Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/dcHLtUIf0AWz4IikLH1-acowwWA.roa
File: dcHLtUIf0AWz4IikLH1-acowwWA.roa (raw, json)
Hash identifier: 2OvGwuug8GXRsc3jQERHgck4dp4qMYY9axQHK56MNRw=
Subject key identifier: 75:C1:CB:B5:42:1F:D0:05:B3:E0:88:A4:2C:7D:7E:69:CA:30:C1:60
Certificate issuer: /CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Certificate serial: 089F
Authority key identifier: 98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/dcHLtUIf0AWz4IikLH1-acowwWA.roa
Signing time: Tue 22 Mar 2022 13:38:35 +0000
ROA not before: Tue 22 Mar 2022 13:38:35 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 141373
IP address blocks: 59.83.132.0/22 maxlen: 24
59.83.176.0/22 maxlen: 24
218.98.74.0/24 maxlen: 24
218.98.75.0/24 maxlen: 24
218.98.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2207 (0x89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Validity
Not Before: Mar 22 13:38:35 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=75C1CBB5421FD005B3E088A42C7D7E69CA30C160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:5c:99:6a:e1:71:69:1a:ab:0e:e9:61:46:
0d:94:90:49:93:a4:37:ce:13:8e:74:d3:c1:a6:72:
b2:4f:6a:a2:1b:4d:71:ee:33:f6:c2:b7:0d:67:7b:
da:ec:2d:f9:a6:78:b7:2c:8c:9d:f2:08:49:da:ce:
94:47:33:f9:fc:f7:47:c4:2c:ec:7e:0f:9f:7e:61:
70:17:ab:43:e1:f8:a1:c1:ab:c5:88:fd:30:4f:0f:
13:b0:7c:ec:50:ce:e6:f7:f3:2b:a5:73:13:1f:31:
b5:71:f2:16:11:24:9e:95:5b:c4:02:7e:13:82:53:
d2:ae:5d:05:b4:6f:28:51:d3:18:44:fd:00:e2:2b:
88:38:90:06:75:2f:27:7d:83:e5:f3:24:e1:ad:86:
66:67:42:5b:9e:a2:ca:8d:c6:fa:92:53:a9:78:72:
ce:c7:7f:6c:c9:08:5b:0b:65:98:ff:df:62:df:93:
b4:17:de:b6:12:6b:7c:fb:b5:1d:c4:e8:e6:5a:69:
eb:19:2d:e3:5c:87:2e:01:2c:45:23:4a:45:9c:73:
4b:84:fc:79:83:e2:17:12:dd:61:4c:15:ee:83:24:
55:ac:a9:e8:df:49:ed:64:2d:b2:45:cc:3e:59:a9:
8f:d0:d3:8e:32:dc:a5:87:b1:93:3e:9c:55:0c:63:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C1:CB:B5:42:1F:D0:05:B3:E0:88:A4:2C:7D:7E:69:CA:30:C1:60
X509v3 Authority Key Identifier:
keyid:98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/dcHLtUIf0AWz4IikLH1-acowwWA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
59.83.176.0/22
218.98.74.0-218.98.76.255
Signature Algorithm: sha256WithRSAEncryption
9a:06:91:45:5f:1c:c9:48:f3:26:7c:bf:e8:0c:fc:26:3d:19:
45:e3:e4:25:20:6b:0f:15:a9:f4:dd:68:33:0b:bf:e8:d2:b4:
27:8d:ab:a0:c8:d9:c4:52:a4:8f:ec:8e:a9:fa:10:19:2f:34:
9b:07:e4:74:28:64:e7:00:bb:d7:02:d6:3a:6d:62:28:f4:59:
80:bc:a0:c9:66:0b:9d:ae:50:9d:3f:f0:64:66:e0:74:86:43:
1b:76:f4:c9:89:f1:52:63:de:e7:31:7a:12:b6:52:6c:f3:7a:
3f:95:51:8a:2a:2e:90:02:e7:1d:15:c8:ca:6e:38:d9:2b:ec:
f1:95:a8:91:b6:cc:eb:8f:b1:f9:3c:de:07:93:cd:b2:6f:bd:
45:27:3d:70:cd:6c:c3:62:63:6a:8b:f3:3e:81:1e:91:9a:52:
78:17:4f:e9:52:83:32:82:97:be:b0:2e:ae:99:14:a2:05:1b:
4a:9b:85:e8:45:84:c1:0d:62:68:da:05:25:67:25:42:17:69:
e4:a6:0d:f9:c1:ec:e7:99:8a:52:31:69:20:b3:86:d9:59:1a:
1b:07:d3:2b:22:fc:98:92:7f:80:0e:6c:c2:86:d1:24:d5:8f:
83:64:5d:d6:2d:e4:ec:4f:08:54:4d:5b:2a:3b:d5:93:15:47:
2f:23:95:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org