Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/qcJ33UgFwJsuMhtUc40tJKrM41Y.roa
File: qcJ33UgFwJsuMhtUc40tJKrM41Y.roa (raw, json)
Hash identifier: ZTHGIVUw8CVenYmz5ykRWO39K1UyFJ0kj6162rshKGo=
Subject key identifier: A9:C2:77:DD:48:05:C0:9B:2E:32:1B:54:73:8D:2D:24:AA:CC:E3:56
Certificate issuer: /CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Certificate serial: 081A
Authority key identifier: 98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/qcJ33UgFwJsuMhtUc40tJKrM41Y.roa
Signing time: Fri 25 Feb 2022 09:35:05 +0000
ROA not before: Fri 25 Feb 2022 09:35:05 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 141373
IP address blocks: 59.83.132.0/22 maxlen: 24
59.83.176.0/22 maxlen: 24
218.98.73.0/24 maxlen: 24
218.98.74.0/24 maxlen: 24
218.98.75.0/24 maxlen: 24
218.98.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Validity
Not Before: Feb 25 09:35:05 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A9C277DD4805C09B2E321B54738D2D24AACCE356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:04:07:ef:bb:8a:41:d3:fb:3b:6a:c2:4b:
b3:46:6f:7e:fa:53:b1:f2:d9:ed:9d:b9:96:c1:ec:
38:f8:90:f1:37:3e:53:b2:e3:09:ea:62:59:92:0f:
3d:5b:5e:ea:45:9d:d5:0a:03:5c:e4:67:04:34:81:
01:ad:cf:3c:f7:d5:1b:9c:16:bd:20:94:99:b1:3e:
9b:3c:4c:d8:52:df:98:5e:4d:45:f7:a9:38:5c:10:
26:ef:37:25:24:ff:56:7a:be:a8:f4:d5:ff:69:c4:
a7:07:3e:a4:68:e9:b3:a2:ae:57:ed:4b:3e:2f:a7:
92:7d:0d:8e:fd:02:d3:f9:6e:c1:6c:5e:31:60:8c:
0a:01:36:5e:dc:c9:64:4d:66:89:a5:3a:dd:69:47:
1c:da:d1:40:46:e4:6b:ae:6c:20:44:7b:ad:cc:4a:
ec:f7:20:e9:38:85:8b:e1:a4:66:74:71:34:61:7f:
02:7f:c2:26:69:6c:51:5c:1c:9c:3e:fc:5a:a3:ff:
a6:c9:96:90:30:2c:75:25:d2:6a:ea:c0:61:ba:32:
05:90:f2:ea:05:61:25:59:14:a6:31:17:0d:ad:e9:
bb:b3:87:65:6d:e1:6e:14:da:d5:4f:24:05:18:64:
ae:d5:d2:1e:71:5a:27:df:d0:b5:46:5f:6e:5d:fb:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:77:DD:48:05:C0:9B:2E:32:1B:54:73:8D:2D:24:AA:CC:E3:56
X509v3 Authority Key Identifier:
keyid:98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/qcJ33UgFwJsuMhtUc40tJKrM41Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
59.83.176.0/22
218.98.73.0-218.98.76.255
Signature Algorithm: sha256WithRSAEncryption
23:38:48:de:07:89:b2:77:96:b6:5f:02:c2:c3:82:5b:e6:25:
29:b5:23:dd:8c:02:7b:fb:57:85:4a:40:e8:03:01:ee:de:29:
19:5d:48:4e:da:a9:94:c4:a9:e1:20:af:3e:b8:c4:c3:78:83:
12:a7:54:46:2f:96:b7:fb:4a:68:32:a1:c6:11:4e:7a:e6:66:
45:86:07:b8:66:a3:83:90:9e:22:77:fa:19:8c:79:06:66:2b:
f4:8e:25:c8:81:7d:d3:9d:1b:c5:ad:82:b6:9e:2a:04:58:ef:
0e:03:67:cb:12:df:ac:1e:20:89:39:bc:20:2a:95:8d:43:c9:
9b:26:89:21:c4:5e:5b:98:13:49:d6:8c:0c:e1:6c:23:06:53:
53:3e:cf:3e:df:af:38:7a:20:9f:7b:5e:bf:ff:b0:ca:59:86:
be:f9:b7:cc:9e:bc:f4:14:b5:93:b1:f3:07:35:17:bc:ec:25:
c4:5f:ab:71:38:c3:cc:94:39:2c:89:42:94:ba:4d:6f:e8:95:
c0:bd:15:01:ea:9f:71:5c:94:66:33:4b:ab:32:df:4c:6c:fb:
a0:11:e1:f0:6d:95:05:d6:fe:79:07:6f:aa:f2:1d:21:40:63:
0f:b1:fa:d4:e7:40:67:14:32:61:81:dd:17:5d:27:07:6c:55:
93:bb:86:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org