Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/XZvpKSoqUF4sTdGlBa8rGxuLz2w.roa
File: XZvpKSoqUF4sTdGlBa8rGxuLz2w.roa (raw, json)
Hash identifier: fj0QjEtS3HmmYYopVz5kD9hvZpdedYao7VUT+VsjyE8=
Subject key identifier: 5D:9B:E9:29:2A:2A:50:5E:2C:4D:D1:A5:05:AF:2B:1B:1B:8B:CF:6C
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0A4F
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/XZvpKSoqUF4sTdGlBa8rGxuLz2w.roa
Signing time: Sat 21 Oct 2023 02:34:18 +0000
ROA not before: Sat 21 Oct 2023 02:34:18 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 34549
IP address blocks: 59.83.136.0/21 maxlen: 24
59.83.240.0/21 maxlen: 24
114.66.149.0/24 maxlen: 24
114.66.181.0/24 maxlen: 24
114.66.183.0/24 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.212.0/24 maxlen: 24
114.66.214.0/24 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2639 (0xa4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Oct 21 02:34:18 2023 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=5D9BE9292A2A505E2C4DD1A505AF2B1B1B8BCF6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:2e:46:43:82:9e:47:5c:bd:87:d1:e6:1a:
1e:81:f7:46:d3:59:6c:f2:7a:2c:77:6f:02:96:40:
6f:a7:84:f7:15:99:02:12:39:f0:e9:76:21:77:03:
a7:9e:0d:7b:f1:3e:cf:9d:59:47:45:9c:b4:42:d1:
1d:36:91:be:0a:3b:1b:b3:af:16:27:40:a8:8c:6b:
a3:fa:38:80:d7:f7:a9:be:d3:00:5b:f2:7b:09:f0:
1c:a3:78:ca:22:69:20:73:fa:74:75:a7:02:d2:f1:
a5:69:47:3e:1f:66:6b:15:8c:ee:35:2b:17:0b:50:
16:64:2c:10:93:cb:84:e5:96:19:a4:83:b2:6c:c8:
9a:13:00:e0:47:c2:5f:f5:0c:e8:da:62:6a:61:6b:
26:bb:8a:b3:d8:91:e6:52:a9:3d:80:db:01:50:6e:
c0:36:4d:c5:3b:fd:ee:50:6b:ed:67:2a:89:c0:10:
41:e9:ad:35:6c:18:51:97:bc:5d:07:75:b2:ff:93:
ea:88:07:11:68:3c:02:92:8d:90:c7:a7:95:fe:82:
c5:e0:97:8a:48:a4:71:5b:ef:70:ac:f9:ff:dd:64:
d0:5b:28:24:62:e3:12:fe:0a:52:fa:7c:af:01:89:
13:d8:8f:4b:55:b2:dc:07:1a:84:c9:88:27:40:d1:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:E9:29:2A:2A:50:5E:2C:4D:D1:A5:05:AF:2B:1B:1B:8B:CF:6C
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/XZvpKSoqUF4sTdGlBa8rGxuLz2w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.136.0/21
59.83.240.0/21
114.66.149.0/24
114.66.181.0/24
114.66.183.0/24
114.66.212.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
12:60:74:61:09:fc:5c:9f:36:ad:07:04:86:2d:37:b8:bc:68:
85:cd:be:9f:5d:d9:4a:96:1d:52:64:a8:09:d6:87:75:f4:69:
22:b2:08:7d:c7:a1:dc:3d:97:e4:60:50:b3:43:ce:7e:87:f2:
3c:08:a9:fc:bf:b8:94:43:3f:23:9c:54:c8:0b:b2:e9:d9:bb:
ee:81:bd:1a:21:0e:3d:6a:94:37:46:c5:70:32:aa:1d:49:e1:
9e:88:47:20:9c:eb:bb:5a:11:3e:96:7c:d8:63:f4:38:83:92:
52:b2:d3:77:5a:e4:5b:cb:00:68:20:4f:af:8b:0b:ab:dc:9c:
98:ab:b6:8f:76:5b:f8:93:f6:5e:67:1d:f1:bf:8b:1e:6d:4e:
b0:aa:06:ad:00:fa:6b:70:1c:c8:ab:60:78:8c:ef:1b:eb:95:
d9:36:62:4c:41:ab:d7:37:79:06:51:a7:29:c3:ef:0a:09:07:
d0:09:d7:f9:3f:6b:3f:a6:48:1c:1b:37:39:0e:95:24:07:47:
3c:07:cf:94:54:68:59:ab:2c:30:03:79:20:2a:18:22:0b:69:
4b:6f:55:e8:ab:41:ce:d6:15:fb:e7:00:f2:29:93:ab:92:0d:
d4:ae:df:e9:9d:0f:73:4a:bb:6e:91:b4:c4:54:10:b8:f2:67:
ba:0c:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org