Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/_GOzEkg2AgADhemTMXHzqL6dM8c.roa
File: _GOzEkg2AgADhemTMXHzqL6dM8c.roa (raw, json)
Hash identifier: J9WEO90xlHBkarVuNqXAS30taX/jGMnykUX5eOaBKGI=
Subject key identifier: FC:63:B3:12:48:36:02:00:03:85:E9:93:31:71:F3:A8:BE:9D:33:C7
Certificate issuer: /CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Certificate serial: 0532
Authority key identifier: 98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/_GOzEkg2AgADhemTMXHzqL6dM8c.roa
Signing time: Mon 11 Oct 2021 13:06:20 +0000
ROA not before: Mon 11 Oct 2021 13:06:20 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 34549
IP address blocks: 218.98.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1330 (0x532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Validity
Not Before: Oct 11 13:06:20 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=FC63B312483602000385E9933171F3A8BE9D33C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:42:cd:cd:f4:da:29:27:5b:89:60:66:03:
41:75:eb:9b:37:35:31:9d:21:7c:0d:df:84:58:78:
2e:98:9e:fc:ec:d4:61:df:bc:0b:3b:93:ea:ef:f9:
d3:38:ce:4d:0f:84:b0:aa:bb:2d:9e:65:a9:d0:7a:
80:e3:1b:3a:32:4c:80:2d:75:9c:8c:6d:09:2e:b2:
8a:c5:56:33:05:84:d2:2a:76:44:1f:05:17:37:01:
a7:51:05:b2:46:d7:13:e4:a9:4c:3c:c7:0a:96:79:
fb:0c:1e:c6:88:12:ca:06:da:43:cb:da:dd:f3:6b:
36:0c:b1:fb:16:29:e1:71:8d:5b:b2:1e:c8:cd:7e:
27:91:b1:19:66:7e:21:86:ef:bb:fd:c2:54:d7:d4:
37:5a:8c:5a:fd:97:bb:51:b1:fe:1a:15:d7:6d:22:
a8:92:14:50:12:ac:c4:ee:34:bb:74:bc:13:fa:1d:
13:3f:31:ee:71:8a:c9:ef:cd:f0:2d:d4:74:fd:dd:
1f:45:74:37:7a:84:23:c3:6f:c6:ef:49:bb:22:22:
0f:97:a0:a9:21:ef:e0:75:50:d1:b4:ea:24:93:bd:
cc:b2:cb:2a:e9:ce:27:9a:ce:b6:bb:cf:42:86:6b:
fa:00:26:29:be:aa:ed:47:18:10:c0:1a:a5:92:8d:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:63:B3:12:48:36:02:00:03:85:E9:93:31:71:F3:A8:BE:9D:33:C7
X509v3 Authority Key Identifier:
keyid:98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/_GOzEkg2AgADhemTMXHzqL6dM8c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.98.92.0/22
Signature Algorithm: sha256WithRSAEncryption
30:86:6b:52:67:7a:cc:43:80:a3:bb:63:ac:4f:20:0e:89:b1:
e7:7f:ca:d4:cd:31:2e:82:b3:fa:e1:bb:0b:4b:bd:4a:f3:a5:
fa:61:3e:4a:0b:21:c0:dd:8b:43:a2:74:9d:46:95:ee:39:15:
43:27:00:f8:cd:fe:ff:92:49:73:8e:82:db:91:af:ce:af:52:
d0:83:6d:b2:47:de:e5:e4:fd:de:51:a1:58:e8:ab:28:4e:f0:
76:e1:46:47:40:7a:d0:80:8f:56:6a:c7:a3:ef:5c:4f:bf:25:
b5:84:87:66:4d:44:27:1c:df:91:f2:7f:4b:f3:49:83:f8:48:
6e:1e:bd:ad:1d:81:68:6c:9a:a6:f5:2e:c4:c6:03:73:29:c0:
e3:12:8b:ac:fc:ce:b1:8c:7f:71:24:69:3c:5b:92:d8:c2:17:
62:64:bc:2b:da:1c:ae:89:2d:47:b3:13:8e:e0:5e:50:4f:c0:
ed:76:97:10:a6:8d:05:1f:8a:fc:e1:e9:2b:8d:e5:c9:06:f8:
87:e2:08:3a:3f:0d:fa:4b:9e:93:cd:79:fe:af:20:96:4b:04:
b9:16:c2:db:fa:d5:1b:18:e6:99:f5:2e:b4:ed:32:52:59:40:
87:a6:dc:0b:98:85:ac:bb:a4:03:c6:d0:f8:ba:61:4c:aa:33:
e7:24:3b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org