Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2154/JoyZSaQOT3RGrD47Do5oZX4RpRw.roa
File: JoyZSaQOT3RGrD47Do5oZX4RpRw.roa (raw, json)
Hash identifier: Y4klJgWS6yOZoxZBktzl/rPrA4dckGjI24fnaKT8ybE=
Subject key identifier: 26:8C:99:49:A4:0E:4F:74:46:AC:3E:3B:0E:8E:68:65:7E:11:A5:1C
Certificate issuer: /CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Certificate serial: 4E
Authority key identifier: E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/JoyZSaQOT3RGrD47Do5oZX4RpRw.roa
Signing time: Mon 05 Aug 2024 06:37:41 +0000
ROA not before: Mon 05 Aug 2024 06:37:41 +0000
ROA not after: Tue 22 Jul 2025 06:31:48 +0000
asID: 63631
IP address blocks: 119.161.136.0/21 maxlen: 24
119.161.138.0/24 maxlen: 24
119.161.144.0/21 maxlen: 24
119.161.152.0/21 maxlen: 24
119.161.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E502DE2C6086A66284B80CDB7B5AC0C12CC3F3C2
Validity
Not Before: Aug 5 06:37:41 2024 GMT
Not After : Jul 22 06:31:48 2025 GMT
Subject: CN=268C9949A40E4F7446AC3E3B0E8E68657E11A51C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:3d:fd:78:15:c4:50:4a:f7:49:b1:bb:bb:
2b:8a:ba:bb:02:7d:5b:15:25:af:31:f4:26:65:7c:
55:41:82:8e:2e:d6:ce:9a:1c:2c:66:9d:e5:eb:17:
e0:fa:02:7d:00:2f:b4:7d:f6:b6:5b:0d:5f:f7:ec:
34:66:b4:d9:35:ea:b2:3c:9b:f5:58:ab:90:9b:7a:
33:bf:66:c7:75:71:37:d0:fb:b0:fb:b1:71:09:20:
40:07:ff:b4:4a:4b:40:a8:c1:41:25:84:9f:6f:a9:
75:81:c8:f3:dd:1a:dd:18:c7:a5:f7:03:8a:65:73:
a3:3d:82:c4:87:fa:2c:15:f3:0d:99:fe:ed:35:49:
3b:8d:03:96:c9:ba:9b:29:35:aa:67:0d:d4:c7:bb:
0a:80:60:1c:6b:32:c0:68:f0:31:2b:a6:b1:90:96:
e8:73:cb:b7:a7:8c:eb:7d:5d:83:f5:88:60:3f:7d:
3b:da:1a:91:ce:fb:d9:48:79:46:50:de:eb:0b:6d:
d4:de:20:17:9b:4e:3a:d5:df:bd:2c:cd:df:0d:aa:
77:af:fd:19:e5:2f:60:33:f3:f5:48:d5:c2:ff:df:
83:22:ea:13:93:a1:8d:23:06:53:a1:1a:df:76:18:
f1:88:18:09:82:83:39:1b:78:20:e0:ef:ea:b6:cf:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8C:99:49:A4:0E:4F:74:46:AC:3E:3B:0E:8E:68:65:7E:11:A5:1C
X509v3 Authority Key Identifier:
keyid:E5:02:DE:2C:60:86:A6:62:84:B8:0C:DB:7B:5A:C0:C1:2C:C3:F3:C2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/5QLeLGCGpmKEuAzbe1rAwSzD88I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5QLeLGCGpmKEuAzbe1rAwSzD88I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2154/JoyZSaQOT3RGrD47Do5oZX4RpRw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.161.136.0-119.161.167.255
Signature Algorithm: sha256WithRSAEncryption
2b:59:3c:f9:a2:6f:2b:08:ed:a2:d1:c5:5e:86:3f:69:e7:c4:
6a:5a:5d:d1:c6:a0:fa:1e:0e:32:98:32:e9:7e:33:7c:6c:95:
28:49:a7:ad:27:5a:33:3f:81:2d:40:ec:5e:97:29:c7:4b:cd:
fd:b0:f7:4f:79:a1:be:b2:20:d6:30:c1:bb:ab:fa:54:5d:5b:
24:3f:45:eb:3a:4b:aa:2e:d8:d8:84:34:07:86:5a:1b:44:9f:
df:e7:12:2a:7b:f4:c1:11:8e:1d:c1:f5:5a:5d:65:b9:25:2a:
dc:84:05:88:59:12:14:90:6e:da:2e:4f:fc:ed:08:89:36:c3:
14:a0:ac:23:0e:8c:44:d1:65:06:69:2a:34:aa:f6:25:e8:00:
29:af:6b:d2:a9:cb:0c:14:93:24:8b:73:1b:77:e1:97:08:45:
2f:8b:5b:43:3f:e7:75:4f:a9:a8:12:69:10:b8:60:f0:76:41:
c7:6a:88:1f:2e:54:93:02:ff:fb:cb:d5:9b:da:f6:5f:4c:64:
b1:44:f3:1e:b4:e4:e8:81:93:79:0c:90:fa:f4:0f:91:b8:11:
54:59:40:33:ed:1c:4b:34:18:44:ac:97:9f:62:e1:9d:c6:73:
d0:10:17:29:63:c4:e2:d4:0f:e6:91:46:3a:00:e2:12:02:db:
21:e3:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 13:32:52 2024 by rpki-client on console-fra.rpki-client.org