Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/4kTPCJ3JPOBEOYcELDLiakc23XE.roa
File: 4kTPCJ3JPOBEOYcELDLiakc23XE.roa (raw, json)
Hash identifier: 6zKHLLhtk4f6xNmKqwT4dsTmHM5VJ0OyPqHdaLCpeHw=
Subject key identifier: E2:44:CF:08:9D:C9:3C:E0:44:39:87:04:2C:32:E2:6A:47:36:DD:71
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 01E8
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/4kTPCJ3JPOBEOYcELDLiakc23XE.roa
Signing time: Fri 26 Aug 2022 02:31:27 +0000
ROA not before: Fri 26 Aug 2022 02:31:27 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 34549
IP address blocks: 59.83.132.0/22 maxlen: 24
114.66.140.0/22 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.168.0/22 maxlen: 24
114.66.192.0/22 maxlen: 24
114.66.208.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Aug 26 02:31:27 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=E244CF089DC93CE0443987042C32E26A4736DD71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:8b:fd:c6:40:cb:15:97:ab:6e:ac:77:ca:
89:53:6f:57:69:7b:12:58:f7:63:27:13:0b:32:4b:
65:37:7d:1a:ee:fc:fb:d6:f1:7e:c6:5c:90:fe:86:
87:d5:31:88:b7:5b:9d:0f:5d:bd:9c:1a:88:54:ca:
e5:2f:d0:f2:44:a8:3b:a3:6e:cb:35:23:74:68:d4:
81:47:2b:97:65:6c:6c:88:23:12:45:ed:b2:93:72:
4f:ab:f9:fe:d1:c4:22:cb:60:ca:e2:8f:ac:4f:98:
a1:4f:b6:a0:e1:3b:a7:e2:71:60:46:ab:ba:a5:b1:
ff:a6:b2:7c:cf:c4:dd:4c:ae:ed:58:4f:ee:ed:02:
d1:33:b9:e3:24:4d:58:15:dd:f5:1a:ab:97:ea:ad:
2a:f9:d6:d2:2f:85:92:8c:3b:05:ad:02:7d:40:81:
33:3a:7d:dc:d4:36:d3:b9:60:b7:05:43:d7:2f:94:
d3:0e:e3:85:c0:95:8a:ec:4c:d0:65:aa:b0:b7:81:
b6:9b:91:ab:c1:62:ce:0f:6d:5f:d8:b9:56:37:e3:
b3:27:fb:9a:13:f1:59:06:2c:0a:df:c5:53:95:fb:
8f:b6:8b:46:f3:b9:6c:36:b4:5b:18:9f:95:6f:58:
de:61:c1:1b:d8:e6:23:53:16:49:3f:96:fb:9f:53:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:44:CF:08:9D:C9:3C:E0:44:39:87:04:2C:32:E2:6A:47:36:DD:71
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/4kTPCJ3JPOBEOYcELDLiakc23XE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
114.66.140.0-114.66.147.255
114.66.156.0/22
114.66.168.0/22
114.66.192.0/22
114.66.208.0/21
114.66.224.0/21
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
47:39:3c:0f:c9:d8:9d:09:72:76:b9:8e:0c:f3:c2:8c:43:09:
33:d3:62:aa:ff:a9:0a:0f:0c:48:6e:95:fc:8a:f9:25:8b:25:
95:06:12:0f:b8:19:34:88:db:e7:64:8d:c8:97:86:2e:f7:0e:
13:25:ea:0a:a5:0e:a4:cc:12:f6:f2:c6:e7:81:96:3d:bb:e8:
9c:69:80:ed:a1:31:be:6f:87:e6:79:c1:90:78:4a:5e:ac:3f:
3c:31:be:1c:9a:87:29:86:e4:6b:0b:e9:b4:cb:e9:2d:38:60:
5b:59:2f:7c:81:90:99:5b:5c:24:a5:0f:29:e2:92:60:b5:fa:
ac:3b:59:1a:16:0c:b4:76:54:91:1f:00:f7:d3:76:42:fb:45:
51:cd:97:d5:10:90:08:0c:6e:79:fb:58:6b:13:cd:90:66:f3:
83:8f:9d:70:c3:e9:f6:dc:00:69:c1:d2:9c:48:54:b3:6b:2e:
8d:64:97:97:61:21:06:df:66:f5:8b:21:82:ca:76:b5:cb:51:
53:b4:f7:72:66:e9:ad:ba:78:cb:87:a4:16:46:2c:7c:3a:20:
ef:73:8c:37:aa:68:8a:06:d7:7b:f5:d8:69:7d:15:96:e4:66:
9a:40:5f:48:4a:f7:1b:ec:76:51:6e:3a:c7:98:a3:0b:bf:37:
5d:47:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org