Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/8iCKQoMV68zd-_ygld8AUHFbUCI.roa
File: 8iCKQoMV68zd-_ygld8AUHFbUCI.roa (raw, json)
Hash identifier: GXjKHG1e21kcknZ5+/0Lr4VtSs57VEmZ5iAL8SaFPbY=
Subject key identifier: F2:20:8A:42:83:15:EB:CC:DD:FB:FC:A0:95:DF:00:50:71:5B:50:22
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0A97
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/8iCKQoMV68zd-_ygld8AUHFbUCI.roa
Signing time: Sat 04 Nov 2023 03:48:37 +0000
ROA not before: Sat 04 Nov 2023 03:48:37 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 34549
IP address blocks: 59.83.136.0/21 maxlen: 24
59.83.240.0/21 maxlen: 24
114.66.149.0/24 maxlen: 24
114.66.169.0/24 maxlen: 24
114.66.181.0/24 maxlen: 24
114.66.183.0/24 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.212.0/24 maxlen: 24
114.66.214.0/24 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Nov 4 03:48:37 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=F2208A428315EBCCDDFBFCA095DF0050715B5022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:fa:51:bf:33:12:5c:38:12:57:5e:e4:bf:
5a:06:37:69:09:4c:74:6c:28:64:53:7d:13:b1:d4:
96:7a:18:cf:1d:25:c3:a0:12:95:75:98:37:1a:2e:
5d:3d:0c:f8:56:77:52:3e:01:b0:04:bc:4c:b8:8c:
fe:fd:cb:e7:81:98:db:51:33:ff:c3:aa:ec:45:07:
e1:81:a8:17:52:92:df:23:01:ca:b0:55:ed:27:90:
e1:79:12:c0:2d:1b:c0:b8:5b:7b:00:67:16:30:29:
e9:71:04:7d:8e:97:57:fb:58:4e:d2:9c:4a:40:d8:
38:7d:5a:55:a6:60:26:4f:a5:54:e2:ae:25:bc:96:
33:65:05:6f:ac:42:20:26:2f:2e:45:d3:68:5a:aa:
36:91:38:e5:a4:15:17:21:95:d5:19:e7:03:5b:88:
a5:95:3e:b1:04:36:19:b9:e1:e5:7c:e5:74:e2:08:
c0:94:c0:36:b4:06:b0:dc:ff:79:7d:60:49:d7:3c:
10:3d:1e:84:7c:fe:9e:84:24:09:71:f7:3d:a4:31:
16:46:78:b9:ab:86:5f:0f:aa:e5:df:a6:54:04:d2:
89:e4:7a:97:8f:73:e1:74:5f:7b:7f:c3:f8:57:21:
37:03:bd:45:03:99:20:ff:d5:5d:3d:d0:a0:c6:3c:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:20:8A:42:83:15:EB:CC:DD:FB:FC:A0:95:DF:00:50:71:5B:50:22
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/8iCKQoMV68zd-_ygld8AUHFbUCI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.136.0/21
59.83.240.0/21
114.66.149.0/24
114.66.169.0/24
114.66.181.0/24
114.66.183.0/24
114.66.212.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:dc:3c:3c:05:00:a5:9f:35:27:84:4b:3b:52:5f:c6:c4:1c:
c8:c4:da:fb:cc:55:5e:cd:28:11:0e:0d:c3:05:6f:3e:fe:25:
21:89:2f:51:dc:2b:f3:58:cd:a8:93:72:64:e7:1f:d1:0e:53:
9c:a7:2e:e3:26:2d:31:5b:a2:be:eb:8f:db:42:1a:52:ca:1f:
4e:30:68:01:b8:77:92:e6:ea:70:61:74:1c:1e:a0:e4:a5:a5:
96:31:78:45:1c:46:d7:fe:b5:4e:64:14:3c:85:85:20:45:99:
f4:b2:36:b3:c7:97:87:5d:2b:14:53:d6:50:ff:63:f8:26:33:
3b:a1:4e:4e:50:ee:4f:1b:76:9b:35:79:ef:c4:eb:da:b7:86:
58:33:ac:8b:75:6f:22:51:b9:00:ba:fb:f7:26:a3:33:e5:b3:
d9:86:c5:fa:cc:17:11:a0:72:08:c4:e1:62:2d:3c:5e:03:fb:
76:b3:71:34:44:a6:f9:5b:d1:65:ab:a7:7f:26:f7:cd:d9:2d:
80:5d:5f:eb:2f:c9:ed:dd:8a:14:ce:50:b2:7f:b8:25:bb:00:
6a:1a:0a:9f:33:fb:07:fd:b5:6e:16:3a:b5:24:57:05:c3:84:
0c:5c:cd:22:ad:61:36:ba:45:19:ea:a3:16:70:a7:52:5d:75:
49:62:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org