Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/CIXOfEZmOMaENdQdr4-280Y7spk.roa
File: CIXOfEZmOMaENdQdr4-280Y7spk.roa (raw, json)
Hash identifier: mroB3bYQsad6FOjezDPuKUjqRNa8M3je4ErBqhgbnXA=
Subject key identifier: 08:85:CE:7C:46:66:38:C6:84:35:D4:1D:AF:8F:B6:F3:46:3B:B2:99
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 010D
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/CIXOfEZmOMaENdQdr4-280Y7spk.roa
Signing time: Tue 19 Jul 2022 02:54:51 +0000
ROA not before: Tue 19 Jul 2022 02:54:51 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 34549
IP address blocks: 59.83.132.0/22 maxlen: 24
114.66.140.0/22 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.148.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.168.0/22 maxlen: 24
114.66.176.0/22 maxlen: 24
114.66.180.0/22 maxlen: 24
114.66.184.0/22 maxlen: 24
114.66.208.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.216.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jul 19 02:54:51 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=0885CE7C466638C68435D41DAF8FB6F3463BB299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:60:10:1f:32:9d:d9:0c:ab:7e:50:2e:6a:2c:
f6:5f:f4:ab:92:93:b5:fc:58:f5:62:70:60:83:37:
7a:a5:bc:46:1f:17:56:d4:90:9f:be:d4:a9:c5:84:
63:08:70:27:12:14:81:63:f5:bb:8a:81:07:c4:25:
7b:4a:94:d4:53:e3:93:fb:25:fb:3b:7c:ca:e8:85:
f6:92:bf:e3:e0:ea:3c:db:ba:df:83:92:a1:2d:77:
34:3b:c0:9a:7e:84:37:6c:19:92:70:29:e7:d9:7e:
1f:d1:98:08:2b:d4:bc:c0:5d:00:9d:cd:3e:fa:19:
4c:84:ad:80:06:13:88:05:44:ea:87:c1:57:1a:bb:
4a:77:81:20:8d:c7:64:81:26:53:c6:34:91:5e:63:
c8:ca:5b:4b:c8:49:b5:dc:36:59:d4:de:99:59:0a:
b7:59:fe:f2:31:53:ab:af:f1:f8:46:ad:6b:41:2d:
63:7d:d8:ec:4b:7e:98:48:9c:ca:6e:bc:09:0f:47:
9f:37:72:d1:a7:b7:ea:98:6b:c9:fa:9f:e7:1b:11:
e3:0b:d3:c7:3e:da:f4:2b:56:da:79:ff:db:80:03:
31:25:d5:ed:67:57:aa:d7:52:60:24:54:f1:7f:22:
fc:4a:79:e0:21:26:a3:1a:93:6d:6c:d2:74:9f:f1:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:85:CE:7C:46:66:38:C6:84:35:D4:1D:AF:8F:B6:F3:46:3B:B2:99
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/CIXOfEZmOMaENdQdr4-280Y7spk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
114.66.140.0-114.66.151.255
114.66.156.0/22
114.66.168.0/22
114.66.176.0-114.66.187.255
114.66.208.0-114.66.219.255
114.66.224.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:54:eb:1b:ff:90:32:fc:68:c5:6b:f5:42:69:b6:11:8a:94:
5e:f1:2b:5c:5c:fe:50:4b:b4:8f:37:08:d7:8e:fb:ba:3f:1a:
0c:70:84:cd:62:b4:ac:1c:b9:cb:54:b0:57:b1:15:fe:35:b8:
17:28:08:75:e9:de:bf:45:3f:0b:f7:f6:d6:70:29:f2:da:32:
db:49:bd:d1:2d:27:43:68:21:20:ef:b0:9d:c7:ec:9e:6b:55:
a0:3b:e0:2f:dd:9d:00:df:02:0f:a4:c5:91:35:99:64:05:9b:
4c:2f:48:dd:a7:b6:58:ad:bf:c2:59:c9:76:fc:53:ee:9f:4c:
be:4b:af:3f:35:78:21:dd:b6:6e:5b:ec:7e:6b:27:77:5c:4f:
43:0b:cf:23:54:c4:d2:74:a3:59:32:74:aa:a1:68:cf:d6:1f:
a2:80:a0:c6:6e:3d:73:2b:e9:5c:b7:54:a7:b3:0f:eb:5c:5c:
3e:fd:35:d2:0a:aa:81:f8:e1:ff:73:57:0d:8f:a0:72:c0:eb:
46:46:0f:60:ce:ed:55:d6:e1:06:9d:79:48:3f:76:b0:a9:46:
8f:2b:be:01:96:97:f4:8f:65:5f:44:cc:bf:1b:23:8d:e7:a8:
25:41:69:05:0d:15:85:32:f1:69:a8:13:14:90:b2:f6:b2:96:
ca:cc:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org