Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/gZMmBfH3txul-eLJHuHar3pErm8.roa
File: gZMmBfH3txul-eLJHuHar3pErm8.roa (raw, json)
Hash identifier: Z9EIg5lmye0WD0HHtOjR0TyPlUk+SE/Vl9IL4+oX76E=
Subject key identifier: 81:93:26:05:F1:F7:B7:1B:A5:F9:E2:C9:1E:E1:DA:AF:7A:44:AE:6F
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0107
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/gZMmBfH3txul-eLJHuHar3pErm8.roa
Signing time: Mon 18 Jul 2022 09:34:03 +0000
ROA not before: Mon 18 Jul 2022 09:34:03 +0000
ROA not after: Fri 09 Jun 2023 06:51:49 +0000
asID: 34549
IP address blocks: 59.83.132.0/22 maxlen: 24
114.66.128.0/20 maxlen: 24
114.66.140.0/22 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.148.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.168.0/22 maxlen: 24
114.66.176.0/22 maxlen: 24
114.66.180.0/22 maxlen: 24
114.66.184.0/22 maxlen: 24
114.66.208.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.216.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jul 18 09:34:03 2022 GMT
Not After : Jun 9 06:51:49 2023 GMT
Subject: CN=81932605F1F7B71BA5F9E2C91EE1DAAF7A44AE6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:77:59:d3:30:1f:02:31:01:3a:5d:6e:0b:
90:dd:6c:32:42:c6:33:67:41:61:05:4d:85:53:7b:
a5:ec:24:9c:fd:3c:75:c0:3a:3f:5f:67:6a:9b:c2:
6e:cc:06:40:f3:f9:a4:29:0e:0f:29:06:e6:c1:10:
75:42:1c:fe:fe:8d:f8:f6:cc:b1:18:cd:80:45:dd:
5c:dc:7d:cb:d8:df:96:1a:0a:ec:a2:64:09:0b:97:
cb:00:e5:b1:b4:67:3d:77:68:d1:3c:d9:00:bf:8f:
5d:1e:20:84:ef:e5:43:ab:ee:a3:55:6c:fa:84:68:
b9:69:7e:71:cb:02:b7:47:09:f3:ee:37:bb:08:24:
6f:03:87:59:f0:33:7c:5a:1e:21:eb:5f:10:60:22:
f2:a2:87:3e:6a:17:1b:24:fa:c2:6a:3a:cf:f0:ad:
71:dc:3c:c0:8d:5a:c4:17:8c:56:9b:0e:d8:2d:22:
39:ff:36:59:99:93:1a:d8:da:1f:83:ce:10:3e:b2:
de:88:5f:f0:31:af:46:72:75:b1:d3:cf:23:3b:05:
dc:62:df:1f:59:71:71:26:66:c6:84:75:a5:13:7d:
4a:02:d0:09:5f:e7:ae:1b:e8:11:a6:69:79:2f:91:
08:63:3d:a7:93:d0:ac:7d:76:7a:a8:13:a1:64:a4:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:93:26:05:F1:F7:B7:1B:A5:F9:E2:C9:1E:E1:DA:AF:7A:44:AE:6F
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/gZMmBfH3txul-eLJHuHar3pErm8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
114.66.128.0-114.66.151.255
114.66.156.0/22
114.66.168.0/22
114.66.176.0-114.66.187.255
114.66.208.0-114.66.219.255
114.66.224.0/21
Signature Algorithm: sha256WithRSAEncryption
61:31:af:25:c3:b3:62:ae:06:52:c1:ef:40:5d:7c:fb:a0:c6:
00:0f:45:d4:16:22:e6:f2:62:f5:89:24:eb:80:c2:3a:ca:79:
c1:3f:88:bc:49:3c:c5:a3:75:92:a0:fc:37:06:2b:c2:f8:c3:
d7:c6:f4:f7:b7:2a:96:49:a8:ec:df:89:12:7a:0d:fe:e1:2c:
2d:17:1c:a2:e9:4f:38:a3:32:e8:b0:d1:dc:db:55:a0:f3:44:
c7:8e:74:9e:c3:3e:38:f4:79:48:44:8c:c9:4f:43:8b:dd:fb:
0f:dc:ae:02:8f:a1:60:7d:bb:ba:61:33:18:40:8c:3b:02:73:
50:2b:ed:4c:da:99:e0:98:1d:d7:12:af:fb:ad:24:2c:b7:3b:
61:c5:72:19:a0:6d:9f:8c:b3:13:92:67:b9:85:9a:54:a5:1a:
d0:39:a6:c8:43:51:9e:5e:7d:6d:fe:59:09:6d:2e:f7:99:2d:
e8:7d:72:b9:fd:8c:86:5c:b3:83:d7:86:4b:8b:d6:87:46:59:
44:58:39:e3:48:8e:a7:a5:d7:37:5b:f4:29:6d:ac:ad:0e:00:
14:af:43:74:66:80:b2:2f:9e:b9:06:c7:07:a0:da:89:3a:6e:
d0:a6:e9:44:59:0f:8f:01:b5:d3:05:51:80:96:59:d8:14:5a:
17:ab:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org