Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/hcYYKC2WuMgj086rKjfNK5XcGqc.roa
File: hcYYKC2WuMgj086rKjfNK5XcGqc.roa (raw, json)
Hash identifier: j/d9Lpduu2ogeyH1Aq0NrCSAiv4ymfkKwgzUyiygDgw=
Subject key identifier: 85:C6:18:28:2D:96:B8:C8:23:D3:CE:AB:2A:37:CD:2B:95:DC:1A:A7
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 06CD
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/hcYYKC2WuMgj086rKjfNK5XcGqc.roa
Signing time: Tue 25 Apr 2023 12:18:56 +0000
ROA not before: Tue 25 Apr 2023 12:18:56 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 34549
IP address blocks: 59.83.136.0/21 maxlen: 24
59.83.240.0/21 maxlen: 24
114.66.172.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1741 (0x6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Apr 25 12:18:56 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=85C618282D96B8C823D3CEAB2A37CD2B95DC1AA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:b5:73:76:83:ff:d7:1b:da:09:9b:a4:fe:
2f:d8:01:90:b5:b8:13:55:36:00:bb:f8:94:b1:ec:
f5:5a:37:12:71:e5:36:ef:b3:bc:3e:e1:51:1d:5d:
e4:b0:d0:99:e0:a8:0d:b1:c1:35:f9:b6:b5:f3:65:
a0:cd:fa:c8:85:eb:51:07:0e:9e:46:27:91:84:2e:
ea:8a:bd:f8:60:c6:d5:79:94:f6:2b:9f:e8:e2:e8:
6f:4b:84:b9:39:1c:de:56:13:27:d1:94:d0:3a:96:
be:cf:14:fc:11:4d:7a:bf:bf:b7:81:1f:60:0c:2e:
a6:fd:fd:42:67:62:31:75:4a:61:3f:c4:7f:ed:37:
c4:66:3d:bc:d0:d9:cf:ca:14:1d:b4:b9:32:63:3d:
33:8a:26:d2:28:c8:0c:f0:26:44:9f:b4:85:7f:87:
0d:f2:d0:48:cf:36:95:2a:ca:63:38:30:56:b6:1f:
f9:7a:1d:4c:a7:94:9b:94:66:a0:1f:f1:bd:40:6e:
0c:f6:ea:55:8b:b6:85:f4:9d:bc:55:d3:b2:ce:8d:
6b:d4:c9:63:41:45:f2:b6:72:a4:62:ab:f0:e4:c7:
3d:9b:b2:dc:e6:6a:a4:3c:97:18:53:35:ed:10:d9:
fb:bf:8c:b0:d8:c8:ea:56:d9:c2:7b:d7:57:ff:a3:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C6:18:28:2D:96:B8:C8:23:D3:CE:AB:2A:37:CD:2B:95:DC:1A:A7
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/hcYYKC2WuMgj086rKjfNK5XcGqc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.136.0/21
59.83.240.0/21
114.66.172.0/22
114.66.212.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
45:70:42:3e:68:8a:83:1f:82:d7:15:68:d5:bf:cc:12:9e:fc:
c6:a9:a2:14:9c:ce:c2:ad:39:c3:ba:36:d2:88:03:5c:97:1f:
29:a6:01:24:8d:bf:b2:e0:26:07:e8:cf:0d:ef:a6:2a:06:10:
89:cb:a6:c8:32:48:b2:e0:e2:df:e2:c8:67:e9:68:9e:1b:ee:
db:0a:5a:6b:8f:ed:67:e8:ee:c6:68:e0:ef:2f:8a:e4:4c:5f:
5c:05:c3:5a:9b:30:d6:6a:be:14:e0:95:90:03:22:79:6f:03:
85:85:b8:3a:4b:4a:db:95:d3:57:c7:53:8c:7f:d9:ad:25:f3:
24:3e:cb:89:9f:4d:1f:c0:ab:11:85:89:ce:9d:b0:80:3b:b4:
9e:c5:0d:41:3e:48:86:47:18:b6:a5:90:af:47:0a:43:16:29:
d3:a7:fe:05:44:57:0d:dc:61:94:71:21:71:71:e1:8a:a9:60:
f6:8f:28:8a:54:b1:4a:49:b7:c5:65:a5:1c:2b:a7:b9:d8:1a:
fb:00:65:d4:9b:69:84:ea:60:c0:23:11:9e:35:f7:87:94:d6:
72:38:a5:1d:fe:4e:c8:43:d6:27:ae:87:8f:91:7b:d9:f7:cc:
d9:0a:ad:07:a1:30:5a:ea:d0:65:61:ea:98:a1:f2:58:82:4e:
69:c4:06:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org