Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/490Orobwd64rVqeN5ULinG0cnG8.roa
File: 490Orobwd64rVqeN5ULinG0cnG8.roa (raw, json)
Hash identifier: SqMCscrdbIaqfG7oYnSA5KkVN2BO+swosEbzUtdBkWQ=
Subject key identifier: E3:DD:0E:AE:86:F0:77:AE:2B:56:A7:8D:E5:42:E2:9C:6D:1C:9C:6F
Certificate issuer: /CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Certificate serial: 09A7
Authority key identifier: 98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/490Orobwd64rVqeN5ULinG0cnG8.roa
Signing time: Wed 11 May 2022 02:20:45 +0000
ROA not before: Wed 11 May 2022 02:20:45 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 57844
IP address blocks: 218.98.85.0/24 maxlen: 24
218.98.86.0/24 maxlen: 24
218.98.87.0/24 maxlen: 24
218.98.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2471 (0x9a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Validity
Not Before: May 11 02:20:45 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=E3DD0EAE86F077AE2B56A78DE542E29C6D1C9C6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:fe:01:7b:36:fd:7f:79:96:99:97:02:dd:
48:1e:96:f7:2b:04:8c:d8:69:75:41:9a:29:11:77:
58:9b:83:f7:30:84:f2:36:38:8b:1a:7e:6a:c5:78:
13:90:48:52:42:dd:bc:67:07:be:95:89:21:aa:94:
d0:95:ad:d7:7f:d0:a2:25:4c:98:f6:4a:30:9e:23:
e1:68:a5:2f:d9:01:b7:17:4e:04:15:ec:76:35:53:
75:9b:fc:41:d5:9a:3a:e0:d5:e6:ba:e5:6a:8a:6a:
df:90:4e:95:90:d8:43:3b:47:f2:47:3b:dc:89:50:
c1:a8:4d:7a:19:bb:cf:f0:9f:29:c6:bc:90:ff:17:
62:56:ee:4d:69:7c:4b:8c:37:e9:b6:c6:ba:0b:38:
c3:04:2c:31:ab:ba:64:62:d1:35:72:b6:7f:7d:9b:
80:e4:85:2d:47:25:57:f5:c6:81:4c:9f:b2:5b:e9:
20:d2:95:20:60:3d:71:b0:a7:f0:fe:87:c9:12:9f:
08:bb:b1:79:a1:51:32:e8:da:13:30:3f:b6:c3:a4:
d0:10:65:ad:a9:0d:3f:9e:ad:57:f9:bc:84:a4:b1:
a8:0b:2d:8c:2e:f9:ed:ef:52:06:89:2f:7f:8a:49:
c5:70:fc:25:e7:f6:02:43:7a:7d:5e:d7:fc:2b:c6:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DD:0E:AE:86:F0:77:AE:2B:56:A7:8D:E5:42:E2:9C:6D:1C:9C:6F
X509v3 Authority Key Identifier:
keyid:98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/490Orobwd64rVqeN5ULinG0cnG8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.98.85.0-218.98.88.255
Signature Algorithm: sha256WithRSAEncryption
7f:43:29:31:ca:ef:a8:62:59:c3:4f:97:83:7f:ef:82:9d:6c:
14:7d:c0:64:50:19:d6:40:17:d8:30:41:b2:29:fb:7b:a0:04:
6f:32:5e:e7:c6:0d:29:d9:1b:c7:86:b2:64:e9:b5:e0:99:ba:
0c:e1:58:0e:e7:78:7f:17:6d:ce:be:b6:ee:86:a7:5a:2b:78:
90:92:78:08:e1:86:c5:38:dd:93:1c:75:c3:55:e3:5e:a6:08:
a4:fa:75:f6:f5:90:d3:d6:2d:ac:86:03:10:cc:68:78:01:49:
5e:a6:d7:ef:70:6e:37:68:27:8f:8c:94:13:99:fa:df:e7:58:
af:21:c0:d9:43:3b:52:01:a8:97:4d:99:f2:71:f6:67:76:81:
a7:0e:f3:4e:96:5d:50:84:63:d2:11:1b:4a:6d:55:4d:cb:a8:
07:c3:4e:82:45:06:d0:68:64:cd:64:d0:bc:0f:ff:9e:f5:fa:
a2:2a:75:1b:ab:40:75:d3:e1:ef:ac:17:ea:55:2a:b4:88:d1:
41:a4:00:e8:55:30:57:ca:72:d4:c2:17:b4:f7:f7:0d:c5:2b:
d6:2c:d3:17:a1:88:bb:b2:f9:ad:c6:75:39:09:af:01:41:e5:
4a:e0:5c:34:fd:c2:e6:81:15:d4:1e:d7:b9:d4:98:fa:89:15:
4e:1e:1c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org