Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/hJec_B8opADJSXgvslWAqPYER18.roa
File: hJec_B8opADJSXgvslWAqPYER18.roa (raw, json)
Hash identifier: 2UMSEyFA3g1QlZ/BU+bX/B2lwuDqUL85Rsb07+rcsDc=
Subject key identifier: 84:97:9C:FC:1F:28:A4:00:C9:49:78:2F:B2:55:80:A8:F6:04:47:5F
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 019E
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/hJec_B8opADJSXgvslWAqPYER18.roa
Signing time: Fri 12 Aug 2022 02:03:42 +0000
ROA not before: Fri 12 Aug 2022 02:03:42 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 21700
IP address blocks: 114.66.196.0/22 maxlen: 24
114.66.200.0/22 maxlen: 24
114.66.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Aug 12 02:03:42 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=84979CFC1F28A400C949782FB25580A8F604475F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:6c:3f:34:5c:7a:e3:3f:03:15:8a:72:89:
e4:3e:26:92:d3:c2:e1:62:df:33:18:4f:5c:b7:6d:
4e:df:3f:7c:4f:5b:db:47:9e:7c:2b:36:41:95:19:
ab:aa:5d:0e:63:7d:03:33:6c:a7:30:32:cf:22:1f:
77:5c:52:2c:14:28:4b:4a:05:70:a8:84:bd:42:b0:
72:7f:bf:eb:66:2e:10:0d:a6:56:43:cf:21:29:93:
d2:29:07:24:4a:a5:69:cf:4a:ca:39:63:d0:f9:e3:
19:90:b5:f1:bb:19:66:57:ed:31:0c:ef:83:83:b6:
90:d6:2b:5d:b8:1d:12:fe:bf:55:7c:b0:2f:1b:44:
39:1c:a1:47:d2:d1:a3:e6:76:39:a9:a9:d7:82:86:
3a:5d:02:2b:a1:2c:c4:96:c1:0b:b1:d7:f6:05:4d:
3b:89:30:32:ae:1a:1c:7d:0c:75:8d:33:99:e8:05:
ca:c7:59:c2:ad:aa:0e:1e:ca:d3:c1:b4:73:10:f4:
0a:02:67:0c:ae:06:06:65:71:77:fe:9f:69:00:ef:
a3:30:5a:7e:aa:47:b0:48:ea:40:ce:55:36:5f:04:
07:cb:0e:6b:65:a1:1d:09:a3:8b:f4:05:0f:18:95:
42:70:98:10:c0:8c:28:98:07:2b:69:f8:1f:b5:f4:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:9C:FC:1F:28:A4:00:C9:49:78:2F:B2:55:80:A8:F6:04:47:5F
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/hJec_B8opADJSXgvslWAqPYER18.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.196.0-114.66.207.255
Signature Algorithm: sha256WithRSAEncryption
a1:bc:0f:fb:6e:4f:11:37:00:72:fe:6e:c4:86:42:ec:a7:31:
da:b8:0d:25:73:9b:b8:67:92:b5:0b:ad:81:bf:31:cd:71:ca:
5d:02:a4:e5:5c:aa:b5:35:f4:11:a5:82:32:c6:5c:ea:4a:a8:
d0:2f:35:23:32:58:9a:d6:d7:c1:09:b3:10:60:a8:fc:91:99:
81:63:83:8f:36:0e:18:4b:ef:a0:36:01:74:29:6d:c6:95:ee:
15:88:f6:df:53:ab:c2:d3:fa:aa:55:22:84:9b:8d:49:0f:79:
d1:34:86:3c:84:cf:19:67:14:0a:00:77:2d:ba:cf:29:b3:31:
47:31:ec:48:72:32:30:ec:6d:82:7f:9a:c2:29:4e:41:93:7b:
e4:93:a1:21:70:34:11:b4:f6:c3:1f:97:08:6a:7b:cb:ec:09:
b6:b3:9f:45:5e:ea:59:00:04:98:60:e7:97:6f:8b:1c:4e:e8:
6e:73:44:14:d9:14:76:d2:0b:fa:e1:05:25:0b:e8:91:bb:5c:
4d:bd:03:6b:cf:4c:0b:13:53:ab:5e:ca:8c:b0:41:7b:1b:ea:
95:70:f7:b1:38:d6:2c:b8:f1:3f:8c:10:75:93:55:de:3d:46:
f6:f8:0d:1d:db:6f:74:0d:9e:6c:ea:f0:f0:ed:5e:ef:8e:22:
0e:bf:9c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org