:63:39:ca:5c:f6:
c2:3c:a3:50:81:ba:38:42:ad:fd:ab:5f:12:89:14:aa:d5:d5:
de:0a:5f:de:67:d8:48:08:1f:85:4d:3c:71:f8:d8:d4:02:08:
04:8c:24:5b:1a:09:2b:6a:a1:60:ce:85:94:0e:b9:19:1d:12:
62:6d:57:3e:39:53:ab:c8:96:4b:66:2f:d3:d7:91:8c:6e:1d:
c3:1d:c9:44:11:70:ee:d2:18:5b:b9:36:fb:83:3b:3f:6b:19:
31:d7:09:61:27:e7:90:df:68:a2:8f:45:27:8b:41:7a:22:cf:
a0:b3:dd:0d:b1:4d:a0:47:67:11:e5:98:c7:71:32:8a:36:ea:
07:8b:63:58:47:86:cd:36:d1:0c:40:13:0c:64:0f:d2:58:bc:
7a:9e:c9:b5:82:ff:af:ea:02:cc:18:ad:19:cc:cf:bd:ee:ac:
fc:59:e3:6d:b0:4d:e6:8f:a9:b9:de:0a:0d:34:5a:94:95:39:
48:d7:ab:e3:b2:df:3d:7c:25:49:86:f6:ea:48:a7:fb:fe:4a:
56:16:ac:20:f8:15:d1:38:c4:4b:33:fc:7c:ea:a1:e6:64:f4:
b9:e6:72:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org