Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/uE7C-SUCUmmA9m7TupaufFy044s.roa
File: uE7C-SUCUmmA9m7TupaufFy044s.roa (raw, json)
Hash identifier: XRA45mze6jt9tk7ktGSHSPkqZ1iPWP5RscwMLDEtGqM=
Subject key identifier: B8:4E:C2:F9:25:02:52:69:80:F6:6E:D3:BA:96:AE:7C:5C:B4:E3:8B
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0386
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/uE7C-SUCUmmA9m7TupaufFy044s.roa
Signing time: Fri 11 Nov 2022 07:19:29 +0000
ROA not before: Fri 11 Nov 2022 07:19:29 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 34549
IP address blocks: 114.66.140.0/22 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.212.0/22 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902 (0x386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Nov 11 07:19:29 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=B84EC2F92502526980F66ED3BA96AE7C5CB4E38B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:0f:2f:b9:e7:b2:f2:59:30:6b:f6:10:a3:
fd:fc:7c:2d:0f:6e:e6:63:b2:22:11:cb:0f:00:d3:
e2:23:f6:71:c7:cc:1d:01:48:15:9d:d7:84:89:23:
5c:0e:82:36:3b:89:78:f8:6d:75:f6:ab:12:8c:92:
c9:b7:ae:ff:73:cb:ee:40:3a:7c:77:3f:94:bb:ff:
5c:7c:ea:b4:be:13:d5:93:4d:e8:40:4a:ab:98:79:
81:1f:22:34:02:7a:d8:ee:20:22:25:06:d5:3d:ad:
2f:3c:cb:3c:e5:83:da:69:76:5e:aa:3b:8d:09:15:
61:57:66:d3:40:cf:53:21:11:80:3c:24:e2:fa:26:
be:64:6a:48:ce:0b:38:ee:bb:53:cf:93:8e:23:e9:
6c:5c:41:ce:3d:ea:4c:52:e1:e6:17:8a:d3:c4:7d:
5a:c6:2b:8b:e2:7d:61:21:9f:d3:10:31:7f:24:76:
b1:7d:0e:25:98:6d:a1:98:0d:f3:c3:78:7f:ea:f2:
9d:33:aa:18:f4:f9:03:4a:67:07:4d:9f:10:31:40:
62:07:66:37:9b:78:ed:d8:dd:bc:d6:f7:67:21:4d:
61:24:fd:82:3b:71:51:b7:1b:af:1c:c6:ac:30:2c:
86:0f:f5:f1:e3:13:f8:00:95:1a:d2:42:0e:e1:1c:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:C2:F9:25:02:52:69:80:F6:6E:D3:BA:96:AE:7C:5C:B4:E3:8B
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/uE7C-SUCUmmA9m7TupaufFy044s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.140.0-114.66.147.255
114.66.212.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:16:4b:c5:de:31:34:2c:08:a5:ce:f0:fd:9f:ea:d1:99:86:
43:00:36:52:c4:d8:7a:c9:82:ef:f4:98:ec:88:c0:4d:3c:25:
05:bd:5e:69:b3:15:9e:05:cb:49:00:2f:31:ac:ce:31:6d:c4:
42:ed:8a:7e:3d:ce:20:ab:bf:15:c3:35:8c:f0:87:06:f6:0f:
97:d4:99:23:4f:fd:5a:1a:96:3b:51:89:34:25:0c:01:7e:ea:
02:d6:68:c7:c8:d3:3a:f3:64:8e:e7:52:5f:01:26:80:5d:de:
4b:35:c9:df:3e:77:0a:1e:78:94:26:a1:c2:18:ae:44:ca:df:
0f:72:dc:33:ac:8b:6b:8b:9f:16:19:51:79:c4:15:e3:53:1b:
6d:b1:11:63:0c:34:96:f1:d9:4c:d8:f2:3f:a0:a0:7c:7c:5d:
4e:e5:02:50:ed:2b:bb:b5:99:5f:6f:06:d4:a3:66:48:6e:97:
bf:2f:48:a1:0c:e8:1c:fa:2b:ac:c9:fd:7a:99:31:64:b6:7d:
6d:2a:93:4f:e4:17:76:1b:3b:23:6a:74:a6:4d:3e:b4:ad:07:
42:64:f2:c8:7f:22:cc:e0:60:46:a4:69:11:49:fb:66:8a:12:
cf:31:75:08:61:29:0e:a4:f5:3d:f3:71:60:54:8a:30:33:ad:
6e:65:e5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org