Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/NKyF4zYd2Ovz4rtyV2zx3lUIJZo.roa
File: NKyF4zYd2Ovz4rtyV2zx3lUIJZo.roa (raw, json)
Hash identifier: oDZbZEoPsIZzNtE1CEOq7Gs8yBKunMc9PoyFeLOhZwQ=
Subject key identifier: 34:AC:85:E3:36:1D:D8:EB:F3:E2:BB:72:57:6C:F1:DE:55:08:25:9A
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 03
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/NKyF4zYd2Ovz4rtyV2zx3lUIJZo.roa
Signing time: Wed 01 Jun 2022 07:10:41 +0000
ROA not before: Wed 01 Jun 2022 07:10:41 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 141373
IP address blocks: 59.83.132.0/22 maxlen: 24
59.83.176.0/22 maxlen: 24
218.98.74.0/24 maxlen: 24
218.98.75.0/24 maxlen: 24
218.98.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jun 1 07:10:41 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=34AC85E3361DD8EBF3E2BB72576CF1DE5508259A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:4f:26:63:92:ae:47:ea:3a:33:d0:cc:60:
c6:c7:01:a1:eb:96:d1:18:45:fd:a2:55:b4:9e:0b:
b1:be:ac:68:72:d2:27:f2:8c:f9:75:e6:e8:07:4c:
ed:d2:f1:03:7b:07:14:75:76:c0:9b:ff:70:97:22:
6d:db:b5:a5:28:ef:6b:f1:bb:d1:ff:21:18:c9:b0:
57:e2:e5:d9:ac:5b:96:cc:56:ee:47:35:6a:39:3c:
8f:7b:4d:ec:2b:e6:3a:c9:e0:66:1d:65:b1:20:8f:
2c:69:65:a6:92:81:81:63:c5:34:1e:dc:d2:85:39:
43:a2:0a:a9:dc:c4:dc:73:55:9c:db:a1:46:e5:73:
df:e3:73:8e:46:a1:d0:df:b9:88:a2:a8:87:9b:57:
bf:67:11:64:04:fd:34:0f:57:da:08:18:e6:66:54:
c5:be:c8:42:cd:72:bf:6b:2e:6a:87:5b:32:df:fe:
85:79:e6:e0:ba:93:ab:f6:3e:40:c6:48:12:c6:ea:
3a:91:30:54:7f:d9:ee:b3:9d:05:fa:00:03:33:4e:
b3:fb:97:2d:05:c9:0c:13:94:f9:ce:2e:e8:a1:33:
d3:1b:52:75:03:86:b8:86:9b:ed:48:8d:60:9d:5f:
e9:5f:95:1b:2e:48:69:52:d3:32:37:20:38:ca:16:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AC:85:E3:36:1D:D8:EB:F3:E2:BB:72:57:6C:F1:DE:55:08:25:9A
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/NKyF4zYd2Ovz4rtyV2zx3lUIJZo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
59.83.176.0/22
218.98.74.0-218.98.76.255
Signature Algorithm: sha256WithRSAEncryption
92:ca:51:c3:cb:5d:c5:27:04:51:e8:66:c8:0f:75:da:b2:e9:
a1:b5:01:05:cf:bd:31:66:a7:58:04:ee:4a:63:be:f4:0f:8f:
2f:e7:74:d4:00:2a:1c:ec:8c:3f:ab:a1:59:9f:f0:55:ff:6d:
8b:21:b5:9f:e9:4e:6b:36:d6:9a:5b:ae:39:8e:81:a1:35:cf:
81:c2:17:a1:9f:25:bf:55:da:1b:0b:da:b9:7d:46:7f:1c:97:
20:1c:2a:63:0b:5f:5b:9b:43:04:ac:b6:32:1e:b9:7e:9d:cf:
fd:1f:5d:b8:3c:9b:ba:ee:95:97:fb:a1:6b:5c:88:c0:0e:ba:
10:e5:a1:af:33:fe:e8:91:53:15:44:26:d2:22:5d:e1:e6:ec:
28:17:bb:07:4f:05:3b:42:83:c7:d9:bf:01:4e:bb:f4:74:cc:
4a:4a:cb:17:26:2c:8d:a2:54:26:7d:a2:c6:bf:5d:8a:9a:b8:
68:2d:b5:b7:d7:3c:6f:dc:64:0f:1c:6a:a2:ba:1f:4b:34:19:
3d:70:ba:5b:4f:e1:a1:96:d6:ec:84:f4:4a:83:0a:07:87:67:
3f:a6:ad:d8:10:eb:41:30:5f:b7:47:51:42:2f:03:85:ef:3d:
8e:3d:54:f4:5f:b3:f4:e8:34:1a:ad:40:ca:3a:58:81:17:81:
cf:8d:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org