Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/R4Dfx2MFlG3YKL4qmfMsq0mYDTg.roa
File: R4Dfx2MFlG3YKL4qmfMsq0mYDTg.roa (raw, json)
Hash identifier: XqSa1/OLNu1hntYgNjb1il6IR2jY10ONZnf1eYW3PI0=
Subject key identifier: 47:80:DF:C7:63:05:94:6D:D8:28:BE:2A:99:F3:2C:AB:49:98:0D:38
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0834
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/R4Dfx2MFlG3YKL4qmfMsq0mYDTg.roa
Signing time: Tue 04 Jul 2023 08:56:34 +0000
ROA not before: Tue 04 Jul 2023 08:56:34 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 34549
IP address blocks: 59.83.136.0/21 maxlen: 24
59.83.240.0/21 maxlen: 24
114.66.181.0/24 maxlen: 24
114.66.183.0/24 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.212.0/24 maxlen: 24
114.66.214.0/24 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100 (0x834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jul 4 08:56:34 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=4780DFC76305946DD828BE2A99F32CAB49980D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:a2:99:9c:a2:0f:b6:54:6d:ed:0f:58:69:
ad:95:3d:58:e4:b3:ab:da:d3:c0:98:43:b6:14:ac:
66:73:4b:c8:54:88:63:73:87:77:41:31:56:c3:e0:
7e:f0:8c:66:53:b7:cf:08:85:dc:88:cb:8a:a6:e3:
5f:a8:7a:00:13:20:f8:9a:cb:52:88:4a:47:4c:f7:
35:99:c7:ad:90:77:21:d8:f0:d6:58:94:f1:b5:d2:
4c:52:2d:fd:c3:24:b2:fd:6f:4d:14:3a:b2:52:d8:
3a:68:6b:35:cb:c6:b3:46:17:4d:1e:85:2b:4f:02:
fd:c2:ac:1b:4d:b7:84:84:df:47:c3:ea:b1:eb:8a:
eb:b4:b2:01:10:ca:5f:e0:a1:ab:92:a8:7b:70:74:
15:0a:f1:11:1a:05:44:f1:51:7a:10:6b:b6:04:2c:
17:fc:a9:e2:5d:1f:77:37:96:4f:9e:63:48:42:08:
81:31:42:cb:ee:26:65:2f:46:39:d7:6e:8a:42:16:
90:5a:89:25:95:89:14:90:e0:5e:ab:93:32:d4:26:
af:fe:12:be:d8:1d:6d:43:47:9e:d9:77:3c:62:2b:
c2:69:58:0d:e6:38:1e:9d:80:e2:66:e9:d1:7a:33:
10:b2:79:54:3f:ae:da:db:29:d5:84:6f:c4:7e:e4:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:80:DF:C7:63:05:94:6D:D8:28:BE:2A:99:F3:2C:AB:49:98:0D:38
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/R4Dfx2MFlG3YKL4qmfMsq0mYDTg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.136.0/21
59.83.240.0/21
114.66.181.0/24
114.66.183.0/24
114.66.212.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
96:ff:12:a8:07:8e:fa:8d:33:d2:75:0f:97:ff:c4:5f:ff:e7:
ca:4c:c6:62:10:3a:b3:57:4d:31:7f:65:df:6e:7f:ea:b3:94:
b4:ec:72:c0:5e:7f:6e:51:ea:f2:1c:29:aa:69:4b:77:9b:ad:
d8:ce:de:3e:ea:e3:b9:a7:c9:72:39:f8:c7:99:7a:8a:98:cc:
f7:b8:51:e0:b8:af:6e:02:24:89:4d:39:47:70:4d:10:82:1a:
c8:c8:7c:93:34:4a:cc:31:7c:f9:39:b5:8c:70:3f:7a:4a:84:
e7:8b:b0:0b:6a:0b:63:14:ca:8b:75:b4:aa:8d:3c:81:a1:e3:
86:b9:6c:1f:38:a5:08:00:b4:d6:a2:b9:42:44:ca:8b:c0:a9:
69:cf:67:ca:b5:70:c2:76:76:c4:36:82:84:05:82:7f:f6:28:
b6:de:70:3e:9b:87:b3:b9:97:5b:d0:3d:49:14:55:a9:13:bc:
68:f1:ff:a5:31:e2:22:bf:9f:07:3c:53:b4:c6:ea:ad:4f:49:
66:41:42:dd:fc:7c:54:14:25:b8:85:6f:cd:f8:ec:13:06:4e:
d3:40:4b:da:0b:db:89:51:6a:78:30:6f:d3:c2:b7:f0:cc:cf:
2b:b9:16:2b:84:96:d0:ce:e8:a1:54:ef:00:ee:c7:75:b3:db:
be:2e:19:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org