Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/LfGNLaklnUZCqUUSv17zHm0_TL8.roa
File: LfGNLaklnUZCqUUSv17zHm0_TL8.roa (raw, json)
Hash identifier: UvuPXMC/MLiVgnqVnYToy2I/95EfjjHLdpdxvr70kSg=
Subject key identifier: 2D:F1:8D:2D:A9:25:9D:46:42:A9:45:12:BF:5E:F3:1E:6D:3F:4C:BF
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 1023
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/LfGNLaklnUZCqUUSv17zHm0_TL8.roa
Signing time: Fri 19 May 2023 05:53:48 +0000
ROA not before: Fri 19 May 2023 05:53:48 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 138950
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4131 (0x1023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: May 19 05:53:48 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=2DF18D2DA9259D4642A94512BF5EF31E6D3F4CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6c:c3:92:e7:ff:0b:c6:6b:4d:da:fc:f5:f4:
ea:b8:3c:4b:17:79:bf:4a:63:e4:40:0d:eb:9a:7c:
31:6b:b5:93:5a:f8:d1:93:eb:cb:7b:0a:57:3a:f1:
a7:d5:66:ec:50:9f:a9:a4:c6:d4:67:0f:b1:56:19:
46:5e:29:47:f6:b8:4f:1d:14:a0:98:d1:00:4d:71:
88:72:db:e1:fc:77:d7:5c:a8:fc:8f:02:82:8e:28:
f5:ba:18:64:fb:5b:2e:fb:ac:30:70:8f:54:28:69:
b8:78:fb:09:67:f0:b9:71:c3:e6:e2:44:37:15:02:
8b:6f:ed:da:06:98:7a:cf:b0:eb:47:2c:26:3a:39:
aa:79:7c:76:89:0d:5f:d3:55:a7:ff:a3:bf:75:29:
08:5e:da:79:55:d3:f0:9d:aa:7e:c5:95:63:78:80:
3c:49:6b:b7:6a:d2:23:63:0f:b1:58:0b:af:d5:8f:
7f:13:b0:b2:be:fc:bb:7c:dd:e0:fd:91:69:03:c9:
33:b7:41:28:b8:c5:a1:6e:5d:53:00:9e:af:f7:4f:
89:23:ce:35:54:2d:eb:2f:6d:78:6d:00:13:79:81:
6e:2a:66:1a:21:14:47:df:15:f9:80:4c:00:3f:18:
43:9e:c0:05:0e:74:57:af:74:f9:6b:ac:d6:72:e2:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:8D:2D:A9:25:9D:46:42:A9:45:12:BF:5E:F3:1E:6D:3F:4C:BF
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/LfGNLaklnUZCqUUSv17zHm0_TL8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
af:71:f2:e6:0e:eb:90:43:0d:7b:f5:1b:dd:60:2e:c3:15:9f:
b8:ad:b4:c2:4f:69:c1:6c:0b:fa:17:5b:89:be:55:c9:c9:6b:
26:0d:e6:31:4c:88:0c:81:14:55:51:9c:61:00:b0:ba:11:e5:
b8:dd:14:20:fc:b8:56:17:87:c0:31:02:81:e0:00:f0:b4:65:
91:a5:3a:ce:7e:50:44:b0:b3:51:63:15:bb:18:18:6f:3c:85:
4c:07:bd:71:f4:1d:4b:8e:cf:62:88:c2:fb:ab:8a:24:2e:dc:
26:c5:54:1f:e1:40:46:2b:b3:1d:0e:4b:92:c1:ee:7a:ab:87:
fc:71:ce:12:49:7c:04:f4:59:4c:0d:21:af:84:ee:cd:0a:59:
6e:ee:9b:04:39:c6:6d:93:3c:6a:13:a5:70:7e:fa:3f:ef:26:
42:a3:95:8f:a8:e6:d4:aa:80:6d:4f:4d:80:dc:18:9d:de:bf:
d3:b7:9b:e9:77:b4:7c:19:10:01:a8:f0:a9:b2:b5:d1:31:10:
79:78:7a:63:13:b7:0e:93:f2:71:b6:cd:ef:94:56:a6:7a:1c:
90:cb:86:35:bc:25:dc:86:a3:4e:60:b9:8a:a1:bd:9d:b3:0c:
0c:1b:9e:1e:78:62:05:ce:9b:8f:3e:97:5c:33:fc:2b:d6:88:
c2:d7:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org