Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/DbbKXfWfbuxaBr8kdNywEUrTjPc.roa
File: DbbKXfWfbuxaBr8kdNywEUrTjPc.roa (raw, json)
Hash identifier: w4isqdlefcYeGVtKRElnPr5+l7FUUYl8x+QVMpdp30I=
Subject key identifier: 0D:B6:CA:5D:F5:9F:6E:EC:5A:06:BF:24:74:DC:B0:11:4A:D3:8C:F7
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 06
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/DbbKXfWfbuxaBr8kdNywEUrTjPc.roa
Signing time: Wed 01 Jun 2022 07:10:42 +0000
ROA not before: Wed 01 Jun 2022 07:10:42 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 57844
IP address blocks: 218.98.85.0/24 maxlen: 24
218.98.86.0/24 maxlen: 24
218.98.87.0/24 maxlen: 24
218.98.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jun 1 07:10:42 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=0DB6CA5DF59F6EEC5A06BF2474DCB0114AD38CF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:c6:8f:44:98:6a:62:97:f7:df:49:23:74:
76:52:76:8e:81:3e:e5:2c:dd:73:aa:02:bc:fd:1b:
a0:5c:29:20:3c:88:50:79:6d:45:1b:d4:9a:3f:79:
6e:ed:f4:92:82:92:54:d8:f5:3a:67:fc:5a:73:5f:
25:91:cb:f9:d8:e8:c1:2c:06:68:c1:e6:3e:08:d2:
8a:b9:75:9b:e4:5d:0a:f8:fe:c8:7d:2d:0c:29:ba:
0b:8f:a6:6e:64:f5:fd:fb:6d:3d:b2:fd:08:a9:eb:
a0:bd:45:3d:97:df:0e:6e:5d:b8:f5:fc:23:e2:5f:
06:e2:32:e2:5c:b4:bb:56:93:9a:4f:73:3a:5a:9d:
b5:e6:cb:f2:96:0b:e4:e3:52:33:7f:a9:f0:4d:f2:
31:1f:ea:4b:cc:ca:bd:74:f5:38:0b:57:12:48:06:
d3:40:ba:69:94:38:3d:92:9a:dd:9d:96:20:9b:86:
2a:7e:04:c8:6c:e5:2d:2e:2e:e3:23:ab:43:f5:86:
1d:ec:c2:1e:7b:e7:0e:b2:33:dd:92:b5:3d:5b:36:
fc:20:5a:0b:1d:52:94:3a:20:27:d9:cb:d7:3d:de:
db:92:75:0f:d5:59:00:bc:ce:52:40:38:b1:69:1b:
82:56:4f:00:7c:82:80:24:75:fb:e1:29:b3:85:52:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:CA:5D:F5:9F:6E:EC:5A:06:BF:24:74:DC:B0:11:4A:D3:8C:F7
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/DbbKXfWfbuxaBr8kdNywEUrTjPc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.98.85.0-218.98.88.255
Signature Algorithm: sha256WithRSAEncryption
72:5e:00:25:d9:6a:2b:cb:c4:82:d0:27:a9:2c:0d:c9:62:3b:
47:dc:35:ca:1e:33:b0:2a:2b:9f:ae:c4:a1:76:b9:89:20:96:
bc:b3:01:53:db:7e:9b:9d:88:d9:65:70:67:ff:aa:87:f9:b8:
57:d4:72:d5:71:ae:fe:6b:f5:d4:42:51:ac:ca:53:1c:0d:6d:
5a:e9:69:7f:0e:c1:7b:7c:d4:b1:bd:0f:eb:c4:ae:27:2f:c8:
a5:16:be:8b:35:8d:8c:be:35:f1:86:ac:3a:8e:51:67:7e:72:
dd:4d:29:21:3c:83:0f:f5:c2:30:46:97:86:6a:48:72:6c:8e:
f0:cb:b9:a1:9a:12:c4:24:43:b6:93:71:9b:51:f7:ec:24:a6:
f1:6c:5c:3c:ae:ca:74:56:77:64:76:d8:2e:4b:c2:c8:d0:8d:
ca:d2:eb:29:30:1e:46:ea:02:c2:03:5e:0b:8b:3d:2b:2d:16:
d6:3d:b4:3d:1a:eb:d5:ae:08:22:5d:66:57:dd:de:8c:ed:e3:
4d:9a:2f:86:6e:fa:2a:08:17:6a:d9:c7:c3:97:a0:d9:6e:34:
cf:87:ae:15:30:46:f7:0e:08:6d:02:b8:ad:61:b1:7b:e0:34:
b8:0e:cc:b0:3c:f7:12:71:71:d3:5c:72:a5:8a:2a:df:ac:fe:
98:58:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org