Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/KiHZupRcLPGB3eno0XQFgZOMhwg.roa
File: KiHZupRcLPGB3eno0XQFgZOMhwg.roa (raw, json)
Hash identifier: xFD2vfspZNijumzCeX1TBjj5QRlSm4CMXv/KFunmhak=
Subject key identifier: 2A:21:D9:BA:94:5C:2C:F1:81:DD:E9:E8:D1:74:05:81:93:8C:87:08
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 21
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/KiHZupRcLPGB3eno0XQFgZOMhwg.roa
Signing time: Mon 06 Jun 2022 06:03:30 +0000
ROA not before: Mon 06 Jun 2022 06:03:30 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 141373
IP address blocks: 59.83.176.0/22 maxlen: 24
218.98.74.0/24 maxlen: 24
218.98.75.0/24 maxlen: 24
218.98.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jun 6 06:03:30 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=2A21D9BA945C2CF181DDE9E8D1740581938C8708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:bc:ae:b7:2e:79:5a:6d:fc:f1:e5:e2:ec:
90:3e:d1:41:70:95:03:17:d7:b5:a3:8c:83:81:eb:
d1:5a:d3:03:75:24:d4:9b:2d:aa:b3:14:3d:3c:16:
7e:82:b6:a7:43:33:66:2b:a3:32:c5:ee:1e:4f:63:
65:9e:8d:d6:4e:dc:e1:d1:f2:af:da:0f:9c:e9:fa:
f4:71:97:2b:a6:bb:e3:bc:51:b9:6d:26:34:08:51:
e3:a4:ee:d8:60:4b:11:56:40:ec:78:50:49:92:3e:
32:cd:c5:ff:20:47:9b:26:17:e6:3e:3e:da:66:fd:
6a:87:db:34:36:75:e1:0d:e0:fd:34:38:0d:cc:e8:
71:4b:c6:a4:a7:cf:9b:cf:89:71:a2:25:5c:63:41:
84:6a:f2:d6:39:88:ea:cb:77:dd:86:bc:ed:72:7b:
c6:5c:4b:46:79:8f:aa:bb:51:a8:83:b4:08:78:12:
17:19:b4:1b:b0:a2:b3:9f:b1:8e:d2:81:12:5f:23:
19:42:4a:72:6a:bb:09:4d:18:22:ec:a4:58:e0:8f:
19:b3:5a:8d:d1:54:79:16:55:7e:12:1d:80:63:a1:
ae:cc:f4:e4:97:a2:5e:da:d0:91:94:d2:38:98:1c:
fb:20:29:c6:86:aa:16:60:dc:b0:dc:57:86:39:11:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:21:D9:BA:94:5C:2C:F1:81:DD:E9:E8:D1:74:05:81:93:8C:87:08
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/KiHZupRcLPGB3eno0XQFgZOMhwg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.176.0/22
218.98.74.0-218.98.76.255
Signature Algorithm: sha256WithRSAEncryption
26:8b:98:9a:85:fb:4f:ca:82:d1:28:79:72:9f:ba:5c:24:a6:
fe:1f:bf:ac:c1:60:ac:7c:bf:8c:55:c8:97:88:1f:15:6f:c6:
dd:6c:f2:33:7c:fd:17:68:bf:1f:cc:0c:f8:a8:d4:8f:b1:42:
56:cc:40:fa:4e:97:53:66:cc:62:7d:ad:6d:8d:22:48:7d:8e:
e0:c6:0d:a9:28:1c:ad:01:21:cc:81:b8:d4:06:d4:c3:83:75:
64:0e:08:b2:fe:92:fc:10:ae:14:49:23:a0:5c:01:38:d5:e9:
1c:f2:1e:b3:e8:6c:e3:c4:13:88:27:91:fd:72:b4:c4:9f:c1:
91:a2:ec:fc:aa:12:0f:e5:59:c8:da:f0:d7:f8:71:5d:b2:32:
08:c6:9b:ac:20:06:cb:0e:df:1f:10:87:4e:98:fb:8b:d1:45:
42:b9:9b:f2:e7:c4:13:36:5b:72:87:70:27:f3:18:57:22:9c:
85:b0:3b:10:4e:6c:32:48:22:bb:a1:df:14:3b:aa:95:f5:3d:
16:f6:a1:94:df:3c:ff:b0:71:19:67:55:13:ab:f3:1e:15:bf:
3f:80:ea:f8:5e:34:a5:e6:76:6d:3e:53:ad:db:e6:2b:53:b7:
9d:25:54:0a:9f:ae:dd:e8:d8:b6:8c:5b:fd:11:65:90:b5:ab:
78:11:7d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org