Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/_EEcxZ65njb71X0JMj7IC5meL_o.roa
File: _EEcxZ65njb71X0JMj7IC5meL_o.roa (raw, json)
Hash identifier: jPCIYTwdCUPGXwEBWNwBKmuL3vQMAJZuOX98nT1V7jk=
Subject key identifier: FC:41:1C:C5:9E:B9:9E:36:FB:D5:7D:09:32:3E:C8:0B:99:9E:2F:FA
Certificate issuer: /CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Certificate serial: 0A
Authority key identifier: B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/_EEcxZ65njb71X0JMj7IC5meL_o.roa
Signing time: Thu 27 May 2021 10:25:07 +0000
ROA not before: Thu 27 May 2021 10:25:07 +0000
ROA not after: Fri 27 May 2022 10:21:02 +0000
asID: 18257
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Validity
Not Before: May 27 10:25:07 2021 GMT
Not After : May 27 10:21:02 2022 GMT
Subject: CN=FC411CC59EB99E36FBD57D09323EC80B999E2FFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:aa:e2:83:b7:12:da:c9:68:83:24:a7:19:
50:a7:9a:7d:43:b4:b6:a4:8f:15:5b:5c:84:04:72:
df:92:78:60:50:1b:30:e1:a3:1c:0b:ee:d1:d6:15:
ce:99:a7:42:02:02:55:99:12:e8:cc:cb:b4:ef:c5:
1f:a0:10:a0:ef:2c:2b:16:8e:b2:64:93:80:55:37:
5a:4e:ce:88:2c:b7:e2:7a:7e:4e:3f:e5:ca:e0:a6:
e7:bf:1c:a1:69:22:f1:86:69:d4:51:72:2c:c5:9b:
91:11:83:05:77:28:b4:3e:42:b7:d6:d9:00:34:a1:
ea:17:30:16:0f:06:68:84:8f:28:bd:c7:da:6a:40:
2f:22:16:8b:d8:9f:3c:76:58:f4:36:ea:df:ab:8e:
5f:5d:18:c2:b0:a1:8e:86:80:c6:c7:17:88:43:17:
dc:72:9f:98:b7:38:20:fc:53:3e:fc:2b:63:3b:83:
b9:f4:e5:b2:8b:8d:d3:ee:3e:ab:e3:83:6d:9b:0a:
e7:6c:d7:d2:1c:5a:a4:6d:e7:a2:cd:c0:fa:c7:eb:
4a:4e:d3:f8:78:27:03:d7:1e:41:4e:44:f7:14:a5:
69:7c:e0:1b:f3:fd:34:df:78:34:3b:a2:22:1b:5e:
c5:e4:f9:1c:fc:21:e7:c6:15:63:d5:37:a3:49:1c:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:41:1C:C5:9E:B9:9E:36:FB:D5:7D:09:32:3E:C8:0B:99:9E:2F:FA
X509v3 Authority Key Identifier:
keyid:B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/_EEcxZ65njb71X0JMj7IC5meL_o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
60:ed:47:26:84:ca:6b:f7:70:45:6e:a6:17:99:e6:60:d4:15:
1a:09:8f:57:87:c0:bd:1b:ec:06:97:05:12:02:94:2e:f6:00:
03:16:ee:98:7b:af:33:7d:3b:f5:4a:1d:59:d1:e1:4d:7c:88:
93:f5:88:7d:7a:f0:64:ae:b6:c5:f3:6a:1b:21:19:1a:84:96:
00:31:1d:25:8a:d9:c2:9a:b7:23:8f:0a:d8:40:a1:c6:ff:77:
f5:8b:99:82:a2:bc:35:61:e4:5f:33:9b:74:cc:05:9f:f0:25:
84:75:95:17:ed:af:4a:8f:fe:9b:73:27:2f:f9:19:a5:23:de:
db:41:db:ee:76:6f:49:56:eb:9f:e3:5f:d3:b3:d0:4e:e4:11:
d1:72:cc:d9:11:d3:d5:06:cb:28:38:9a:8f:fe:13:c5:98:a3:
b7:71:7e:94:40:97:e6:a3:24:81:55:99:33:65:a3:e0:bd:f9:
89:4f:6f:ba:55:b1:4f:cb:25:8f:d3:2e:80:16:c9:e8:60:eb:
0c:9c:ed:5e:fe:ad:de:a8:2b:8a:76:01:cd:96:08:04:05:d0:
68:3b:9e:6d:6c:1b:a3:9c:d0:f2:ea:d1:4f:45:12:19:51:10:
ac:e7:ae:7b:54:d7:11:c9:81:cc:b2:8f:dc:19:86:78:e5:31:
12:26:05:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org