Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/QtZQ4JCnvyfcq5MWuMgUwrAKnls.roa
File: QtZQ4JCnvyfcq5MWuMgUwrAKnls.roa (raw, json)
Hash identifier: 6e/Jj3naRKNG/HnCrlxddygzs3IzYcdwHIXucQG6nUA=
Subject key identifier: 42:D6:50:E0:90:A7:BF:27:DC:AB:93:16:B8:C8:14:C2:B0:0A:9E:5B
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 7E
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/QtZQ4JCnvyfcq5MWuMgUwrAKnls.roa
Signing time: Thu 23 Jun 2022 08:12:13 +0000
ROA not before: Thu 23 Jun 2022 08:12:13 +0000
ROA not after: Fri 09 Jun 2023 06:51:49 +0000
asID: 34549
IP address blocks: 59.83.132.0/22 maxlen: 24
114.66.128.0/20 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.148.0/22 maxlen: 24
114.66.152.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.160.0/20 maxlen: 24
114.66.176.0/22 maxlen: 24
114.66.180.0/22 maxlen: 24
114.66.184.0/22 maxlen: 24
114.66.208.0/22 maxlen: 24
114.66.216.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jun 23 08:12:13 2022 GMT
Not After : Jun 9 06:51:49 2023 GMT
Subject: CN=42D650E090A7BF27DCAB9316B8C814C2B00A9E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:64:1f:de:7c:e0:f3:dd:fc:69:ee:aa:e6:
87:9e:f2:c8:f6:9f:49:2f:24:ca:4c:16:f9:99:46:
c9:cb:65:69:f4:a8:70:c5:80:93:a7:f6:5f:aa:00:
d7:9e:36:23:5c:66:96:4d:24:1a:bd:84:86:01:44:
98:2b:1b:59:87:fb:af:3c:12:03:a9:99:72:5e:85:
60:80:13:e9:29:5e:4e:57:32:3f:f5:17:54:7e:d2:
a2:e8:ec:99:f1:93:f1:99:29:b7:e9:52:ff:f5:d6:
74:6e:fd:4e:45:35:6c:d9:90:37:d0:49:42:87:41:
de:a1:1c:62:72:e3:cd:ac:7f:56:bb:01:b9:76:40:
20:ef:20:7d:c7:b6:ff:96:bc:95:e3:a6:dd:38:b4:
7b:82:76:8b:89:10:f8:04:da:1c:4e:f0:71:ad:cc:
29:bb:6f:49:fa:fb:43:59:49:07:22:f2:75:76:6a:
76:ab:8a:50:c5:3e:15:04:76:4b:3e:9a:54:b7:2a:
87:dd:fe:22:59:c3:c6:90:cd:26:60:68:42:5e:c8:
8f:3b:43:9c:23:8b:4b:4d:5f:7c:63:ea:83:51:21:
f4:ec:16:22:db:35:6e:bd:9e:fe:7a:80:29:c4:39:
5d:34:f0:d9:a1:62:c3:ba:d5:a3:da:96:fa:ba:dd:
93:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D6:50:E0:90:A7:BF:27:DC:AB:93:16:B8:C8:14:C2:B0:0A:9E:5B
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/QtZQ4JCnvyfcq5MWuMgUwrAKnls.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
114.66.128.0-114.66.187.255
114.66.208.0/22
114.66.216.0/22
114.66.224.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:02:8d:f4:31:c9:00:f6:ec:ec:56:44:3a:43:68:c2:12:f4:
ed:0c:3d:db:0c:5b:18:58:86:75:8f:71:5d:f0:4b:b0:e5:27:
25:34:9c:28:dd:69:a0:85:fe:4a:84:78:51:cc:8f:71:fc:8a:
69:2b:19:8d:5f:cc:81:6c:01:4b:33:7d:26:85:e5:2f:de:f2:
40:00:35:cf:50:e9:91:f1:91:58:44:21:19:92:36:3e:80:03:
d1:d6:4e:6a:94:ac:10:d1:06:a1:72:20:01:11:5c:f5:ed:4f:
40:e1:22:87:2e:be:64:df:f2:45:5c:26:31:14:b9:17:6b:4e:
e4:8a:d4:73:5e:ee:09:6a:29:04:01:17:8f:21:0d:27:71:42:
64:e2:2c:7a:8c:25:bd:5f:a4:d8:34:a9:c3:79:b8:83:13:f7:
fe:7f:88:49:fa:fb:72:9b:1c:ad:20:87:18:46:00:c4:53:49:
19:e5:bd:81:7c:1d:29:1d:2b:a3:83:d6:64:13:51:0b:86:61:
11:cd:d2:4c:47:6f:bf:b8:43:3f:75:97:58:17:e7:f4:f4:52:
b9:c1:c7:9b:d6:bd:da:91:59:82:e8:64:dd:a5:23:4d:f3:a7:
c5:d7:12:b4:d8:b0:4b:bf:59:9a:00:66:e0:17:40:d0:33:fa:
1b:1b:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org