Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/Jpx18zK0t4Xjzf1koVy5KhSzDqI.roa
File: Jpx18zK0t4Xjzf1koVy5KhSzDqI.roa (raw, json)
Hash identifier: U7y1qnYYiblZsO14k3ZiIk+E08FBG0/CMqv2Cc97j00=
Subject key identifier: 26:9C:75:F3:32:B4:B7:85:E3:CD:FD:64:A1:5C:B9:2A:14:B3:0E:A2
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 02DF
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/Jpx18zK0t4Xjzf1koVy5KhSzDqI.roa
Signing time: Wed 12 Oct 2022 02:27:28 +0000
ROA not before: Wed 12 Oct 2022 02:27:28 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 34549
IP address blocks: 59.83.132.0/22 maxlen: 24
114.66.140.0/22 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
218.98.69.0/24 maxlen: 24
218.98.70.0/24 maxlen: 24
218.98.71.0/24 maxlen: 24
218.98.72.0/24 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 735 (0x2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Oct 12 02:27:28 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=269C75F332B4B785E3CDFD64A15CB92A14B30EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:7c:68:ee:c8:5b:02:85:97:44:f8:ad:bb:
66:00:fe:b3:dd:c1:69:f4:54:f2:ee:6f:21:68:01:
77:1f:f8:6c:c7:1f:6d:fe:33:c1:40:1e:9d:e6:59:
d5:44:49:b1:a4:40:a2:2d:92:8c:3d:7e:57:81:37:
ac:fa:a1:18:66:19:ca:01:c5:66:23:56:d4:41:61:
4c:c6:d9:42:45:84:72:6e:07:d4:18:98:a7:e8:0e:
80:00:d1:a2:ae:ed:fd:8a:ff:81:48:49:d7:bf:58:
7f:32:34:fa:80:fa:df:b0:82:94:f7:95:00:6e:8c:
65:25:ed:a3:a7:c0:6b:b3:33:cd:c4:53:23:fc:97:
3a:3e:3d:fc:66:2e:17:cd:2e:af:f4:6e:81:5f:75:
2f:84:43:73:cc:08:5e:e8:26:4d:8f:76:57:78:95:
87:8e:59:45:35:e8:bc:6a:49:9d:14:8b:e1:15:00:
6d:a3:43:d0:65:2a:3c:c7:e4:19:76:4b:0f:8e:b5:
57:f4:50:a5:5b:d7:00:a7:59:50:80:7b:2a:e5:5d:
d9:f9:96:9f:52:23:38:e4:6f:45:96:16:3c:b1:c0:
bf:72:f7:48:31:08:bb:1d:cb:51:62:82:1b:57:65:
0c:4a:91:de:d6:8d:f9:7c:85:df:7e:95:68:ac:33:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9C:75:F3:32:B4:B7:85:E3:CD:FD:64:A1:5C:B9:2A:14:B3:0E:A2
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/Jpx18zK0t4Xjzf1koVy5KhSzDqI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
114.66.140.0-114.66.147.255
114.66.156.0/22
114.66.212.0/22
114.66.224.0/21
218.98.69.0-218.98.72.255
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:00:0e:ff:74:9e:2b:7e:33:35:d9:c6:c9:82:7d:fa:e3:ad:
7e:be:ca:52:63:a0:fa:ca:84:b4:e9:3f:2e:69:11:9b:83:91:
01:f0:8f:f1:b5:7f:b0:c6:ab:62:18:e2:1b:2c:74:c6:03:9c:
6d:a4:c5:1d:db:f6:a0:83:b1:e3:fe:49:bd:4b:30:73:63:d3:
54:e0:8f:7d:8f:35:49:94:f1:3f:e3:63:4e:8b:9d:df:08:49:
3e:65:df:ef:bc:b7:96:22:c3:ea:07:22:a4:b2:f7:54:c4:78:
61:dd:8c:88:1b:c3:3b:ee:a5:2a:0b:1c:1f:7d:67:e5:1c:5a:
40:4a:71:ec:52:4b:73:18:11:fc:92:07:4a:9f:8c:d4:62:c2:
66:c6:3a:c8:f2:12:50:65:da:0f:09:a9:44:48:19:4e:a3:17:
f0:ea:b4:cd:78:f8:2e:b5:4f:d9:3e:f7:9c:a6:9e:4b:f7:4d:
c7:86:a9:a2:40:11:57:10:e3:e0:56:41:30:fa:39:65:38:bc:
71:d4:69:00:c5:11:91:72:49:80:1b:a5:e3:1c:d0:0b:01:f7:
2f:44:56:93:9b:f3:37:12:ab:2a:59:43:3d:dd:f1:e2:15:c6:
e5:9e:48:28:86:27:45:ce:b2:86:88:d1:aa:0b:4d:f5:3f:bb:
98:53:80:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org