Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/LnEuztETvE9IpKZ-skd-r5JpVbg.roa
File: LnEuztETvE9IpKZ-skd-r5JpVbg.roa (raw, json)
Hash identifier: HSj0nMrXHvauW81jE8SaMxHunCAdkJKsWXhG1tL0gXI=
Subject key identifier: 2E:71:2E:CE:D1:13:BC:4F:48:A4:A6:7E:B2:47:7E:AF:92:69:55:B8
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0C6F
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/LnEuztETvE9IpKZ-skd-r5JpVbg.roa
Signing time: Wed 07 Feb 2024 01:30:26 +0000
ROA not before: Wed 07 Feb 2024 01:30:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 34549
IP address blocks: 59.83.136.0/21 maxlen: 24
59.83.240.0/21 maxlen: 24
59.83.240.0/23 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.149.0/24 maxlen: 24
114.66.169.0/24 maxlen: 24
114.66.172.0/22 maxlen: 24
114.66.181.0/24 maxlen: 24
114.66.183.0/24 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.212.0/24 maxlen: 24
114.66.214.0/24 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Feb 7 01:30:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=2E712ECED113BC4F48A4A67EB2477EAF926955B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a4:2e:db:44:06:e8:d4:5c:71:d9:a1:53:c9:
57:c6:96:bb:61:c4:eb:d1:70:08:0b:26:73:0c:47:
af:02:85:f2:80:45:f1:ae:a3:48:14:1a:33:2c:a7:
82:fa:ec:2f:bb:94:5b:2b:a3:b3:6a:c2:c8:06:b4:
c2:95:1b:60:a3:1b:31:54:62:e9:6b:c9:30:a9:4f:
96:82:3b:35:ff:5c:63:5b:8d:e5:a2:23:3f:4e:ac:
d7:62:5c:d8:e8:01:d7:45:9a:df:db:36:b5:bd:af:
98:18:17:c9:b3:1b:a5:1f:7f:86:a4:f2:1d:6b:5a:
c0:4e:e1:e1:87:f5:de:21:f1:15:93:8d:a9:13:f2:
3c:55:3f:bd:13:bf:28:f2:c7:f7:1d:f6:ac:63:41:
b8:d3:b2:03:30:0c:9a:57:ba:cf:96:fb:bd:3c:20:
94:65:56:ce:f9:c5:53:00:1c:f0:69:14:10:ee:1e:
56:ca:2a:2c:44:d2:ed:22:ab:40:a7:71:14:13:e3:
5f:3a:b7:fa:8b:5f:f1:1f:71:0b:eb:ad:69:d1:d5:
e5:38:84:0e:b0:18:4e:c8:54:17:a6:83:16:6a:d9:
bc:55:1b:62:db:f6:51:52:6f:f1:22:df:32:15:45:
63:e7:ab:33:90:af:bc:85:e5:ba:cd:40:45:88:f2:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:71:2E:CE:D1:13:BC:4F:48:A4:A6:7E:B2:47:7E:AF:92:69:55:B8
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/LnEuztETvE9IpKZ-skd-r5JpVbg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.136.0/21
59.83.240.0/21
114.66.144.0/22
114.66.149.0/24
114.66.169.0/24
114.66.172.0/22
114.66.181.0/24
114.66.183.0/24
114.66.212.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
67:69:c8:90:ca:3e:c4:86:17:fd:28:f2:f1:9b:c8:54:c1:4d:
43:45:3f:2f:c4:37:8a:87:13:f5:1d:3b:50:82:45:a6:1c:ac:
33:b7:7d:33:b0:d6:01:6a:5d:b9:79:62:2e:10:2f:ae:66:ec:
7e:a8:25:9a:b7:35:54:39:38:fb:10:bd:5c:c9:28:3e:0f:81:
c9:b4:fd:a2:24:84:b6:a1:d0:3c:10:89:1a:a5:a3:dd:30:ea:
f7:1e:06:12:44:66:b4:e0:60:4e:4b:ec:5f:5f:25:f0:5c:64:
a8:a2:88:a5:a3:9e:59:39:e3:a3:af:f7:87:b9:7c:e8:d9:5f:
84:90:b8:46:83:fa:2c:ca:d8:0e:64:51:a3:31:10:d9:62:2c:
57:3d:6f:1c:98:6b:58:26:4f:97:cb:6d:11:ae:da:65:da:7d:
ea:4c:37:b4:1f:d8:44:74:52:91:c6:cf:34:e5:46:bf:85:5e:
9c:c5:f0:b8:15:70:d0:6d:c2:b0:c4:05:a2:d1:b4:6f:03:05:
2a:1b:da:4b:eb:03:ca:06:8e:1e:23:16:0c:38:3f:dd:1c:05:
ba:67:a1:42:77:a2:ef:80:6c:84:75:15:c9:7a:57:8c:01:bc:
d5:e1:95:41:4b:68:dc:ad:d9:b7:45:a5:bb:77:db:e4:6f:31:
7a:fa:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org