Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/ru_yTgTOeNXNkop70tyx1bjYX3s.roa
File: ru_yTgTOeNXNkop70tyx1bjYX3s.roa (raw, json)
Hash identifier: VHCrxjNxPzfkLUGQJD7lHwzyjoif3WRBvAw+2I/eTd8=
Subject key identifier: AE:EF:F2:4E:04:CE:78:D5:CD:92:8A:7B:D2:DC:B1:D5:B8:D8:5F:7B
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 05
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/ru_yTgTOeNXNkop70tyx1bjYX3s.roa
Signing time: Wed 01 Jun 2022 07:10:41 +0000
ROA not before: Wed 01 Jun 2022 07:10:41 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 32242
IP address blocks: 218.98.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jun 1 07:10:41 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=AEEFF24E04CE78D5CD928A7BD2DCB1D5B8D85F7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:4e:8f:19:0f:c1:56:be:69:4e:b7:14:87:
f1:dc:b6:47:96:c6:ba:b7:65:05:b4:59:94:42:9c:
59:6e:67:78:3d:a4:ce:c9:fd:24:6b:b5:fa:83:e5:
a7:a3:7e:6c:e8:0b:29:ac:8d:30:dc:c3:e7:f6:c1:
9a:9e:82:ee:7b:4f:4d:c4:25:69:72:ae:41:b3:93:
30:36:f9:6e:aa:ab:59:c1:5e:85:cc:2a:4d:55:58:
87:1e:a1:16:20:42:ef:ab:1e:a1:8d:52:d7:79:4d:
2a:db:da:48:a0:cf:dd:c0:2c:f1:62:87:cc:62:3a:
24:2b:43:33:28:ba:04:eb:1c:14:71:9e:9e:c8:3a:
72:88:58:8a:35:1e:a8:87:9b:c3:5b:2d:8a:01:a3:
51:04:4c:0d:27:88:10:e9:e7:eb:23:68:30:b0:c4:
d0:fc:44:f0:8e:6b:fc:b9:74:4e:72:aa:10:0e:ce:
97:db:49:c5:de:c8:39:ee:c6:aa:89:7b:6e:82:78:
d9:df:c0:4a:6c:d0:8d:2e:58:81:37:8b:17:ad:11:
df:4b:3d:2d:17:23:fc:e5:82:ae:5c:10:1f:0e:24:
e9:e7:3a:e5:19:02:00:c8:1d:97:f8:70:d7:6b:1e:
7a:c8:35:29:41:5b:d8:9d:b8:7e:1f:45:46:e3:c0:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EF:F2:4E:04:CE:78:D5:CD:92:8A:7B:D2:DC:B1:D5:B8:D8:5F:7B
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/ru_yTgTOeNXNkop70tyx1bjYX3s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.98.64.0/24
Signature Algorithm: sha256WithRSAEncryption
af:1a:d0:10:7f:70:9a:b9:f7:d8:dd:60:28:eb:c6:43:40:68:
dc:b8:60:ea:ab:19:ff:25:6e:11:37:a7:9d:c0:0c:7c:ab:83:
b1:7f:a9:16:02:57:12:7d:f7:86:9a:0a:c2:fd:a2:a3:11:2f:
49:13:54:d1:f2:ff:6a:d1:0f:d6:1e:0e:40:1d:9d:9a:ae:70:
3c:cf:e6:bb:c8:42:f3:3a:1e:68:74:96:31:07:2d:06:e2:5d:
08:18:04:81:8d:b9:d3:db:5e:5b:96:f8:63:cb:c4:8c:b8:cd:
e7:73:09:5e:e9:32:87:0e:06:40:a6:41:a7:ea:50:f5:97:5c:
7e:d7:61:4b:fb:a3:75:96:64:37:55:65:27:e2:ab:eb:37:06:
60:10:e2:4b:c7:7f:51:e2:b9:7a:a1:ad:34:4f:d1:73:39:42:
00:e8:d9:4f:c2:6f:1d:68:75:af:55:c7:aa:fe:09:f5:7c:0a:
b9:92:99:e3:77:19:3c:43:9a:57:e0:4f:3b:80:5c:07:92:91:
46:05:88:21:c9:ef:84:4d:1a:8a:5e:0f:6b:a6:3b:1e:cd:83:
d8:fd:25:1c:69:6f:23:3d:f9:e6:25:8d:dd:52:66:b8:58:20:
14:7c:2c:ee:39:1e:ba:9a:12:de:1e:3c:9b:81:d0:e0:55:f2:
35:0a:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org