Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/4qxIOPY0Kt_Z9QCj5kjFxLhS2KQ.roa
File: 4qxIOPY0Kt_Z9QCj5kjFxLhS2KQ.roa (raw, json)
Hash identifier: 0R3rD+o9VFuLa3FxNn12iFJOr0nCT/WBNAo8/3iughA=
Subject key identifier: E2:AC:48:38:F6:34:2A:DF:D9:F5:00:A3:E6:48:C5:C4:B8:52:D8:A4
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 1022
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/4qxIOPY0Kt_Z9QCj5kjFxLhS2KQ.roa
Signing time: Fri 19 May 2023 05:53:48 +0000
ROA not before: Fri 19 May 2023 05:53:48 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 18257
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4130 (0x1022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: May 19 05:53:48 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=E2AC4838F6342ADFD9F500A3E648C5C4B852D8A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:f2:1c:25:1a:96:81:fc:d9:0d:d4:ff:05:
88:72:e1:e4:f7:e8:07:3f:02:8f:0b:06:05:b8:17:
89:9e:7b:96:a3:f6:b0:d7:c7:ee:2b:9b:f6:85:5d:
aa:71:06:96:af:c4:da:e0:a0:97:6b:06:65:82:52:
4a:7d:67:f4:30:e3:89:7c:de:51:8b:4a:3e:f8:c4:
ae:3e:28:88:28:51:16:97:30:98:2f:58:95:07:e5:
d9:d6:c9:d1:14:e5:a5:b0:57:88:83:ed:86:d4:e1:
a7:03:ee:10:8e:1a:2e:26:c2:31:f2:b6:01:2d:3e:
c8:cd:79:cd:aa:d5:c5:c3:b1:f1:e7:46:45:5f:c9:
62:e5:f9:37:16:c5:38:6d:25:4c:ce:f4:91:11:68:
f5:8b:40:a4:91:ea:05:da:95:dd:1c:fe:1f:98:4c:
27:58:0c:ad:97:ca:b9:ca:1d:3e:3f:fa:80:4e:3d:
96:cc:59:40:b2:19:9b:08:ea:08:71:66:32:1a:be:
51:c6:61:68:60:e2:af:94:4d:4e:6b:d8:50:a9:d5:
cc:30:ae:21:fd:98:47:df:3d:28:b1:dc:ef:27:cc:
fb:be:db:e3:b9:e6:28:eb:a8:ea:2e:e6:44:29:cf:
c8:9d:d1:9b:48:3a:eb:cc:e0:45:41:72:03:0a:96:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AC:48:38:F6:34:2A:DF:D9:F5:00:A3:E6:48:C5:C4:B8:52:D8:A4
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/4qxIOPY0Kt_Z9QCj5kjFxLhS2KQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8f:68:24:6b:96:0f:c6:ca:ca:ab:22:66:ef:5f:42:07:03:c1:
c0:42:b5:47:dc:c7:72:b4:c9:19:21:b0:71:8c:90:7f:ce:9e:
0c:87:a2:2b:75:31:eb:65:69:b3:5f:41:eb:a7:d5:71:80:47:
71:65:13:9e:3b:21:59:91:a1:af:45:93:cb:57:78:f2:d1:16:
1f:14:2d:cb:6d:c6:a9:f0:92:8b:f7:e5:84:10:33:69:a5:7a:
91:b7:e1:42:2e:f5:d3:0b:69:14:48:1f:ce:7b:d2:15:d3:1b:
fe:ce:25:41:c7:f5:b5:3d:7d:54:c6:82:72:1e:4e:51:79:eb:
d1:50:cb:5f:38:d0:af:b6:e6:7d:59:04:84:63:c5:c6:e2:24:
74:e0:e7:dd:6c:34:d4:91:5d:5c:bf:9c:08:fa:42:90:9b:5f:
b3:54:4f:44:4b:c2:00:13:90:b6:b5:21:1c:86:c8:ac:22:95:
0c:87:40:4e:27:c2:27:2e:92:95:af:ae:32:3f:10:c3:de:0e:
61:40:e6:3f:44:ef:0e:49:d0:30:e5:9f:4a:e5:f1:70:57:c5:
f0:b5:69:fa:e2:44:9b:78:05:c9:b3:d8:8d:ac:1e:a7:36:13:
f1:82:16:69:03:09:ff:67:c5:3a:7a:3e:53:95:5c:78:91:03:
ad:fe:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org