Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/KL7pyNZjMmvBl9g6YkHb_yqtO_c.roa
File: KL7pyNZjMmvBl9g6YkHb_yqtO_c.roa (raw, json)
Hash identifier: Z7aPNu+/77vHAbx2fh+ZWtyvMkO/gFrSVaBzVbR3hvA=
Subject key identifier: 28:BE:E9:C8:D6:63:32:6B:C1:97:D8:3A:62:41:DB:FF:2A:AD:3B:F7
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 0D95
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/KL7pyNZjMmvBl9g6YkHb_yqtO_c.roa
Signing time: Sun 08 Jan 2023 15:04:17 +0000
ROA not before: Sun 08 Jan 2023 15:04:17 +0000
ROA not after: Sat 06 Jan 2024 08:35:17 +0000
asID: 13444
IP address blocks: 118.184.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3477 (0xd95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jan 8 15:04:17 2023 GMT
Not After : Jan 6 08:35:17 2024 GMT
Subject: CN=28BEE9C8D663326BC197D83A6241DBFF2AAD3BF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:0c:ab:96:93:8e:f6:ea:87:52:65:31:fd:
c1:f5:76:44:26:ef:c9:69:bb:2f:84:84:f0:04:36:
8a:52:05:f2:aa:11:64:f5:4d:2d:eb:7d:7a:91:4d:
db:70:27:03:1e:53:52:96:7d:06:8c:ce:15:26:30:
7d:0e:24:a4:eb:2f:bc:38:4c:8b:1f:18:52:72:00:
51:79:0a:3d:76:6f:35:fa:5c:be:aa:c8:c9:3f:a9:
30:3b:a1:6f:4e:31:78:e6:43:e1:a8:48:9f:0a:64:
b8:f2:a3:ac:d5:be:77:27:a3:e1:62:99:83:43:e3:
97:fd:34:cf:12:a1:1c:96:5a:c2:25:82:9a:04:a0:
3c:32:87:8e:12:65:43:01:c7:05:78:ba:5f:a9:44:
31:ff:e4:4c:84:14:2e:62:12:5c:43:4b:3a:f2:0f:
a5:4e:9e:69:f1:9e:8e:f7:81:d7:70:d2:57:2a:ae:
24:31:58:06:fd:1e:ad:5d:ea:d1:17:b5:de:82:6c:
5f:1b:0b:ce:fb:11:b2:ae:8a:1d:e6:15:bc:90:ae:
91:61:83:ce:9a:6d:d9:70:6e:a4:6f:ec:88:5a:7e:
31:37:0b:0a:74:09:f8:05:fb:46:0a:67:0a:47:3c:
e4:d5:75:9b:41:47:5e:52:cd:a8:ec:8a:40:0e:76:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:E9:C8:D6:63:32:6B:C1:97:D8:3A:62:41:DB:FF:2A:AD:3B:F7
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/KL7pyNZjMmvBl9g6YkHb_yqtO_c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.248.0/21
Signature Algorithm: sha256WithRSAEncryption
71:1f:5e:24:6b:85:1e:40:4b:43:6c:f2:f0:21:fb:7d:bf:22:
80:13:54:51:41:c3:a0:e1:c5:45:bd:f7:7b:dc:6f:03:3b:d8:
b2:f2:d6:d7:d9:bb:7d:c9:89:c4:05:0f:86:02:39:26:3e:15:
f0:6c:e1:05:b0:e1:b7:fd:3f:26:04:78:92:02:48:57:92:e4:
2c:6f:fd:ac:3b:0a:8a:e8:91:8d:10:57:1f:87:32:4f:2f:52:
5e:5f:bb:f9:af:17:5b:5a:03:8c:69:59:f2:64:3d:65:06:fa:
fe:d8:48:c6:7b:df:6d:ba:41:2b:a7:5c:e3:2c:5c:88:f8:0c:
66:1c:e6:3d:59:30:2e:cf:40:16:0d:5d:a7:69:fd:cc:3e:30:
9a:d1:18:28:ff:ca:13:ae:37:47:86:28:15:8f:c4:7f:8e:23:
37:14:c6:86:5f:8a:52:07:5f:28:91:1a:db:83:4b:b7:66:6d:
8f:e1:6f:39:82:62:83:0a:a4:c2:6b:35:c2:cf:16:78:dc:ac:
26:3d:31:04:06:3b:80:b8:28:63:61:bf:e3:9c:76:81:8e:5b:
10:b8:b6:f9:cc:07:1e:bc:a9:7b:ce:c1:7c:cb:61:9e:ac:ef:
5a:49:d5:f4:97:2b:f8:90:f5:fa:dd:d4:3c:9d:c9:20:5a:5d:
2d:41:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org