Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/ybYHwWSL5QKl5gE3J4wcEq8dN4w.roa
File: ybYHwWSL5QKl5gE3J4wcEq8dN4w.roa (raw, json)
Hash identifier: WocYhv1jNnb1hoTg8OGV/S4cEZu7P0GAEIj32zBelmY=
Subject key identifier: C9:B6:07:C1:64:8B:E5:02:A5:E6:01:37:27:8C:1C:12:AF:1D:37:8C
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 07E9
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/ybYHwWSL5QKl5gE3J4wcEq8dN4w.roa
Signing time: Mon 19 Jun 2023 08:35:50 +0000
ROA not before: Mon 19 Jun 2023 08:35:50 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 34549
IP address blocks: 59.83.136.0/21 maxlen: 24
59.83.240.0/21 maxlen: 24
114.66.212.0/22 maxlen: 24
218.98.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2025 (0x7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jun 19 08:35:50 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C9B607C1648BE502A5E60137278C1C12AF1D378C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:49:ee:d7:1f:9c:39:c3:4d:9d:4b:1e:ec:
c7:82:f0:4b:ac:c7:95:da:a9:90:8f:ed:43:d8:f2:
33:f0:f8:dd:28:56:57:27:16:72:af:85:3f:b9:b2:
70:fc:50:44:7f:b0:06:3a:5a:7b:ed:03:8a:53:99:
76:14:6d:57:0a:ef:d1:30:5e:e0:5b:f7:61:29:27:
cb:bc:c2:98:21:cb:bc:fa:69:e5:67:7a:bc:5a:20:
4b:fa:85:35:18:e7:c1:df:6f:92:c7:83:6d:59:03:
d4:c4:c8:b3:a1:10:07:9a:ab:dd:67:d2:36:5c:ed:
a6:d5:d9:32:ae:63:85:5f:99:51:50:24:ec:a9:ab:
eb:f1:7a:35:8b:32:0b:9f:35:29:23:bd:d6:1e:7f:
ee:44:0a:01:64:fe:08:4e:69:da:30:13:67:d7:1c:
55:4b:f8:27:11:ea:6e:b0:bb:35:df:14:22:6e:2f:
3c:60:8d:97:20:e8:ec:21:37:cd:36:bb:5f:f3:0b:
5e:4d:4b:a7:9a:6f:3b:90:0b:85:07:50:fe:c8:73:
57:da:e5:90:0c:ec:c6:c3:9c:de:1e:a4:2a:b4:e6:
05:e7:15:29:04:55:3d:3f:d7:61:5d:72:f6:9f:9e:
fc:0f:46:0a:cd:ab:ff:e3:ce:0d:33:91:f2:6f:f5:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B6:07:C1:64:8B:E5:02:A5:E6:01:37:27:8C:1C:12:AF:1D:37:8C
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/ybYHwWSL5QKl5gE3J4wcEq8dN4w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.83.136.0/21
59.83.240.0/21
114.66.212.0/22
218.98.80.0/22
Signature Algorithm: sha256WithRSAEncryption
20:07:0c:fc:8b:83:6d:75:93:6c:fb:51:14:6a:f9:39:00:23:
c2:0d:27:a9:2c:6a:f1:c3:62:73:96:14:56:a6:e7:a7:1f:82:
9b:08:68:0d:35:b0:70:cc:09:fa:66:d4:d3:81:f0:f6:90:dc:
20:b0:d3:40:5a:9f:7e:b0:06:40:1c:94:8f:a8:d9:03:55:5c:
0c:8b:3a:c6:dd:45:a6:fe:3b:1b:91:c8:5f:a1:09:19:0c:df:
72:4b:7b:77:3c:ec:a6:dd:a3:7d:be:e5:f6:0c:4f:38:88:08:
96:d3:f5:b4:da:87:cc:0d:83:99:21:d6:07:bd:83:ad:66:38:
cd:7e:bc:ca:f7:04:b5:81:1b:79:3a:3c:82:5c:d6:ed:3b:ce:
11:c2:c7:e7:c6:08:d1:20:f1:f3:c7:f6:7f:50:d0:37:e5:89:
8c:27:56:33:08:ed:22:22:0d:51:2a:d6:76:32:3c:ae:0e:1a:
57:29:62:b0:b6:d2:93:ec:aa:4e:fd:49:b1:ee:c1:b5:65:18:
f3:47:0e:37:1e:2a:45:9c:82:67:80:88:c2:d4:b4:04:73:59:
f1:3d:76:ff:fc:82:eb:9e:af:d4:07:d7:d9:f0:24:32:1c:12:
be:44:2b:9c:55:26:22:13:43:99:ec:22:a7:d2:8d:a1:ee:f1:
0f:9f:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org