Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2291/N8Ah9wU8G0IXfIzwP0HsWY9jv1Y.roa
File: N8Ah9wU8G0IXfIzwP0HsWY9jv1Y.roa (raw, json)
Hash identifier: sVg7NuHUkyRx3rCmkvqJ8uz8jK+XIkanWv5bLIcN5Y8=
Subject key identifier: 37:C0:21:F7:05:3C:1B:42:17:7C:8C:F0:3F:41:EC:59:8F:63:BF:56
Certificate issuer: /CN=7CFA334D393BC9150FC273713C1535CD301A741E
Certificate serial: 03
Authority key identifier: 7C:FA:33:4D:39:3B:C9:15:0F:C2:73:71:3C:15:35:CD:30:1A:74:1E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPozTTk7yRUPwnNxPBU1zTAadB4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/N8Ah9wU8G0IXfIzwP0HsWY9jv1Y.roa
Signing time: Wed 03 Mar 2021 08:02:27 +0000
ROA not before: Wed 03 Mar 2021 08:02:27 +0000
ROA not after: Thu 03 Mar 2022 07:56:04 +0000
asID: 133111
IP address blocks: 42.201.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFA334D393BC9150FC273713C1535CD301A741E
Validity
Not Before: Mar 3 08:02:27 2021 GMT
Not After : Mar 3 07:56:04 2022 GMT
Subject: CN=37C021F7053C1B42177C8CF03F41EC598F63BF56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:ce:5b:62:12:9a:37:04:c3:32:d3:32:ce:
27:dd:56:28:82:89:7c:14:01:49:b8:5f:50:f6:21:
7b:7e:34:0d:28:f2:07:dd:91:98:ec:15:8b:88:be:
8d:d5:e1:34:02:eb:d4:fb:ed:4c:6c:55:c6:9d:5a:
03:3c:73:84:8e:0d:af:33:23:97:75:08:89:5a:c4:
41:0e:5a:28:cb:e4:7a:d8:f3:ff:65:1a:9d:73:e2:
2d:4a:b8:7c:9a:45:64:42:a3:8e:ca:a3:6b:e2:fd:
97:75:33:7f:73:43:0e:ad:aa:17:41:2a:14:c9:37:
ec:f9:8d:69:50:fe:d0:0c:e8:4a:16:73:ab:00:4e:
62:74:e0:a9:fb:a7:27:76:81:68:11:62:2f:8b:67:
13:fb:99:a4:e7:78:08:f9:62:83:15:a9:e2:ae:b0:
22:a4:2a:4e:04:ee:5a:38:bf:29:0a:dc:af:1f:a7:
df:8f:86:76:b3:65:b0:d9:74:92:30:5d:81:6f:69:
16:b9:80:74:86:0d:5c:d2:10:cc:29:5c:07:3b:5c:
bd:40:63:74:5a:40:90:ef:27:34:eb:82:36:2a:03:
c9:ce:03:ca:53:23:77:cc:46:8b:15:f3:88:ae:26:
33:8c:eb:d6:85:6d:fe:8d:f7:29:81:94:6d:48:6f:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C0:21:F7:05:3C:1B:42:17:7C:8C:F0:3F:41:EC:59:8F:63:BF:56
X509v3 Authority Key Identifier:
keyid:7C:FA:33:4D:39:3B:C9:15:0F:C2:73:71:3C:15:35:CD:30:1A:74:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/fPozTTk7yRUPwnNxPBU1zTAadB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPozTTk7yRUPwnNxPBU1zTAadB4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/N8Ah9wU8G0IXfIzwP0HsWY9jv1Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.201.32.0/19
Signature Algorithm: sha256WithRSAEncryption
07:60:fa:37:95:4f:a0:c3:0f:c8:d7:08:51:40:49:89:20:74:
d4:18:f9:9b:25:f9:e7:88:89:43:a4:04:e8:87:65:b1:fb:5c:
19:ec:c3:e2:89:20:04:d9:f0:78:b9:58:f0:63:a7:86:1a:de:
10:e2:3e:1a:e7:96:b3:3d:b4:16:d5:9d:c3:cd:99:e3:f5:08:
f2:2d:97:66:84:97:d1:a2:f4:9a:c7:af:95:a6:c2:34:f1:23:
46:80:d1:70:3f:33:13:a3:4a:09:f0:7a:e5:82:05:8d:01:cc:
e2:9c:33:ff:2e:d3:5a:42:9a:bb:eb:78:ae:f8:6c:cc:35:97:
6f:2a:bc:45:43:21:33:31:0c:58:51:90:f6:cc:44:31:ce:6c:
fd:cb:4b:ea:41:6b:a1:71:5f:39:a6:c6:54:f4:9d:4a:79:a4:
34:40:b9:79:bb:a5:f9:fb:37:be:a7:70:ef:e0:2a:04:b9:f0:
ba:cc:a2:30:20:e4:41:de:77:2c:6f:6e:65:93:23:0b:44:15:
00:9e:87:7f:d7:d3:0e:41:9d:22:d9:d2:65:8a:90:2c:56:28:
05:be:80:ad:4a:6b:c4:6f:58:c0:53:f2:15:04:7e:0e:ec:db:
40:8d:ef:4e:81:94:3e:4b:c9:43:2a:97:1a:ee:61:54:e1:42:
b3:86:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org