Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2122/h8B3x0Thcr5aS9U6b1BHvFFVatA.roa
File: h8B3x0Thcr5aS9U6b1BHvFFVatA.roa (raw, json)
Hash identifier: dc1pBj0Yz9WDc/RFREpZka8gc6xelep/YbQ4PG6bwww=
Subject key identifier: 87:C0:77:C7:44:E1:72:BE:5A:4B:D5:3A:6F:50:47:BC:51:55:6A:D0
Certificate issuer: /CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Certificate serial: 1025
Authority key identifier: 88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/h8B3x0Thcr5aS9U6b1BHvFFVatA.roa
Signing time: Fri 19 May 2023 05:54:02 +0000
ROA not before: Fri 19 May 2023 05:54:02 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 63641
IP address blocks: 123.49.237.0/24 maxlen: 24
123.49.242.0/24 maxlen: 24
123.49.245.0/24 maxlen: 24
123.49.246.0/24 maxlen: 24
123.49.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4133 (0x1025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88884D4D4A75F17F08DD44CBA9592FE70F539D97
Validity
Not Before: May 19 05:54:02 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=87C077C744E172BE5A4BD53A6F5047BC51556AD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:21:05:76:cd:c3:dc:97:bf:02:64:d1:84:
c4:83:c9:64:39:ec:ed:3e:09:1e:e6:c0:01:5c:11:
df:cc:c4:1b:bf:6f:0e:41:d6:8c:05:f6:e9:4c:3b:
12:d1:66:a6:9f:db:b1:a8:2a:0c:20:46:88:b6:a2:
b1:b3:82:22:45:d9:fd:8a:45:0d:ad:84:8c:fd:d0:
d6:cd:91:a4:33:d6:1b:9e:d7:e3:f1:ea:10:4b:df:
40:de:68:70:ea:40:89:33:83:b2:8a:75:3a:41:d2:
b5:22:5f:d7:61:a3:66:25:5c:2f:aa:d4:45:ed:d2:
e8:b2:34:e8:27:f9:bd:e8:20:a0:55:0e:b7:3e:b2:
2e:99:e4:26:39:b6:dc:fc:de:77:6b:01:6c:d3:0d:
82:97:f3:8a:d7:f4:95:5f:b0:44:b1:88:db:ea:38:
75:86:12:da:26:9d:b5:e5:63:26:28:c9:c4:68:e0:
41:09:c7:b6:b9:73:fa:d6:5a:5b:65:9a:81:18:8e:
3f:09:ca:cd:d5:fb:ac:8f:ad:4a:25:39:cf:f2:e8:
f1:13:14:98:24:d3:b9:15:c0:f3:4a:95:38:a8:fe:
b7:86:04:00:b5:21:87:53:00:86:83:14:24:29:81:
af:0e:44:d5:53:ea:29:d4:a7:23:28:2c:82:9c:f4:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C0:77:C7:44:E1:72:BE:5A:4B:D5:3A:6F:50:47:BC:51:55:6A:D0
X509v3 Authority Key Identifier:
keyid:88:88:4D:4D:4A:75:F1:7F:08:DD:44:CB:A9:59:2F:E7:0F:53:9D:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/iIhNTUp18X8I3UTLqVkv5w9TnZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iIhNTUp18X8I3UTLqVkv5w9TnZc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2122/h8B3x0Thcr5aS9U6b1BHvFFVatA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.49.237.0/24
123.49.242.0/24
123.49.245.0-123.49.247.255
Signature Algorithm: sha256WithRSAEncryption
2e:23:af:cc:51:d6:0a:70:47:5c:92:6b:bd:a3:31:ab:fe:74:
0a:00:da:1b:ac:ee:63:2d:42:33:52:a9:e9:fb:c6:28:44:dc:
a6:a5:78:73:11:77:b9:9a:61:ab:02:d3:3a:ae:66:90:fe:83:
b2:41:6d:6d:64:ee:f4:56:37:67:44:7d:04:3d:a6:11:66:11:
6a:6d:ff:56:c5:6c:5b:98:d7:83:b4:34:13:8d:6e:8c:c7:ae:
dd:9c:0e:67:3b:69:1c:cd:ad:89:e8:5b:f0:73:16:49:7f:9d:
74:c3:c2:3a:3b:84:a8:b2:be:f6:ce:04:c1:c3:9b:d9:22:c2:
fd:48:04:0c:7c:04:ee:6a:0c:86:97:41:60:9c:d0:11:ee:83:
b2:f6:5d:15:53:d8:10:1e:db:10:3f:41:e8:7e:b3:c5:a6:39:
a1:58:e5:28:da:81:ff:07:a4:08:6d:3c:46:97:6a:82:f5:eb:
c1:08:a4:c8:ba:a7:7e:ea:17:61:c0:1f:e9:c2:2a:66:4f:f4:
76:58:54:2d:7d:65:07:a0:77:52:0d:95:ba:20:d9:0a:af:9d:
2d:7f:1d:80:62:a1:48:b7:b5:1b:80:0d:4f:df:0b:a3:a0:ad:
4d:54:63:78:d8:c9:f8:f8:d8:a1:99:f5:bf:65:de:63:27:a1:
cf:b9:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org