Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/b4Ec2C0hvVGMaFbuWfLtMKhdxFY.roa
File: b4Ec2C0hvVGMaFbuWfLtMKhdxFY.roa (raw, json)
Hash identifier: 3NsWsFbHyueQ9MO/sCrv5PEE0cyaR5QPZhA2khWw51E=
Subject key identifier: 6F:81:1C:D8:2D:21:BD:51:8C:68:56:EE:59:F2:ED:30:A8:5D:C4:56
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0575
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/b4Ec2C0hvVGMaFbuWfLtMKhdxFY.roa
Signing time: Thu 16 Feb 2023 01:19:24 +0000
ROA not before: Thu 16 Feb 2023 01:19:24 +0000
ROA not after: Tue 16 Jan 2024 06:09:07 +0000
asID: 34549
IP address blocks: 59.83.136.0/21 maxlen: 24
59.83.236.0/22 maxlen: 24
59.83.240.0/21 maxlen: 24
59.83.248.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Feb 16 01:19:24 2023 GMT
Not After : Jan 16 06:09:07 2024 GMT
Subject: CN=6F811CD82D21BD518C6856EE59F2ED30A85DC456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:45:cb:00:4e:ea:b0:07:21:7c:08:97:aa:41:
cd:bd:6b:c5:6e:32:3b:92:af:20:94:b1:a5:55:e8:
12:5c:67:10:73:07:4a:5d:b8:07:3c:9d:c6:89:e1:
33:d4:b6:92:20:4e:b9:d0:25:cb:70:fe:93:c8:3a:
d6:a8:39:2e:8b:d6:bd:49:15:34:fb:aa:5f:7f:b4:
fc:49:f8:4a:e1:b4:3c:58:ac:0b:ce:d6:01:73:4d:
09:95:54:e4:a8:0a:54:de:20:6a:47:d2:91:80:f9:
db:2a:19:21:3f:a1:b3:14:e9:96:18:e9:5d:36:9e:
ff:fb:92:37:63:dc:5f:24:61:14:45:89:5e:bb:ad:
e0:c4:65:8a:d1:39:69:b4:54:8f:3f:c3:5a:8b:ab:
77:f4:c6:22:70:f2:c8:6e:5e:7f:08:30:e2:b0:9a:
dd:48:79:04:f2:40:e1:8e:d8:c8:87:ec:3f:b0:87:
d2:06:ee:e2:45:5a:a9:07:eb:cf:1e:8d:f3:b1:e4:
12:45:4a:4a:3f:46:b7:16:55:04:54:9b:cd:44:8b:
aa:ff:38:33:07:35:f4:64:ff:ad:fa:06:0b:10:ee:
37:df:69:56:97:b4:6c:97:ad:37:26:55:b9:65:18:
48:9e:a7:0b:3a:36:2c:eb:cd:98:f2:cb:43:d2:a3:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:81:1C:D8:2D:21:BD:51:8C:68:56:EE:59:F2:ED:30:A8:5D:C4:56
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/b4Ec2C0hvVGMaFbuWfLtMKhdxFY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.136.0/21
59.83.236.0-59.83.251.255
114.66.212.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
83:ea:c6:2b:45:55:bf:f8:a6:bb:79:31:81:24:88:ee:12:98:
eb:6b:02:03:df:5f:1b:96:42:f3:80:90:28:50:69:47:5a:ae:
1d:61:a1:ca:f3:32:d4:60:6c:3a:9a:b9:80:a9:72:9a:4e:29:
11:9e:c2:90:a0:7a:a5:13:77:47:21:7f:72:b3:af:37:9a:8f:
b5:31:df:92:62:aa:31:8d:4a:83:2f:1b:3e:75:ca:50:eb:27:
b6:35:5f:4e:30:9a:73:51:ee:93:5b:16:5c:e3:0a:b5:fd:6d:
ba:a6:c6:54:aa:c8:05:73:57:39:6e:c7:fd:b0:3c:97:52:47:
31:82:cc:39:89:a7:bb:1e:f2:9e:33:4a:8e:26:9e:02:17:c7:
a3:08:f1:60:f7:47:a6:62:b0:7b:e3:63:7f:e6:89:f9:59:68:
1b:70:cb:df:ec:d5:a4:1e:30:82:b6:f3:21:dd:01:5e:3a:98:
d7:70:02:9a:b4:53:de:79:49:6c:12:3b:c7:08:e8:f3:fb:68:
85:80:e4:7e:a9:98:46:cd:86:0d:66:20:24:bf:5d:30:7f:20:
b4:2e:22:cc:b8:56:01:5b:cb:d0:43:51:4d:a2:8d:a4:ef:7a:
be:d4:ba:b0:03:b7:ab:38:bd:7b:48:8c:71:35:bf:58:ac:06:
b8:55:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org