Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/Yhk00bQfceljU0o_TUNwlHBMbi0.roa
File: Yhk00bQfceljU0o_TUNwlHBMbi0.roa (raw, json)
Hash identifier: GpQ9W+lCPpwX+fbMK8ZUuRilQCoUkkExW8WiKUBmGbI=
Subject key identifier: 62:19:34:D1:B4:1F:71:E9:63:53:4A:3F:4D:43:70:94:70:4C:6E:2D
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0228
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/Yhk00bQfceljU0o_TUNwlHBMbi0.roa
Signing time: Wed 07 Sep 2022 03:49:12 +0000
ROA not before: Wed 07 Sep 2022 03:49:12 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 34549
IP address blocks: 59.83.132.0/22 maxlen: 24
114.66.140.0/22 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.192.0/22 maxlen: 24
114.66.208.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Sep 7 03:49:12 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=621934D1B41F71E963534A3F4D437094704C6E2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:b5:ef:31:42:7d:46:7c:2c:86:b2:38:87:
f6:1b:5d:93:fa:f0:be:bc:7e:7a:72:a7:d4:a5:d0:
77:c3:73:ba:25:f0:63:4e:7c:8b:61:68:02:12:fd:
4f:7e:9d:bd:4a:f1:01:26:fe:4d:ef:e9:d3:da:98:
a7:96:58:da:54:e8:1a:75:e7:97:db:60:93:a6:80:
67:e9:df:f7:80:c5:ba:50:06:33:2a:7c:9f:bd:f9:
23:bc:4a:f1:d1:ff:b9:91:46:c8:df:20:12:ec:d5:
43:48:9d:dd:bd:26:94:95:68:40:c3:85:c5:b9:b2:
fb:12:40:d4:b0:fc:30:64:70:ab:3b:87:4f:65:82:
a9:f9:e4:d9:2f:60:d4:63:d7:24:18:40:1b:d3:3a:
d9:98:27:65:f7:1f:af:fd:c7:16:77:f4:cf:cf:7f:
eb:86:4c:14:d1:0b:a4:5a:23:cb:0f:3b:76:f5:55:
69:fb:c8:d8:70:bd:e5:77:6e:79:68:4e:82:85:ee:
1c:18:9d:67:46:9a:88:2d:26:af:f5:7d:f5:43:75:
3c:0c:3b:5f:9b:19:7a:8c:f6:49:c0:5e:fa:b3:14:
14:7b:5e:6b:ba:aa:ab:62:da:5c:80:16:82:9d:b3:
d8:3d:7d:cb:17:ab:ae:2d:30:60:fc:e9:f2:d8:17:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:19:34:D1:B4:1F:71:E9:63:53:4A:3F:4D:43:70:94:70:4C:6E:2D
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/Yhk00bQfceljU0o_TUNwlHBMbi0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
114.66.140.0-114.66.147.255
114.66.156.0/22
114.66.192.0/22
114.66.208.0/21
114.66.224.0/21
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
97:4c:9e:91:c0:92:72:55:16:09:77:67:e9:17:8a:3d:49:b3:
b8:a1:3e:62:28:28:c5:c7:52:06:12:1f:ac:8f:2c:9e:d4:48:
e4:33:21:30:34:b4:41:96:90:ea:03:67:bd:bd:52:e0:6d:2a:
53:6a:02:74:62:1a:c0:1f:06:9d:ce:c4:c1:6b:29:09:7c:71:
fe:87:dc:63:4c:47:20:f0:05:b2:40:bd:f4:14:6f:4d:87:37:
f1:48:16:1d:f6:f6:5f:b1:2d:28:79:bd:03:cf:4b:3c:b8:78:
19:59:34:e9:3d:51:3e:37:a0:24:41:04:ac:f2:86:f0:60:2e:
14:de:81:cb:dd:98:44:8d:dd:33:4f:82:95:4e:2f:96:fa:e9:
0b:32:50:53:81:b5:9c:56:e9:d0:2a:16:eb:d6:2d:96:3a:88:
29:26:91:25:05:38:b9:e5:fd:d2:7e:49:23:fa:f9:3a:79:40:
8a:47:9c:0c:56:c8:04:2d:6f:81:70:c8:e1:07:96:4d:aa:05:
09:3c:66:92:c3:95:1b:97:06:64:29:ad:7e:4e:7b:64:35:47:
d8:65:b7:3f:e3:c5:37:30:b9:f0:70:2a:4f:dc:39:4a:16:fc:
4e:04:14:44:de:85:bc:18:a8:41:7c:58:13:d3:bd:a1:33:1c:
a5:db:32:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org