Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/RuQHUDXrNamergq36Nxu_93Yft0.roa
File: RuQHUDXrNamergq36Nxu_93Yft0.roa (raw, json)
Hash identifier: gWtgCxCUlKuBAH9qG9bd+n7UI1MdRhzFJaawvYZgsQk=
Subject key identifier: 46:E4:07:50:35:EB:35:A9:9E:AE:0A:B7:E8:DC:6E:FF:DD:D8:7E:DD
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 08FF
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/RuQHUDXrNamergq36Nxu_93Yft0.roa
Signing time: Mon 14 Aug 2023 04:33:44 +0000
ROA not before: Mon 14 Aug 2023 04:33:44 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 57844
IP address blocks: 218.98.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303 (0x8ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Aug 14 04:33:44 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=46E4075035EB35A99EAE0AB7E8DC6EFFDDD87EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:7b:03:d6:a7:0d:3f:b9:69:f4:d4:81:53:
80:0f:ef:9e:39:b7:e7:14:a0:b9:fb:86:5a:06:cf:
27:bb:50:54:71:5c:8d:9f:17:76:7e:e8:95:6d:15:
b9:fe:4d:ce:55:38:a2:27:c8:6a:c4:6d:a4:51:8a:
4b:9e:09:c1:9a:e4:fb:9b:c0:d7:3c:f4:23:8d:25:
ef:ac:34:53:64:3f:87:00:64:7b:aa:fb:b1:a6:6c:
08:7c:63:2a:56:d8:8d:34:be:f7:b1:7c:93:66:53:
3e:00:72:eb:39:36:92:65:ad:67:98:de:c5:04:c4:
0b:3e:34:f0:84:87:7c:4e:c5:e2:d1:a0:46:d2:fe:
98:a8:cd:6a:d5:68:10:a6:94:b8:36:c8:0e:3a:73:
f3:e5:12:fc:43:64:28:68:11:82:0d:86:c1:79:3a:
6f:ee:10:a7:85:c8:a2:15:a1:56:90:56:c0:3f:3d:
da:35:bb:37:ef:8d:69:49:f9:b2:47:b2:a6:61:3b:
61:bc:b3:f2:6a:ee:71:7e:18:08:d2:12:7d:eb:b5:
96:59:37:4e:02:64:42:b6:10:ee:3e:fc:03:78:95:
b3:31:d8:69:6b:02:76:86:c9:d6:a5:40:f0:b2:45:
da:e1:d1:38:ab:0a:15:29:65:f6:cd:a5:75:70:f3:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E4:07:50:35:EB:35:A9:9E:AE:0A:B7:E8:DC:6E:FF:DD:D8:7E:DD
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/RuQHUDXrNamergq36Nxu_93Yft0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.98.85.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:12:2b:d3:e2:48:1f:7e:47:ed:36:00:9b:3f:ac:04:0f:b6:
7d:43:ee:59:8b:53:ff:77:6a:62:17:9e:b3:63:3c:e1:ba:58:
90:ec:1d:a7:51:e9:cc:a0:01:01:63:7e:34:d4:ef:2a:ff:b9:
7c:30:0c:99:91:a4:4b:f1:99:1c:e7:41:e2:af:3c:9d:ef:d3:
ac:29:73:1e:07:06:10:e9:9a:be:65:01:9d:d8:34:93:5e:7e:
71:40:01:df:2e:d3:87:16:38:3d:c4:80:d8:87:e7:44:37:02:
70:12:5b:76:6c:a1:0a:2c:64:42:da:c2:35:c8:45:cf:f2:9c:
98:92:0c:19:64:c5:a9:49:94:f5:b9:f6:65:37:65:c3:19:94:
56:8e:d9:55:95:fe:24:17:72:53:8e:ee:c6:41:5b:3e:00:6e:
c6:9c:0d:f5:55:da:9f:dc:19:01:a8:00:ac:31:df:bc:13:ef:
a1:a3:b0:6e:3e:b7:0a:21:d3:55:86:9c:69:db:e4:c9:9c:5d:
dc:24:c4:02:99:60:c7:8c:12:25:22:83:8e:77:4a:de:1c:ed:
35:c5:8e:af:be:dc:e3:3b:4f:d5:6a:da:66:f9:16:92:6d:4a:
b7:03:8b:ee:24:ea:1e:c5:94:96:2c:9f:2f:08:60:cd:57:9d:
90:6c:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org