Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/TlcbxI2xxYpKhH7B-R7vhfR0XMg.roa
File: TlcbxI2xxYpKhH7B-R7vhfR0XMg.roa (raw, json)
Hash identifier: x+6KwO/vn6oIuvftdv+rzPuLB+2qPG4EfqZUrN/dtV8=
Subject key identifier: 4E:57:1B:C4:8D:B1:C5:8A:4A:84:7E:C1:F9:1E:EF:85:F4:74:5C:C8
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 101C
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/TlcbxI2xxYpKhH7B-R7vhfR0XMg.roa
Signing time: Fri 19 May 2023 05:53:46 +0000
ROA not before: Fri 19 May 2023 05:53:46 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 134769
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4124 (0x101c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: May 19 05:53:46 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=4E571BC48DB1C58A4A847EC1F91EEF85F4745CC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:da:56:5e:ea:3c:64:49:60:e4:97:29:f8:
01:01:ed:9f:6e:c6:fa:42:25:16:e9:c9:86:41:66:
66:8e:4f:fe:4e:8b:87:af:5a:b0:73:e1:8c:34:e1:
ad:f4:c1:76:9d:f5:4e:c7:24:fa:54:a5:e7:1c:47:
17:11:e4:55:c5:5b:5a:34:60:63:6f:74:9c:8e:db:
d4:dd:da:a2:66:00:40:c7:aa:e7:f7:a4:dd:23:47:
cd:54:f0:28:16:c1:bd:a6:4b:55:d8:1f:f0:30:2c:
fc:fc:4a:98:51:b4:90:0f:52:0c:6c:08:61:75:e3:
15:62:1a:f8:2f:08:1d:25:13:c6:d9:84:ff:d8:77:
27:05:cb:ba:af:84:4e:19:eb:8c:0c:a1:15:41:47:
a3:8e:bb:a3:0f:4f:1e:4d:25:97:1a:78:2f:f8:6a:
45:e8:8b:36:af:27:d3:1d:25:f4:85:bf:bb:ac:9c:
f4:63:de:ee:fa:28:91:fa:70:36:47:5c:d3:e8:47:
d6:e7:de:26:24:fd:bf:f1:f6:f6:58:6f:df:46:90:
f7:09:03:7f:fc:1d:ff:0b:6c:04:bb:20:6c:91:d1:
d7:e0:0f:73:a9:5f:9c:07:d8:03:2d:f5:f1:f6:bf:
6e:c6:1a:18:65:7c:b1:60:78:63:5d:fc:54:f0:c1:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:57:1B:C4:8D:B1:C5:8A:4A:84:7E:C1:F9:1E:EF:85:F4:74:5C:C8
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/TlcbxI2xxYpKhH7B-R7vhfR0XMg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9b:a8:cf:b9:e2:cc:92:80:c1:a2:57:de:65:d9:14:c6:f6:54:
5d:c3:77:ae:86:3b:79:df:5c:1c:76:8b:ab:d8:fd:0e:6e:b2:
53:0a:20:50:e5:9e:03:d4:c5:d1:e7:1b:e7:0e:26:b0:7b:e5:
50:f2:47:85:c8:48:e8:c1:16:55:62:28:93:5f:be:9e:38:a9:
66:bc:fe:e9:60:0a:63:1c:5f:3f:2f:1a:15:91:77:3b:b2:0e:
58:07:6d:8d:c0:9d:c7:ea:98:98:8c:7c:60:8e:7d:99:c6:13:
d0:bc:b0:f5:83:99:9b:7f:55:59:bd:c6:96:f8:b8:20:8b:37:
4a:44:a2:3c:2c:c4:3e:b6:f7:a6:5d:f7:97:53:4c:ff:1e:3a:
dd:94:95:e0:fe:74:37:43:af:6f:42:6b:90:26:da:d2:c5:3c:
c3:04:e4:2f:56:b9:1f:fe:dc:fe:a0:4b:10:f5:82:ff:f5:68:
7c:1e:7e:8d:e3:12:02:66:70:c1:32:18:3d:2d:87:96:89:7c:
2b:1e:32:fe:31:03:b8:94:fc:7a:cd:55:18:66:d1:bf:eb:eb:
35:07:27:a2:91:9c:5e:88:b6:53:eb:69:b0:90:df:fd:63:37:
ce:ce:bb:b3:43:4d:ce:a7:4a:8c:d7:53:41:79:6e:43:c6:29:
34:4e:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org