Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/wy29VT4OXk4vT4VlqVlAodgVV1w.roa
File: wy29VT4OXk4vT4VlqVlAodgVV1w.roa (raw, json)
Hash identifier: 0QgtQrX0GprpsuhDd5mI5+PgeuCr3ZLqJjTf7s4rdgI=
Subject key identifier: C3:2D:BD:55:3E:0E:5E:4E:2F:4F:85:65:A9:59:40:A1:D8:15:57:5C
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: CD
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/wy29VT4OXk4vT4VlqVlAodgVV1w.roa
Signing time: Fri 08 Jul 2022 06:30:51 +0000
ROA not before: Fri 08 Jul 2022 06:30:51 +0000
ROA not after: Fri 09 Jun 2023 06:51:49 +0000
asID: 34549
IP address blocks: 59.83.132.0/22 maxlen: 24
114.66.128.0/20 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.148.0/22 maxlen: 24
114.66.152.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.168.0/22 maxlen: 24
114.66.176.0/22 maxlen: 24
114.66.180.0/22 maxlen: 24
114.66.184.0/22 maxlen: 24
114.66.208.0/22 maxlen: 24
114.66.216.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jul 8 06:30:51 2022 GMT
Not After : Jun 9 06:51:49 2023 GMT
Subject: CN=C32DBD553E0E5E4E2F4F8565A95940A1D815575C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:3a:6f:3d:de:66:c5:49:18:2c:ea:03:d5:
d0:b7:74:4d:6e:6f:41:d3:54:a1:1e:68:a5:e3:53:
5d:b2:32:eb:61:1f:a5:c3:f6:a5:3d:2b:33:72:aa:
02:0f:70:63:0d:6e:ed:44:66:63:c3:a9:1a:26:a1:
89:73:60:3b:80:66:69:95:2f:5c:4a:95:47:0d:4f:
c6:95:f5:a5:80:ac:6f:52:56:48:36:98:b9:c3:36:
2e:46:94:ba:f5:bf:20:d5:7c:63:99:13:89:e7:ab:
10:d0:e9:6c:1f:6c:6a:13:86:88:ac:53:cb:c5:34:
74:60:14:5a:b4:cb:cc:f5:64:5c:11:2e:ed:23:8b:
c2:10:86:97:0d:81:4d:72:62:51:d3:38:60:c5:b8:
57:8f:92:98:0f:1f:de:dd:a8:fc:92:1d:86:eb:a8:
a0:53:cd:20:5b:bb:12:ff:1f:43:d0:d8:b3:96:ab:
56:66:38:41:4a:ee:69:3c:09:6f:44:9a:49:3c:02:
bc:91:3a:29:90:53:81:73:97:0f:e8:df:c1:b6:20:
38:99:5e:ae:06:ca:85:78:52:32:0e:a5:a5:da:1b:
d0:d1:e1:db:5b:93:cc:da:7f:e3:7e:e5:a1:5a:c0:
26:7a:a9:a2:dc:5b:30:60:2a:1c:2d:7a:c9:b6:67:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2D:BD:55:3E:0E:5E:4E:2F:4F:85:65:A9:59:40:A1:D8:15:57:5C
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/wy29VT4OXk4vT4VlqVlAodgVV1w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.132.0/22
114.66.128.0/19
114.66.168.0/22
114.66.176.0-114.66.187.255
114.66.208.0/22
114.66.216.0/22
114.66.224.0/21
Signature Algorithm: sha256WithRSAEncryption
17:6f:72:72:34:00:a5:10:c7:13:2b:21:91:61:e1:79:e7:34:
f5:df:e9:2d:72:22:cb:3a:0a:5a:67:d2:c5:44:8f:58:ee:35:
dd:fb:19:6f:4d:fb:e9:3e:db:18:c6:fb:a1:9a:19:1e:b6:9c:
b5:42:51:56:5f:dd:69:a5:56:9b:e8:73:41:d8:e1:9f:58:30:
99:12:ce:e2:f5:f2:e1:af:7f:8d:92:5f:c5:b3:09:0e:ed:cd:
1e:f1:c6:9d:29:55:94:9c:34:dc:67:67:23:7a:24:ef:60:04:
75:39:32:79:90:2e:24:8c:5f:10:eb:cf:8f:ed:3f:54:02:15:
00:be:ba:c3:65:5d:fa:ee:29:31:ae:1e:fd:be:b6:80:fe:b7:
ae:f5:6d:cb:7b:0f:3c:f7:cd:aa:84:b9:7b:b8:b3:c8:32:4d:
07:19:a3:10:f7:b8:39:df:ec:b0:6f:00:9f:96:31:d4:2d:66:
79:26:df:b6:db:33:f8:8f:d6:97:54:9f:66:23:29:5d:1a:0c:
5b:b1:ef:8f:e9:9c:a7:50:b5:32:20:79:d9:0a:d6:c6:d3:35:
fe:5f:8b:92:6e:92:f9:8a:c6:a3:e0:11:03:91:1f:7c:95:63:
be:c3:60:9d:c1:96:f1:8a:51:48:3e:72:21:eb:d1:da:fa:4d:
57:cd:9f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org