Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/rPODy-opV9LU1ln05PWYhKBJslE.roa
File: rPODy-opV9LU1ln05PWYhKBJslE.roa (raw, json)
Hash identifier: IIEW9xhZT9FAUoLss90OaDabBc8iuqyTEjynQVMVo6I=
Subject key identifier: AC:F3:83:CB:EA:29:57:D2:D4:D6:59:F4:E4:F5:98:84:A0:49:B2:51
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 033C
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/rPODy-opV9LU1ln05PWYhKBJslE.roa
Signing time: Fri 28 Oct 2022 02:55:48 +0000
ROA not before: Fri 28 Oct 2022 02:55:48 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 34549
IP address blocks: 114.66.140.0/22 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828 (0x33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Oct 28 02:55:48 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=ACF383CBEA2957D2D4D659F4E4F59884A049B251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:9c:4f:31:dd:dd:2b:b0:ad:56:8c:87:9a:
32:5c:52:4b:c3:31:74:19:b7:78:1a:37:70:7b:34:
7b:88:24:a4:be:f3:59:27:2c:9f:7c:93:d6:5c:29:
8c:40:b7:e9:de:be:94:2d:87:d9:51:96:31:fe:b3:
f4:57:04:1c:9d:b0:ec:b7:a6:53:14:8a:2c:0a:c7:
28:ad:47:65:b3:8e:44:b9:1e:a3:72:24:a5:c6:ad:
90:48:ab:5d:aa:94:86:38:67:79:bf:b0:bb:8d:9e:
62:17:8b:4b:96:14:5e:2c:44:64:ad:ec:57:81:69:
9f:23:4f:b8:df:2d:ad:8b:2a:c9:04:d2:89:00:96:
5a:d7:ed:be:60:00:42:d7:70:b0:05:11:68:3c:93:
f0:02:d2:92:32:a8:d1:c2:52:b1:f4:0f:f5:58:e3:
66:38:c1:26:4b:d8:1f:2f:cf:d1:cb:2c:b7:1b:37:
6d:0a:9a:60:e9:88:1a:6d:23:10:87:ac:b3:75:e4:
00:2b:35:84:91:6f:14:00:9c:55:c4:af:e3:68:04:
b7:cc:a4:67:22:44:e8:dc:0a:de:f7:a9:13:d6:bb:
4a:77:e4:7c:47:fa:af:0c:62:35:8e:b5:27:3e:f3:
29:11:ab:76:c5:49:fc:47:25:59:aa:48:60:1c:1e:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F3:83:CB:EA:29:57:D2:D4:D6:59:F4:E4:F5:98:84:A0:49:B2:51
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/rPODy-opV9LU1ln05PWYhKBJslE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.140.0-114.66.147.255
114.66.156.0/22
114.66.212.0/22
114.66.228.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
11:4b:97:c8:f9:7f:0a:9a:ca:f6:42:16:d6:85:db:c5:5f:af:
6c:1b:b0:45:a2:a0:3f:77:a0:c0:b1:9a:15:32:24:7b:e1:e5:
90:d6:45:b6:99:78:e5:d7:5d:68:3b:82:92:5e:fe:a4:53:88:
61:1e:62:0d:82:2c:c2:dd:a6:41:c9:dd:6f:b8:ca:8c:8f:50:
26:5e:cc:04:36:27:7a:d7:f2:4f:71:09:5c:00:47:04:e9:fc:
0c:75:6f:fb:8d:76:9f:29:6f:00:1e:16:6a:2d:a4:3e:e0:a0:
58:47:23:af:86:df:f2:f9:1b:71:72:d4:56:a8:e5:0c:df:bc:
60:b4:59:0b:5f:49:20:62:5d:d1:5a:f1:55:71:f4:5f:d1:a5:
52:13:79:f6:54:05:67:28:f3:f4:96:dd:f5:51:5a:4f:c1:20:
be:48:ab:c8:f0:ab:ae:6f:33:66:29:ad:f3:23:8a:c6:5d:de:
f9:da:df:c9:c2:63:af:88:32:e7:d1:6a:ba:f1:f7:e8:22:87:
0a:89:11:25:a6:49:50:7a:54:7f:1c:5c:07:b5:0a:a0:4d:71:
78:e2:ef:a3:a3:90:96:65:03:e6:1d:85:45:32:ac:38:cc:80:
7e:02:6c:3e:03:7e:2d:36:8c:ad:6b:33:9e:b2:9e:08:50:ab:
54:d7:32:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org