Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/5yBnFLR6PzS7IiV5koTdJrkGJBA.roa
File: 5yBnFLR6PzS7IiV5koTdJrkGJBA.roa (raw, json)
Hash identifier: 5NpxTTcpduCv3/J+nDdxy+tLAckwa+oSfxov9KHupRU=
Subject key identifier: E7:20:67:14:B4:7A:3F:34:BB:22:25:79:92:84:DD:26:B9:06:24:10
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 04A5
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/5yBnFLR6PzS7IiV5koTdJrkGJBA.roa
Signing time: Sat 07 Jan 2023 01:53:20 +0000
ROA not before: Sat 07 Jan 2023 01:53:20 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 57844
IP address blocks: 218.98.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jan 7 01:53:20 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=E7206714B47A3F34BB2225799284DD26B9062410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:a1:e0:01:24:80:0a:c0:6e:78:1a:6a:dc:
0a:cf:ff:cc:0c:87:69:6e:60:d7:ca:39:26:30:9a:
37:59:68:ac:c5:46:6b:d8:ba:c1:99:8a:18:89:6f:
38:ab:10:7c:0b:ea:54:86:04:c1:23:a4:d9:a4:34:
29:2b:de:9a:fe:ea:6a:6a:84:25:3c:fe:b2:99:59:
bb:f4:99:9d:9e:82:7e:36:58:fa:62:c4:d3:3e:8f:
a2:69:d1:81:db:bf:20:e8:f8:4d:b2:b0:cb:79:68:
7f:c2:00:35:92:31:0e:0f:b8:b5:7d:34:74:56:86:
03:5c:b0:4d:a8:4a:06:19:22:b5:b2:33:87:f0:9c:
5b:17:f0:8c:85:d8:12:72:b1:57:ce:a4:17:8d:9f:
f7:9d:b6:fd:d3:14:44:1b:08:6e:ca:d2:9a:33:82:
d3:ac:41:9a:03:7e:f7:f3:18:e9:30:71:73:d4:29:
ee:53:36:51:64:8a:4f:50:21:61:77:e8:4c:7c:1e:
73:d2:81:d5:02:0e:99:86:7b:60:f3:4e:4d:a8:76:
63:0c:0b:03:21:9b:7e:e8:e4:76:e5:92:53:bb:1c:
b2:83:5d:16:e8:e4:c4:04:cc:b2:e5:ae:da:a5:63:
ca:14:36:ed:07:88:ea:8a:3e:e2:4d:3b:21:0f:9e:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:20:67:14:B4:7A:3F:34:BB:22:25:79:92:84:DD:26:B9:06:24:10
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/5yBnFLR6PzS7IiV5koTdJrkGJBA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.98.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:35:0c:8a:23:07:80:9e:69:aa:91:d8:c0:74:4f:64:f6:77:
c2:42:11:3d:16:0b:b9:a1:2a:8c:9c:04:2a:eb:bc:03:b7:01:
80:85:c9:e3:52:33:0c:57:87:9f:84:6e:e6:4b:6d:3e:30:6f:
93:1a:5d:2e:cd:8c:93:45:c5:e3:f3:6c:34:2c:43:51:36:eb:
26:f1:5a:e8:5f:b3:77:42:78:2c:eb:33:60:af:bc:ee:83:8c:
5e:f6:e6:ff:fc:03:36:a9:e7:dd:ee:1a:e4:51:e8:89:9c:83:
70:c8:12:de:89:f7:a8:ea:12:7c:99:ed:25:ad:3d:89:9b:48:
30:63:23:b8:47:d2:1f:05:e0:b1:7d:4e:06:b9:c9:19:47:b2:
da:29:2b:8d:7b:49:01:ed:e3:1a:20:fe:9c:33:a2:37:b4:5c:
fe:21:fa:27:10:17:59:ca:31:4c:5f:6d:24:2a:5b:d2:7d:9b:
0d:82:2b:a9:f5:2e:f1:36:b7:24:d9:9d:68:4a:d2:4b:48:09:
0a:87:67:33:4d:1f:e5:a2:75:58:d3:52:c3:de:71:60:ae:41:
0f:06:97:72:9e:1b:df:36:85:4a:d3:ef:fb:73:a6:ac:6d:9d:
86:d8:41:df:c3:7c:6e:d7:4b:84:f4:16:ad:c1:b5:67:f8:ca:
88:21:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org