Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/nxgzdZha5ZtPnvVUQFIYKD8JzNg.roa
File: nxgzdZha5ZtPnvVUQFIYKD8JzNg.roa (raw, json)
Hash identifier: jwfPfUURkTVJw94xNPqYmeIQ0cJ6dDBS3bMh+oCoHw0=
Subject key identifier: 9F:18:33:75:98:5A:E5:9B:4F:9E:F5:54:40:52:18:28:3F:09:CC:D8
Certificate issuer: /CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Certificate serial: 0585
Authority key identifier: 98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/nxgzdZha5ZtPnvVUQFIYKD8JzNg.roa
Signing time: Mon 25 Oct 2021 07:33:27 +0000
ROA not before: Mon 25 Oct 2021 07:33:27 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 57844
IP address blocks: 218.98.81.0/24 maxlen: 24
218.98.82.0/24 maxlen: 24
218.98.83.0/24 maxlen: 24
218.98.84.0/24 maxlen: 24
218.98.85.0/24 maxlen: 24
218.98.86.0/24 maxlen: 24
218.98.87.0/24 maxlen: 24
218.98.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413 (0x585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Validity
Not Before: Oct 25 07:33:27 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=9F183375985AE59B4F9EF554405218283F09CCD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:e9:58:36:ad:a5:aa:c9:14:77:ca:c1:a2:
00:f0:8c:6e:0c:86:5c:e3:59:71:66:83:b1:b6:83:
f6:71:4b:5d:72:1f:be:45:23:3a:a4:95:40:eb:5b:
d0:24:0f:50:1d:02:1f:b8:63:29:e7:d0:9d:8e:e5:
d6:f6:92:08:03:39:a8:8b:37:05:a8:8a:c5:b2:02:
02:3f:14:16:24:66:fb:98:61:7c:6d:87:ac:09:0a:
d5:5c:50:0e:e7:ff:90:ca:19:a6:7a:57:34:9f:8a:
71:0c:99:f8:bc:61:48:37:fa:d4:2d:b5:39:48:a4:
59:cd:ec:a4:db:9f:c4:49:a3:8c:8d:e2:1b:6e:0e:
fc:29:8d:22:21:7c:df:44:83:ed:1c:a6:71:6a:c1:
fa:b6:3b:7c:e2:42:b6:45:f8:49:d8:21:2e:d7:36:
e0:c6:e2:e0:23:61:df:27:4a:28:55:f6:6d:72:e8:
22:e8:33:98:a6:01:e8:6d:49:a3:49:f5:f7:65:1f:
76:f0:22:31:06:cb:65:b2:4d:99:b9:3f:41:1e:18:
fd:bb:10:cd:4d:52:69:68:8c:6f:91:76:38:8c:14:
14:e0:5c:97:15:1d:48:a3:0b:54:67:65:0b:36:b3:
a2:b2:ec:c5:c4:16:43:df:f8:37:e5:a3:f5:4a:fd:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:33:75:98:5A:E5:9B:4F:9E:F5:54:40:52:18:28:3F:09:CC:D8
X509v3 Authority Key Identifier:
keyid:98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/nxgzdZha5ZtPnvVUQFIYKD8JzNg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.98.81.0-218.98.88.255
Signature Algorithm: sha256WithRSAEncryption
b2:95:ca:74:4d:26:19:eb:47:bd:ff:cb:8a:6a:9a:aa:00:0d:
30:c7:a1:b5:ad:ff:27:c1:e3:b6:6b:a5:10:44:3b:47:fc:9c:
90:4b:c6:81:71:81:cf:a8:b7:dd:17:a3:35:38:3d:4e:e9:f5:
b2:c1:bb:a9:fa:3c:93:13:7d:d8:b3:a0:f8:07:5b:65:74:53:
ad:f7:85:c2:fe:d9:c2:66:cf:17:a4:7c:37:2c:b0:6f:cc:3a:
7e:21:cf:88:c6:dc:9a:ef:66:94:2d:2b:45:47:1e:5f:26:13:
a7:86:92:f2:22:18:ef:30:e0:3f:da:b4:7e:23:62:b6:3b:3b:
7d:55:7a:12:d9:04:d5:fe:0f:ce:69:26:89:d8:da:15:50:22:
92:74:45:71:39:14:33:a5:fc:90:48:db:39:6e:3a:fa:69:9a:
5c:11:45:ee:88:c8:ee:36:e7:c6:7e:9e:ce:ba:3d:d7:99:04:
7d:aa:fe:4e:9e:00:1e:1a:e0:8c:21:5e:72:45:38:63:cc:38:
35:ba:8c:17:9a:7c:82:0f:d8:5c:04:e1:2f:fd:01:53:2c:1e:
e4:4d:71:09:75:62:d8:47:1a:22:61:11:3a:5b:81:ad:43:d2:
07:ee:ad:a0:6f:9b:c0:43:ad:e7:8e:8f:56:58:e6:1f:8c:68:
e9:ff:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org