Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/YKVccOcU04QgwchMVVAcpJKv6r4.roa
File: YKVccOcU04QgwchMVVAcpJKv6r4.roa (raw, json)
Hash identifier: P/cFHjuI6YQUzdhebdjN2G5QSygv9LL6i0mpSTXRn1E=
Subject key identifier: 60:A5:5C:70:E7:14:D3:84:20:C1:C8:4C:55:50:1C:A4:92:AF:EA:BE
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 02E8
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/YKVccOcU04QgwchMVVAcpJKv6r4.roa
Signing time: Thu 13 Oct 2022 05:34:36 +0000
ROA not before: Thu 13 Oct 2022 05:34:36 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 21700
IP address blocks: 114.66.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Oct 13 05:34:36 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=60A55C70E714D38420C1C84C55501CA492AFEABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:81:c9:22:e7:31:41:ad:2a:e0:4d:4f:92:
a4:77:e8:4e:92:4a:42:df:b1:bf:60:2e:bb:29:50:
e9:5f:47:5a:39:14:b1:1c:43:d4:c8:8d:dc:e5:39:
0f:ae:16:2b:7c:9f:ce:a0:d3:69:65:81:74:3c:c9:
f6:c8:31:d8:56:0c:f6:63:6d:d6:4b:91:ed:93:73:
31:6c:ae:ce:44:ca:2e:90:6e:04:11:16:44:8f:fb:
24:89:4f:db:9f:09:3a:e4:1d:0d:fb:8a:71:13:0a:
05:4c:95:90:ab:54:48:51:ef:e3:bc:48:9c:17:95:
fe:cc:fe:17:35:a9:3b:13:03:47:d2:cf:c2:eb:d5:
86:f2:52:60:c3:e1:1d:26:4d:0d:4d:c4:c7:15:ff:
ce:9c:70:9f:06:1f:be:b8:5f:bb:f5:38:a6:89:32:
5d:0f:b0:7f:e9:9b:07:7d:57:d6:4d:7b:de:2c:a6:
5b:ae:23:8f:ed:c5:89:cc:5c:75:7b:b4:f5:76:c6:
2d:c3:3f:87:8a:fd:78:d1:98:97:1f:a2:c3:4e:af:
57:7e:73:34:f3:b3:7b:ea:5c:67:e8:8d:60:e4:18:
88:c7:f6:21:e8:18:53:63:33:ba:12:2c:5b:f5:dd:
14:47:6e:56:7f:73:f4:e5:4e:5a:dd:7c:99:99:cf:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A5:5C:70:E7:14:D3:84:20:C1:C8:4C:55:50:1C:A4:92:AF:EA:BE
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/YKVccOcU04QgwchMVVAcpJKv6r4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.200.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:94:5e:a8:dd:16:c6:ee:56:03:5d:a6:a3:38:9f:e2:25:73:
0a:a2:0f:1f:46:9c:db:e1:71:6d:26:4a:b8:20:56:fd:d3:51:
e9:f2:4e:40:fd:6c:3d:c7:d8:ab:c6:11:eb:da:09:6d:e9:56:
f0:38:2e:c9:af:a6:17:e3:54:ea:54:dc:0c:ac:eb:44:7a:3e:
7a:ae:7d:1f:54:60:b9:2a:3b:24:a6:96:50:e8:62:ea:e6:41:
3d:51:c6:e4:68:e3:42:3b:5e:df:65:e1:8e:86:76:71:a5:8f:
46:ee:40:db:c8:7c:38:7e:fb:bf:6d:e5:50:24:6e:ba:99:c9:
8b:22:5a:ef:2f:e5:11:81:6d:f4:b6:a8:0e:33:64:40:1f:27:
97:d2:a8:df:88:f1:aa:9d:58:cb:0e:bc:85:96:a0:19:b6:d6:
0f:28:d1:0d:a7:68:66:58:71:c3:6c:49:d2:72:38:3f:2a:da:
c3:a2:fd:95:69:e7:c6:da:48:f5:15:62:bb:76:cb:c3:53:ff:
e5:0f:7e:c3:fa:e4:bf:03:ba:ea:23:2e:43:c0:40:ac:2f:3c:
1d:01:27:e9:19:12:f1:07:82:f4:5a:c5:3b:95:69:e3:49:5d:
2c:53:b7:af:90:e5:92:31:c8:56:63:66:72:7c:ec:b1:58:32:
b4:9c:e0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org