Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/myX6htOcLCWAYh4QyYmtCnDm6tc.roa
File: myX6htOcLCWAYh4QyYmtCnDm6tc.roa (raw, json)
Hash identifier: TusCZfGE9wuI8OyMxzsy+rdsSnKQEQ7RUB6Wg2x0U4M=
Subject key identifier: 9B:25:FA:86:D3:9C:2C:25:80:62:1E:10:C9:89:AD:0A:70:E6:EA:D7
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 04
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/myX6htOcLCWAYh4QyYmtCnDm6tc.roa
Signing time: Wed 01 Jun 2022 07:10:41 +0000
ROA not before: Wed 01 Jun 2022 07:10:41 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 34549
IP address blocks: 114.66.128.0/20 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.148.0/22 maxlen: 24
114.66.152.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.160.0/20 maxlen: 24
114.66.176.0/22 maxlen: 24
114.66.180.0/22 maxlen: 24
114.66.184.0/22 maxlen: 24
114.66.216.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jun 1 07:10:41 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=9B25FA86D39C2C2580621E10C989AD0A70E6EAD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:28:fd:60:fb:e2:41:6a:11:5b:74:52:94:7f:
c3:bf:cd:9b:b8:41:a7:27:a4:4a:9b:50:92:4f:0d:
88:22:9d:9e:87:34:80:cd:6b:ee:31:f8:ab:5a:cc:
b3:4e:4b:b6:1f:6f:c1:3e:2a:e4:a7:f5:8d:9a:d3:
71:ea:8b:1b:07:86:fb:c8:de:6e:69:1f:c6:fd:2c:
f1:20:11:6e:23:d8:b1:60:2f:18:87:3e:da:7c:44:
21:5b:93:68:85:a5:9c:3f:90:ff:10:56:a3:33:bb:
24:5c:9f:59:e5:d5:c2:60:f2:89:f8:19:23:e8:3d:
6a:f5:96:c1:5c:ce:6b:5c:40:9b:c9:11:1b:0c:a8:
37:21:c6:9b:17:8a:06:2e:d0:35:45:7e:ab:ed:3e:
e7:34:86:ab:de:cc:87:3b:cc:a4:96:8e:23:40:0e:
65:fe:0d:78:b0:89:a4:78:d4:cf:81:45:13:27:28:
83:02:89:17:1c:01:29:e5:85:85:f3:e7:a6:5d:83:
ec:04:f2:91:f1:6a:66:77:67:ee:e5:a3:f5:00:76:
9b:fa:1d:7b:f8:2b:63:a8:2e:00:8a:14:9d:e4:52:
ea:b6:4e:ce:23:ab:7a:46:4c:a6:02:b3:74:3b:9f:
96:b4:c6:ec:d9:94:ed:a4:be:01:60:7e:7f:17:34:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:FA:86:D3:9C:2C:25:80:62:1E:10:C9:89:AD:0A:70:E6:EA:D7
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/myX6htOcLCWAYh4QyYmtCnDm6tc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.128.0-114.66.187.255
114.66.216.0/22
114.66.224.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:3c:a4:46:c3:c1:8f:33:d6:43:5f:3d:80:7d:bb:9e:6d:37:
9b:e1:98:d1:92:c6:57:dd:1c:29:20:18:5a:bb:c1:c1:1f:16:
d4:a9:81:4d:7e:0c:53:84:95:5c:e1:76:77:54:bf:9b:ef:72:
fe:60:2e:47:6c:75:74:0c:60:2a:55:7a:8c:d5:61:82:26:e0:
26:b2:1b:02:d2:6e:c6:73:15:e5:cb:3d:90:6c:91:4a:c0:d6:
d9:fa:5a:99:b1:01:5a:5a:c8:61:6a:75:d6:3c:0f:fb:f3:84:
b9:20:10:7f:7e:07:7e:f2:89:cd:af:69:55:e2:3a:92:24:fe:
6d:c4:3a:b5:46:f9:f6:18:02:ca:ff:92:33:84:55:37:aa:bf:
50:8d:b3:bc:54:37:30:ff:9e:74:5f:af:8d:6b:bc:f8:69:56:
80:ab:02:8d:e4:46:f1:06:c5:53:e0:6f:3b:9e:7a:62:af:d8:
9e:82:8d:07:17:6e:bf:f9:80:89:13:33:77:49:35:3c:b9:c6:
dd:f6:d9:16:94:2b:74:c7:1b:b2:7a:e9:a8:ee:1f:f3:c6:7c:
8d:1b:80:f9:f1:4f:ac:04:23:45:07:c6:ea:48:97:e6:1a:b7:
c9:16:53:43:fd:87:f0:0f:bc:81:a8:d8:07:b6:81:5f:7b:80:
0b:dd:36:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org