Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/QDREiWcXvDMPPw8bOo9mrZJO-wE.roa
File: QDREiWcXvDMPPw8bOo9mrZJO-wE.roa (raw, json)
Hash identifier: Dai3f48jyHJryn5iW2PtDWdnw8gQ4Ap13nXk0TFBGsE=
Subject key identifier: 40:34:44:89:67:17:BC:33:0F:3F:0F:1B:3A:8F:66:AD:92:4E:FB:01
Certificate issuer: /CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Certificate serial: 05
Authority key identifier: B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/QDREiWcXvDMPPw8bOo9mrZJO-wE.roa
Signing time: Thu 27 May 2021 10:25:06 +0000
ROA not before: Thu 27 May 2021 10:25:06 +0000
ROA not after: Fri 27 May 2022 10:21:02 +0000
asID: 23650
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Validity
Not Before: May 27 10:25:06 2021 GMT
Not After : May 27 10:21:02 2022 GMT
Subject: CN=403444896717BC330F3F0F1B3A8F66AD924EFB01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:53:2d:98:af:3c:a3:87:37:87:9b:28:b2:
86:30:15:c8:de:26:ba:c4:3d:0d:d6:17:95:ea:eb:
62:90:0b:e2:d5:2c:46:73:62:5e:25:91:b4:d4:34:
79:0a:d6:f8:14:67:7d:6f:c2:02:54:6a:84:f0:20:
a1:dc:13:55:06:d9:85:e1:7c:cb:b7:d5:1c:be:76:
cf:29:8d:c3:03:59:33:15:85:f7:ae:b6:2c:97:ae:
8e:ee:ea:93:4e:46:8f:35:0d:5e:4a:50:4c:50:ae:
28:41:84:c3:47:d5:03:a9:42:42:01:5f:a7:db:c5:
ee:e9:74:4f:f9:2c:91:e3:df:68:c8:ab:7d:cf:76:
5d:83:63:fc:d4:fd:67:7e:0a:b7:90:ec:ef:7c:f8:
c6:78:62:59:82:46:85:93:24:84:d2:70:d9:ea:a8:
56:8e:42:d2:61:55:12:7d:cc:98:00:43:04:af:da:
75:84:20:8e:85:a2:36:80:95:7d:55:86:5f:47:b4:
a6:75:27:fb:43:6f:75:ba:4d:2c:89:ab:f1:2e:53:
67:d3:29:b8:a7:8d:3d:35:7c:d7:17:33:6c:31:b4:
fc:f8:8e:ab:8b:75:7d:cc:2a:3b:69:83:f1:b8:41:
19:6b:34:79:bf:e1:b4:bf:90:23:92:d2:9c:44:4a:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:34:44:89:67:17:BC:33:0F:3F:0F:1B:3A:8F:66:AD:92:4E:FB:01
X509v3 Authority Key Identifier:
keyid:B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/QDREiWcXvDMPPw8bOo9mrZJO-wE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3c:79:21:29:92:d5:fe:c8:3c:e2:12:6d:fe:aa:1a:02:bb:25:
61:83:34:b7:2f:81:9f:77:65:ab:a2:78:ae:65:7e:fd:0a:0f:
38:50:95:c5:fe:83:fe:34:0d:9a:1c:01:7d:87:fb:15:8a:e9:
f3:76:02:fd:cc:85:0f:ab:9f:69:55:8d:4d:81:67:88:53:4e:
07:ba:b3:0f:da:f1:68:a3:fe:62:e0:8e:9a:1e:33:79:3f:76:
83:f5:14:93:b8:48:18:06:63:4f:67:2b:42:f7:5b:90:2b:8f:
74:b0:c6:e5:ba:f4:7d:fb:80:b4:92:d7:e3:27:7e:8a:a4:57:
05:58:d7:6b:eb:09:b8:95:5b:ca:84:8f:69:09:92:98:bb:40:
e9:1e:ff:2b:5d:ca:b2:73:85:7d:8e:57:b2:e5:a8:a2:9c:55:
20:ea:21:1c:73:2c:d5:df:fb:5e:83:df:d9:a0:e8:97:3a:74:
12:18:90:85:37:c2:43:6e:e5:64:de:ce:5e:9c:6a:8e:f9:b2:
80:3e:d9:8e:78:93:e5:4b:c3:0c:6a:ba:34:08:99:0a:78:56:
f9:90:23:37:9b:1e:96:09:0d:9d:d2:6e:8f:cf:58:5f:28:70:
f2:8f:3a:7e:53:62:99:e7:34:94:f9:23:cc:7b:20:ba:d0:a9:
1c:8a:99:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org