Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/g1SKmxOAn-s495v_h2v2PCCHzjc.roa
File: g1SKmxOAn-s495v_h2v2PCCHzjc.roa (raw, json)
Hash identifier: RzNLVkAQs0wEr5sWA4aOZU2CpuBT4XCOoh6SnkyeAJk=
Subject key identifier: 83:54:8A:9B:13:80:9F:EB:38:F7:9B:FF:87:6B:F6:3C:20:87:CE:37
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1024
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/g1SKmxOAn-s495v_h2v2PCCHzjc.roa
Signing time: Fri 19 May 2023 05:54:01 +0000
ROA not before: Fri 19 May 2023 05:54:01 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 4515
IP address blocks: 123.49.237.0/24 maxlen: 24
123.49.242.0/24 maxlen: 24
123.49.246.0/24 maxlen: 24
123.49.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4132 (0x1024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: May 19 05:54:01 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=83548A9B13809FEB38F79BFF876BF63C2087CE37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:79:97:2d:e5:d5:53:88:c5:3d:e3:fb:31:
df:55:96:fa:ac:b5:b8:45:2b:f8:dd:b7:66:73:56:
2e:bf:43:a3:54:b5:4a:9c:dc:be:d6:5e:a2:49:85:
59:03:3e:90:ed:ef:fc:f0:19:e0:20:e7:f9:7e:46:
49:05:75:b6:86:5d:74:c6:89:58:80:e4:3c:4b:bf:
62:4c:b2:09:d1:5b:69:a3:a8:19:13:b4:c0:6a:3b:
7c:50:c4:84:42:3c:07:74:da:35:db:ec:cf:f5:e4:
98:bf:b8:a4:8d:10:2e:d2:c0:8e:91:cb:5f:be:83:
0f:28:b1:aa:ff:d5:20:c1:71:7e:0f:f2:a7:4f:be:
33:9b:62:7b:4e:09:2d:d3:87:b5:ba:27:68:8a:01:
0e:6d:ad:5c:b9:62:b3:5c:68:de:af:a9:03:de:ae:
33:47:f5:46:6c:5e:e9:38:14:ae:ca:81:59:5f:77:
d1:32:e6:74:b3:a4:86:0b:93:a4:e0:07:87:39:97:
60:af:20:b7:cd:e0:0d:95:09:b0:b7:f7:6f:0a:7b:
3a:07:5c:bf:8d:09:95:78:c7:6f:7a:8d:59:cb:6f:
89:14:b5:3a:46:5f:03:e7:6c:80:2d:7c:b1:81:d7:
76:a5:06:dd:96:66:ae:59:fb:4e:49:3b:6e:9b:59:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:54:8A:9B:13:80:9F:EB:38:F7:9B:FF:87:6B:F6:3C:20:87:CE:37
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/g1SKmxOAn-s495v_h2v2PCCHzjc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.237.0/24
123.49.242.0/24
123.49.246.0/23
Signature Algorithm: sha256WithRSAEncryption
91:91:2f:d7:50:14:c0:79:8a:bc:b8:5e:ef:ff:24:96:bb:99:
c2:32:8f:df:d4:37:25:52:ec:63:68:7f:26:69:bd:03:9c:6a:
7e:9d:bd:7a:7c:24:ad:fe:24:95:b4:26:5a:92:0c:9b:4a:a3:
de:0e:5c:e2:96:bf:ab:f1:98:aa:aa:42:3c:7d:68:60:eb:a7:
e8:0d:d6:77:91:c0:d1:b2:2c:a2:cd:e1:08:74:64:8f:f2:91:
48:74:75:cb:31:4a:62:06:fd:d3:44:8b:35:d5:18:67:33:d3:
56:d0:b3:b2:b9:58:02:83:42:c6:c7:29:be:2f:81:6d:a8:3a:
4e:5d:b2:6d:b8:46:f0:54:0b:6c:f8:f3:6e:1b:d8:f1:56:b1:
f2:e8:01:ad:ee:31:51:94:42:f7:c1:0a:99:98:15:9a:41:2f:
dc:a5:fa:2a:f5:55:55:65:33:7e:70:d9:2d:1b:8d:61:e0:77:
3b:73:cb:f6:6c:86:93:23:ab:4a:3f:5d:73:03:da:92:45:e4:
e6:c5:3b:c6:e0:1a:48:2d:0b:28:0b:90:a8:19:cd:6c:7a:42:
fe:f7:1e:17:76:09:fc:be:ad:1a:0d:1f:99:2d:f1:fa:ca:f4:
e0:bf:cf:1f:71:a4:9d:7b:11:e9:3d:36:b6:1a:ce:e5:67:56:
68:88:e3:e1
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgICECQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODg4
ODRENEQ0QTc1RjE3RjA4REQ0NENCQTk1OTJGRTcwRjUzOUQ5NzAeFw0yMzA1MTkw
NTU0MDFaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDgzNTQ4QTlCMTM4MDlG
RUIzOEY3OUJGRjg3NkJGNjNDMjA4N0NFMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCobnmXLeXVU4jFPeP7Md9VlvqstbhFK/jdt2ZzVi6/Q6NUtUqc
3L7WXqJJhVkDPpDt7/zwGeAg5/l+RkkFdbaGXXTGiViA5DxLv2JMsgnRW2mjqBkT
tMBqO3xQxIRCPAd02jXb7M/15Ji/uKSNEC7SwI6Ry1++gw8osar/1SDBcX4P8qdP
vjObYntOCS3Th7W6J2iKAQ5trVy5YrNcaN6vqQPerjNH9UZsXuk4FK7KgVlfd9Ey
5nSzpIYLk6TgB4c5l2CvILfN4A2VCbC3928KezoHXL+NCZV4x296jVnLb4kUtTpG
XwPnbIAtfLGB13alBt2WZq5Z+05JO26bWf5zAgMBAAGjggH/MIIB+zAdBgNVHQ4E
FgQUg1SKmxOAn+s495v/h2v2PCCHzjcwHwYDVR0jBBgwFoAUiIhNTUp18X8I3UTL
qVkv5w9TnZcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjEy
Mi9pSWhOVFVwMThYOEkzVVRMcVZrdjV3OVRuWmMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2lJaE5UVXAxOFg4STNVVExxVmt2NXc5VG5aYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIxMjIvZzFTS214T0FuLXM0
OTV2X2gydjJQQ0NIempjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEw
EgMEAHsx7QMEAHsx8gMEAXsx9jANBgkqhkiG9w0BAQsFAAOCAQEAkZEv11AUwHmK
vLhe7/8klruZwjKP39Q3JVLsY2h/Jmm9A5xqfp29enwkrf4klbQmWpIMm0qj3g5c
4pa/q/GYqqpCPH1oYOun6A3Wd5HA0bIsos3hCHRkj/KRSHR1yzFKYgb900SLNdUY
ZzPTVtCzsrlYAoNCxscpvi+Bbag6Tl2ybbhG8FQLbPjzbhvY8Vax8ugBre4xUZRC
98EKmZgVmkEv3KX6KvVVVWUzfnDZLRuNYeB3O3PL9myGkyOrSj9dcwPakkXk5sU7
xuAaSC0LKAuQqBnNbHpC/vceF3YJ/L6tGg0fmS3x+sr04L/PH3GknXsR6T02thrO
5WdWaIjj4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org