Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2291/VAaXp7D8Ngf7JWkTn_k75qOukpc.roa
File: VAaXp7D8Ngf7JWkTn_k75qOukpc.roa (raw, json)
Hash identifier: 6W71iaykBzwsw/zGZwagun/BvE2vd/ND4/PoeqHTP9I=
Subject key identifier: 54:06:97:A7:B0:FC:36:07:FB:25:69:13:9F:F9:3B:E6:A3:AE:92:97
Certificate issuer: /CN=7CFA334D393BC9150FC273713C1535CD301A741E
Certificate serial: 06FA
Authority key identifier: 7C:FA:33:4D:39:3B:C9:15:0F:C2:73:71:3C:15:35:CD:30:1A:74:1E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPozTTk7yRUPwnNxPBU1zTAadB4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/VAaXp7D8Ngf7JWkTn_k75qOukpc.roa
Signing time: Thu 17 Feb 2022 07:56:13 +0000
ROA not before: Thu 17 Feb 2022 07:56:13 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 133111
IP address blocks: 42.201.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786 (0x6fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFA334D393BC9150FC273713C1535CD301A741E
Validity
Not Before: Feb 17 07:56:13 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=540697A7B0FC3607FB2569139FF93BE6A3AE9297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:c0:e3:fd:2a:3d:a4:b7:bc:18:46:8d:55:
5f:0c:9c:79:79:e6:3b:ec:f2:7b:5f:3d:34:c5:00:
c1:e6:35:60:11:8d:76:11:fb:9f:3d:24:1b:b4:70:
29:b3:ed:8e:79:61:c0:2c:a2:af:95:bc:78:6a:ed:
5e:bc:4c:e5:af:eb:56:55:8e:c0:98:d0:38:ad:f5:
b5:c7:aa:05:82:30:37:ff:1a:f0:d5:2e:10:1d:e8:
18:18:f3:2b:57:ca:8b:77:0e:1e:14:a2:19:7b:25:
55:d6:79:73:f1:ca:88:a5:45:fe:61:77:c4:f6:a5:
2d:a0:3b:2a:ca:31:77:9d:48:53:3e:34:3a:2f:85:
79:53:bf:5e:e3:cd:df:be:94:73:e6:ea:10:d8:94:
88:ca:cf:35:b6:9c:6b:ba:06:0f:7e:c9:20:0f:99:
d5:18:2b:46:35:4d:f6:90:7b:11:3f:7a:c3:82:58:
9a:f3:9f:09:92:87:31:6d:56:c3:87:28:5f:f9:fe:
66:eb:0e:34:f3:28:d1:af:d2:ad:e7:0b:f2:b7:32:
15:f6:b1:4c:9a:25:8b:ce:b8:ee:42:d8:40:81:f6:
51:d1:ee:aa:d0:d4:84:7e:65:7e:18:1c:f4:7c:f1:
db:1c:27:11:77:e8:60:14:cb:b5:71:7c:6b:09:e8:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:06:97:A7:B0:FC:36:07:FB:25:69:13:9F:F9:3B:E6:A3:AE:92:97
X509v3 Authority Key Identifier:
keyid:7C:FA:33:4D:39:3B:C9:15:0F:C2:73:71:3C:15:35:CD:30:1A:74:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/fPozTTk7yRUPwnNxPBU1zTAadB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPozTTk7yRUPwnNxPBU1zTAadB4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/VAaXp7D8Ngf7JWkTn_k75qOukpc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.201.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:2d:f6:36:e3:7e:65:64:e4:e8:c0:de:84:dd:02:a9:cc:17:
cf:82:4b:69:39:a4:c8:92:58:1b:ff:b8:5b:dd:34:6a:7a:b8:
ef:ff:ab:ce:a7:c8:e7:ac:5d:3c:86:9f:9e:ef:52:1c:c1:34:
68:97:81:72:81:11:ba:1f:8a:f6:fc:17:c4:6b:00:83:a7:a7:
b3:45:a1:ee:f2:67:6f:12:14:1e:59:04:50:d4:70:83:08:84:
50:0d:c8:66:bd:09:21:b4:68:95:39:4b:af:b5:72:8e:e8:4e:
1b:96:51:4b:ab:5b:91:f9:a4:a9:e2:05:88:55:f4:c4:00:36:
eb:32:34:c8:45:3e:9e:49:91:56:ec:17:59:80:4c:30:54:74:
50:81:e8:f8:7b:f9:ab:98:d5:83:cc:84:43:2c:85:a6:45:0c:
39:fa:22:31:06:ae:8e:2a:c1:8f:34:2c:5a:bf:7a:0a:ac:d6:
b7:73:b3:e0:ff:20:6f:68:62:fa:5c:dd:12:8b:bd:f9:fb:6c:
17:55:85:af:aa:7f:f1:de:e2:ef:10:1f:75:3a:cc:a2:95:a6:
f7:25:47:1c:cd:34:10:29:27:84:74:3d:60:12:7c:b2:fe:a5:
a4:6a:c3:14:b7:51:bf:fa:3e:d7:a8:bc:45:f1:c7:31:c1:47:
7b:0d:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org