Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2291/ctsGiwZ0T0tTClIkLja_nwV6kyQ.roa
File: ctsGiwZ0T0tTClIkLja_nwV6kyQ.roa (raw, json)
Hash identifier: K82ENi8YxcigcKj+ZZVLL7i3EOdjd2yDWeV7Y5GAG68=
Subject key identifier: 72:DB:06:8B:06:74:4F:4B:53:0A:52:24:2E:36:BF:9F:05:7A:93:24
Certificate issuer: /CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53
Certificate serial: 11BB
Authority key identifier: E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/ctsGiwZ0T0tTClIkLja_nwV6kyQ.roa
Signing time: Fri 19 May 2023 05:54:49 +0000
ROA not before: Fri 19 May 2023 05:54:49 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 133111
IP address blocks: 42.201.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4539 (0x11bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E82287BB56FAC8E6753ABDE36B3B6A939CB59A53
Validity
Not Before: May 19 05:54:49 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=72DB068B06744F4B530A52242E36BF9F057A9324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:c7:a9:69:37:bf:df:f9:56:46:2f:d7:65:
f1:d1:92:0d:ad:76:14:99:f8:58:1b:c2:a5:5f:d2:
b4:2d:5d:91:0e:94:37:c1:81:db:5b:d9:27:fa:4d:
94:cc:ef:da:ea:2b:f3:97:94:01:87:cf:9d:0c:63:
ba:86:cd:25:84:8a:be:9c:db:b9:4a:b0:ef:85:7c:
15:d1:f4:b4:fd:fc:60:a5:2a:27:a6:01:47:a4:bd:
83:b9:59:7d:10:2e:fc:60:66:45:3e:05:5a:0c:b8:
e5:8c:ac:b9:25:0b:86:05:73:94:0e:60:38:e2:fc:
c0:cf:79:87:9d:51:f8:50:cc:6d:f2:59:a7:76:4c:
6d:6a:8f:59:c3:69:98:6a:01:7b:f1:23:a5:f3:f3:
ca:34:ea:21:94:76:96:a1:98:46:37:68:05:7f:7f:
78:3e:36:72:d7:40:32:df:1f:ad:87:40:b1:f4:a1:
71:b6:4a:43:db:15:e3:ee:fb:9c:33:7c:ce:45:11:
d2:48:0d:60:a7:5a:71:90:96:0a:72:bd:c3:97:ee:
2a:10:91:db:d0:3e:8a:0b:4a:e0:6b:72:b5:d9:c8:
0e:f8:7c:da:58:e6:ed:52:a8:06:f9:ec:52:27:09:
6b:37:29:bd:22:95:a2:ac:84:16:23:35:e0:f3:ce:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DB:06:8B:06:74:4F:4B:53:0A:52:24:2E:36:BF:9F:05:7A:93:24
X509v3 Authority Key Identifier:
keyid:E8:22:87:BB:56:FA:C8:E6:75:3A:BD:E3:6B:3B:6A:93:9C:B5:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/6CKHu1b6yOZ1Or3jaztqk5y1mlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6CKHu1b6yOZ1Or3jaztqk5y1mlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/ctsGiwZ0T0tTClIkLja_nwV6kyQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.201.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:7f:7c:46:e1:8e:29:c2:55:2a:45:05:27:75:9b:9a:63:f0:
c0:60:c3:fb:c9:48:3f:6f:a4:ad:e5:f7:1f:f7:00:cc:16:28:
46:29:27:79:d1:eb:cc:c1:d8:c5:ae:43:23:d8:1a:ac:a4:e9:
dc:94:9f:24:f6:42:a4:fe:6c:6c:5e:36:09:5d:cb:27:57:72:
3b:44:41:21:ad:ac:fa:58:99:5f:b4:ea:fb:56:84:58:54:c1:
26:51:8d:4b:26:cc:93:0e:6b:93:d4:8f:36:35:9c:d6:8d:95:
70:f9:b2:c4:35:39:1d:d1:7b:ea:d6:23:b0:83:d4:6c:f0:7d:
96:c0:cb:b4:8b:04:f6:45:22:da:75:eb:63:1f:a5:15:20:ec:
88:fa:94:a0:b2:b0:4c:30:06:81:09:2b:31:da:bb:e8:cb:df:
12:55:3e:ef:b3:95:74:4e:db:33:dd:60:d0:04:a4:4a:d7:71:
d1:e4:84:4d:4b:60:45:16:43:56:34:9f:f4:c2:f2:9a:53:9f:
5d:70:e8:fc:51:7f:a1:08:84:d4:07:5f:c6:43:7e:57:ee:48:
c1:e9:b4:0d:73:65:e5:55:f2:40:d6:9d:31:a7:9f:61:dd:b8:
64:91:4e:fc:2b:20:40:67:25:0f:ce:c8:a5:86:05:bf:f0:5a:
d4:30:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org