Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/cRhqWkXHiLNYJHgTT4j1hZ3tU6k.roa
File: cRhqWkXHiLNYJHgTT4j1hZ3tU6k.roa (raw, json)
Hash identifier: xZ3+/pnu1Nu1AEuDQZj0Wlv9XyCHS/l/AUSTU3NzANU=
Subject key identifier: 71:18:6A:5A:45:C7:88:B3:58:24:78:13:4F:88:F5:85:9D:ED:53:A9
Certificate issuer: /CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Certificate serial: 0676
Authority key identifier: E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/cRhqWkXHiLNYJHgTT4j1hZ3tU6k.roa
Signing time: Wed 13 Apr 2022 08:38:58 +0000
ROA not before: Wed 13 Apr 2022 08:38:58 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 38814
IP address blocks: 123.49.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E441F2CCF2E5D3EB1637EEF8EE803CB53DD1EAFE
Validity
Not Before: Apr 13 08:38:58 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=71186A5A45C788B3582478134F88F5859DED53A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:2c:47:f1:c5:ed:4a:00:ee:47:40:82:43:
78:3f:23:59:94:bc:23:35:a6:4e:47:42:e2:0b:5c:
83:7c:2f:e8:6d:4f:7a:91:49:91:84:79:4b:20:4c:
a0:78:fa:e7:c4:ec:d1:96:59:05:f1:36:40:70:ef:
db:86:db:b6:85:62:f5:bd:2e:d6:fa:c3:a6:4f:6d:
1e:b9:b4:98:c8:78:e8:5b:da:c4:22:75:17:12:2d:
7c:b8:e3:8d:bd:07:1c:34:82:65:11:52:38:32:e5:
17:87:ad:bf:38:b4:5a:6c:c6:81:8f:19:f0:d7:57:
7a:20:cf:54:0f:19:14:29:c5:92:f4:67:e2:76:72:
96:75:5e:64:12:7b:fe:21:06:ee:03:18:6d:eb:92:
ae:04:ad:90:e6:44:40:ec:4c:19:8b:b0:8f:39:73:
7d:9c:77:4e:0b:a2:b1:dc:b3:0f:af:cf:67:0a:89:
89:28:57:9e:14:69:24:57:5b:f8:67:75:87:66:5a:
1a:cf:5e:1a:31:2f:45:e8:00:eb:67:70:bb:8a:7b:
77:d4:74:58:89:73:dd:62:43:8c:e9:4b:e0:df:f7:
0e:89:e8:07:d4:b0:79:14:93:b4:59:82:6a:f1:13:
d0:ef:3c:b4:62:58:cb:83:91:07:c1:d9:72:08:cc:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:18:6A:5A:45:C7:88:B3:58:24:78:13:4F:88:F5:85:9D:ED:53:A9
X509v3 Authority Key Identifier:
keyid:E4:41:F2:CC:F2:E5:D3:EB:16:37:EE:F8:EE:80:3C:B5:3D:D1:EA:FE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/5EHyzPLl0-sWN-747oA8tT3R6v4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5EHyzPLl0-sWN-747oA8tT3R6v4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/cRhqWkXHiLNYJHgTT4j1hZ3tU6k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.245.0/24
Signature Algorithm: sha256WithRSAEncryption
60:cc:c3:6b:b7:dd:2d:6f:c4:bd:c9:44:67:67:4f:85:37:f5:
47:1d:75:14:40:44:f4:19:1a:5c:92:eb:4a:4e:f7:51:ee:3c:
25:44:90:cc:7c:0a:3a:4c:82:3b:ed:53:2e:d0:7e:33:ea:3b:
15:33:fb:fa:b7:c9:33:5d:7c:45:ff:d2:bd:14:46:6f:7d:4f:
d4:49:3a:04:03:43:ef:db:8d:f4:7a:56:d4:76:8b:4c:a4:7c:
70:cb:f8:88:6a:92:e9:89:6c:38:78:72:63:75:49:4c:f5:d8:
0d:a3:b4:16:dd:bd:92:94:c7:b6:75:4d:ef:1c:c5:98:68:2c:
67:84:58:51:be:51:73:5d:6c:88:be:61:57:29:19:f2:d2:12:
5a:77:12:9b:e9:a3:fe:ca:dc:6d:48:97:1d:34:1a:6e:5e:26:
d1:c3:10:53:93:60:8f:a7:fc:8f:b1:f7:11:1f:2d:38:a7:f3:
a5:97:aa:30:30:79:87:9c:a2:7b:89:da:fa:65:ee:18:5a:2e:
c5:74:69:e8:e2:4f:09:db:74:27:33:91:13:63:44:ea:2a:ac:
4b:28:b6:21:d5:d5:b4:70:34:2e:84:95:a5:e4:de:ca:4d:f1:
dd:59:3d:04:15:af:a8:09:bd:27:5b:ef:87:8f:6e:f3:d8:7d:
03:61:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org