Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/hqiMH9YK75RdpPfLc1ocZpmzVA8.roa
File: hqiMH9YK75RdpPfLc1ocZpmzVA8.roa (raw, json)
Hash identifier: mP6NQM78BP6JnrItOaPpZRD9K+/fPThkY0QOsK+qRFs=
Subject key identifier: 86:A8:8C:1F:D6:0A:EF:94:5D:A4:F7:CB:73:5A:1C:66:99:B3:54:0F
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 03A9
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/hqiMH9YK75RdpPfLc1ocZpmzVA8.roa
Signing time: Fri 18 Nov 2022 01:33:27 +0000
ROA not before: Fri 18 Nov 2022 01:33:27 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 34549
IP address blocks: 114.66.144.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937 (0x3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Nov 18 01:33:27 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=86A88C1FD60AEF945DA4F7CB735A1C6699B3540F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:7c:71:16:d7:0b:a5:14:19:11:c9:46:d1:
13:e8:57:24:71:88:95:fc:d0:64:7f:78:76:df:10:
2c:50:4f:d7:e5:a4:92:94:b0:d7:cc:42:63:b8:38:
16:e0:96:a9:30:ce:9d:64:66:e7:df:fe:95:d1:7b:
59:b9:fb:67:96:ce:2c:69:fc:15:14:37:0d:3d:1d:
78:e2:2b:7a:1c:c3:db:6e:78:d5:64:42:93:85:95:
23:72:e6:32:fc:43:44:04:f4:96:4a:22:2a:5e:45:
5f:7d:02:81:0a:e5:93:a9:61:01:c2:53:6b:9b:d7:
8f:81:d6:1f:20:92:d4:cf:92:43:ee:51:cb:40:f2:
5a:70:ee:d8:e1:c4:cf:1d:17:70:50:a8:73:6f:d2:
59:23:ff:5a:22:b2:ec:cf:f2:33:35:6e:2f:20:be:
04:7c:ec:ca:03:8c:28:f0:30:12:8d:8f:c0:b9:46:
96:91:9f:5d:ac:32:e9:0c:10:d7:9b:54:6a:1c:b0:
f5:a9:6c:c4:37:0a:0f:15:fd:71:0d:0e:72:0a:ba:
6d:58:71:5d:11:36:73:eb:a6:58:52:3c:d7:38:46:
f7:f3:a2:70:51:86:54:c0:3c:22:42:27:bf:8b:8b:
d9:9b:d2:52:1a:b6:85:0f:78:ae:81:9b:a1:1b:2e:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:8C:1F:D6:0A:EF:94:5D:A4:F7:CB:73:5A:1C:66:99:B3:54:0F
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/hqiMH9YK75RdpPfLc1ocZpmzVA8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.144.0/22
114.66.212.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
56:f9:38:ac:01:63:f6:98:4e:8f:53:be:b7:ef:aa:06:04:76:
24:8f:e7:e3:0d:09:2c:80:7e:7b:fb:da:8e:3c:bf:56:70:09:
88:70:4c:31:8f:db:21:cb:49:3f:0e:98:14:af:93:25:63:69:
12:9a:78:ca:b7:00:c9:79:dd:4c:a7:a6:9e:23:34:30:b4:be:
f4:12:9a:76:61:00:6e:93:39:57:b3:d5:74:f0:2e:4b:83:5e:
a1:eb:a3:16:58:4b:c2:f6:bf:f4:45:69:66:1a:c1:0d:11:7c:
94:b3:ab:02:59:be:ba:a6:5e:49:ed:2b:f7:35:aa:5b:7b:bf:
56:63:98:54:a9:26:fb:46:8f:80:36:bc:20:63:19:b3:68:65:
13:6a:4c:bf:ee:60:9a:d0:5a:60:bf:80:f6:db:0e:0e:6c:18:
e9:5f:69:94:c5:8c:d2:4a:ea:9a:11:61:b0:15:69:38:08:fb:
3a:24:f5:1f:9b:ac:b7:c6:f4:db:0e:d2:e8:17:df:7e:5f:62:
bc:4e:33:47:ea:47:83:e6:fc:6f:6d:09:b8:c9:b8:4a:f5:bc:
57:66:ad:72:94:6f:af:f3:8a:b0:7a:9a:2d:5a:23:ad:79:7f:
68:02:4e:40:ab:10:fa:26:cb:c6:f4:8b:77:b6:bc:5c:e2:2c:
a8:1f:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org