Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/Gr3_Ggwp3v_U5uY7JlMC9986l4o.roa
File: Gr3_Ggwp3v_U5uY7JlMC9986l4o.roa (raw, json)
Hash identifier: MLO1pHw4+hLjc2w7pWnzdfOQ/jqVToQm/CB5FICsL7Y=
Subject key identifier: 1A:BD:FF:1A:0C:29:DE:FF:D4:E6:E6:3B:26:53:02:F7:DF:3A:97:8A
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 101F
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/Gr3_Ggwp3v_U5uY7JlMC9986l4o.roa
Signing time: Fri 19 May 2023 05:53:46 +0000
ROA not before: Fri 19 May 2023 05:53:46 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 4837
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4127 (0x101f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: May 19 05:53:46 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=1ABDFF1A0C29DEFFD4E6E63B265302F7DF3A978A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:32:20:a3:a7:0d:54:35:91:4a:d9:df:fe:
d7:a7:d1:89:93:f9:98:49:62:dd:f1:f2:36:de:48:
78:a4:af:cb:d6:b9:65:98:7c:2c:95:e2:ae:9b:f6:
bc:50:6d:4d:d5:f1:77:5b:ef:e9:49:f9:54:ea:c0:
f3:83:67:09:24:92:1f:29:b2:a0:1b:e5:24:8c:5f:
9b:bb:4e:41:fa:39:11:ad:6d:c5:93:b2:99:25:06:
a6:c7:2b:da:cb:00:2a:8f:38:50:94:cc:6f:6f:33:
f2:0b:35:93:85:8f:2d:f9:93:00:e8:5e:ca:50:ec:
57:9f:ae:fc:42:ed:bf:3f:19:bb:38:04:80:96:ae:
9b:a5:ec:03:e1:50:aa:f3:0b:e6:d2:1e:8e:50:9d:
3a:44:4e:06:f5:9e:94:67:9b:3b:c8:b2:3a:6a:a8:
b7:3b:72:2f:83:62:e0:07:4e:2a:d4:57:0d:05:da:
e8:19:b0:cc:1b:3b:e2:c9:cd:0d:ad:19:2e:4e:90:
0c:69:a6:c4:38:12:e5:f4:30:15:0b:52:89:ec:25:
f5:4d:10:a1:d3:13:a8:24:7b:ee:b9:e5:6d:bf:1a:
ef:da:61:e4:6b:3a:63:47:b7:17:db:9f:8e:f3:68:
bf:f1:32:ee:64:e6:4d:40:42:98:64:14:47:30:7b:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BD:FF:1A:0C:29:DE:FF:D4:E6:E6:3B:26:53:02:F7:DF:3A:97:8A
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/Gr3_Ggwp3v_U5uY7JlMC9986l4o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
58:41:27:0d:5b:6b:00:cd:f5:16:d5:f6:2e:16:9b:29:2e:ac:
26:33:86:2c:08:82:31:e2:9a:a1:03:6f:15:28:8a:33:a9:77:
15:9a:09:c8:e9:95:20:ea:00:80:3f:eb:7c:e1:a5:90:41:44:
67:c7:05:f2:d4:2f:9a:ad:1a:db:3b:a6:e5:ea:f8:6e:b2:33:
5a:dc:89:46:93:01:d5:07:fa:80:e3:cf:4c:fb:3e:b8:81:a5:
fb:c2:79:16:9f:1f:39:87:cc:c9:bf:bb:e9:42:60:e6:0b:8b:
a8:fa:ec:64:fd:93:4e:4c:d7:71:b1:92:89:94:57:13:16:65:
69:01:57:49:2c:d6:b3:c1:2d:d0:9c:86:5e:43:d1:5e:0d:e1:
8d:ed:f9:67:b3:94:86:aa:87:35:c9:0c:a2:4f:9b:d2:21:9a:
d7:23:ee:b3:55:f5:a8:5a:6e:9d:ca:1e:6c:70:e8:d8:e0:b1:
2d:b3:a8:c9:0d:e0:e1:98:ac:0f:8c:74:e2:9a:5c:b5:5d:73:
22:f1:13:e8:42:06:44:2c:e7:c4:6a:81:0c:b0:d4:44:23:bf:
55:07:2e:82:15:c5:dc:81:f5:ff:0b:11:25:e4:42:36:92:5e:
9a:69:b3:2b:66:a1:b2:b1:51:ff:7c:53:a8:c6:ab:43:b6:67:
44:c3:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org