Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/H3ZQ6G7PC9bU6fntI6qjVgynOrc.roa
File: H3ZQ6G7PC9bU6fntI6qjVgynOrc.roa (raw, json)
Hash identifier: mtuq4BgEtOYUQpdaXT3Yjjf+rXnf/u2YKPplDLlLdTk=
Subject key identifier: 1F:76:50:E8:6E:CF:0B:D6:D4:E9:F9:ED:23:AA:A3:56:0C:A7:3A:B7
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0319
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/H3ZQ6G7PC9bU6fntI6qjVgynOrc.roa
Signing time: Fri 21 Oct 2022 09:15:36 +0000
ROA not before: Fri 21 Oct 2022 09:15:36 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 34549
IP address blocks: 114.66.140.0/22 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Oct 21 09:15:36 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=1F7650E86ECF0BD6D4E9F9ED23AAA3560CA73AB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:eb:81:ed:d7:dd:56:51:f7:7e:ef:90:05:
e3:7e:c9:8d:c3:8a:a0:ea:9e:3f:da:82:36:ca:17:
3f:d2:e3:6a:03:cf:26:3c:10:75:3c:08:e8:3d:ec:
5f:16:28:44:41:f9:13:0e:4c:17:94:c6:21:f5:40:
9c:18:1c:62:04:08:76:a7:bf:32:23:62:82:40:2d:
02:e8:e4:9c:10:1f:a5:40:7d:d7:a7:a0:0e:29:35:
ac:23:9a:da:95:95:fe:78:42:26:50:de:07:fa:73:
eb:00:ca:b2:fd:0a:ce:f5:35:75:11:77:98:29:64:
e1:4f:ca:b0:b6:02:34:d8:6a:b3:93:b4:de:83:5d:
90:56:63:68:40:3a:e8:93:41:83:62:8d:8d:15:cc:
90:c9:76:59:ae:3a:2b:91:08:e0:aa:07:0b:ab:52:
aa:ab:43:8e:da:4d:34:e1:f0:bf:3a:34:f5:bb:e0:
ce:73:2b:ab:b7:9e:d6:0b:9e:85:13:f9:57:e0:5d:
9c:8f:e7:a7:19:d5:99:e2:e9:32:72:9a:5c:e7:a1:
c8:8e:24:a2:45:29:01:a9:ce:00:cb:e9:d0:8a:1b:
28:1b:f1:93:8e:fb:00:8d:9a:b3:9a:5c:12:d6:3b:
f2:0d:aa:74:b8:5f:47:a3:9c:5e:40:c1:4b:6c:b3:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:76:50:E8:6E:CF:0B:D6:D4:E9:F9:ED:23:AA:A3:56:0C:A7:3A:B7
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/H3ZQ6G7PC9bU6fntI6qjVgynOrc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.140.0-114.66.147.255
114.66.156.0/22
114.66.212.0/22
114.66.224.0/21
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
61:4b:4a:b0:a6:31:95:aa:58:0e:46:de:74:af:a6:ef:e9:6d:
27:08:ce:43:d9:86:4d:73:e1:53:51:5d:9c:25:47:d1:39:7c:
b8:c3:dd:05:50:7e:ff:1d:a4:6f:da:61:2f:1d:96:ec:6a:4d:
05:c7:b4:c0:a6:f9:93:a3:0b:1f:bd:9d:4d:9b:be:1e:64:cf:
28:1a:21:2c:75:93:a2:5c:4f:3a:ce:a2:7b:72:ad:04:a7:1c:
22:6f:5c:84:ce:91:a1:72:21:0b:70:1a:7b:8c:f4:66:a9:16:
1b:08:2c:fa:17:cb:3d:55:78:de:6e:da:aa:b9:06:c6:13:64:
91:75:95:91:88:25:07:e8:f2:2c:97:92:4b:82:49:99:e6:ce:
a7:59:1a:21:8f:86:79:92:62:7c:9d:a9:a2:25:85:09:f2:06:
22:83:5d:82:ee:e0:34:bc:8e:dc:f5:e6:0c:03:ef:90:61:e2:
ab:17:97:82:11:3c:6c:f4:6f:9a:5c:72:26:ad:1c:cc:ca:69:
5b:ca:00:0e:27:30:64:1f:3a:22:f6:3a:95:ee:74:03:a0:38:
f2:17:18:5e:8a:e3:96:51:54:5e:59:f9:da:b4:89:71:bc:c8:
8f:86:b3:6e:3d:8c:3a:96:12:c8:4d:d9:09:c1:c6:5e:95:30:
03:96:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org