Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/_KHKH1verW_rpdp8LhfCMNHkykM.roa
File: _KHKH1verW_rpdp8LhfCMNHkykM.roa (raw, json)
Hash identifier: VPXhWbl04UPaL6wLvV+CCKSSCCVFymszqDs3LV9Pnsg=
Subject key identifier: FC:A1:CA:1F:5B:DE:AD:6F:EB:A5:DA:7C:2E:17:C2:30:D1:E4:CA:43
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 094E
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/_KHKH1verW_rpdp8LhfCMNHkykM.roa
Signing time: Mon 06 Jun 2022 20:06:36 +0000
ROA not before: Mon 06 Jun 2022 20:06:36 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 23650
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jun 6 20:06:36 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=FCA1CA1F5BDEAD6FEBA5DA7C2E17C230D1E4CA43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:0b:fb:99:cb:61:5b:e9:cb:fd:9f:8c:4f:
82:86:ac:41:12:ca:d7:84:03:17:c8:58:b1:c2:3b:
75:58:51:7f:3f:04:ea:35:11:d4:6d:89:65:36:58:
3f:9a:e0:1c:06:d9:47:3a:ea:6b:f3:d2:26:1e:c5:
c0:90:05:9c:cf:4d:cb:72:14:69:6d:98:a3:89:fa:
76:f6:f8:af:5c:5f:db:6f:1c:fc:e8:9c:b3:fb:bd:
87:12:80:ae:05:15:6a:94:47:41:18:21:69:08:1a:
18:8f:cb:d4:58:4e:c3:2e:b2:6d:aa:1f:0e:e5:89:
05:c8:30:6a:b2:d9:8e:be:6e:a6:67:7d:b5:d3:26:
ff:fc:da:1d:d3:34:e3:2f:3d:1e:9a:64:79:a1:fe:
95:32:a3:43:41:a7:ad:f5:b0:9b:a4:be:43:d3:a4:
98:c8:b1:2a:59:bd:96:60:bf:69:58:10:28:2a:0e:
98:a2:36:eb:07:5a:2b:26:b6:96:90:b5:72:4b:fc:
36:c5:18:e1:34:e9:75:3f:58:8d:90:16:9d:b2:e4:
a1:75:40:0d:0c:50:43:57:5e:c6:0c:19:4d:e0:22:
80:49:25:0d:7c:57:2a:0b:60:44:dd:17:ef:26:10:
8e:50:6a:d8:60:57:e3:a9:69:ba:e0:c2:43:7e:4a:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:CA:1F:5B:DE:AD:6F:EB:A5:DA:7C:2E:17:C2:30:D1:E4:CA:43
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/_KHKH1verW_rpdp8LhfCMNHkykM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
37:0a:86:31:43:7e:e5:21:ee:72:20:de:a9:ad:7f:34:10:8b:
44:92:a5:62:ba:78:5a:02:c9:20:14:3b:66:22:d2:c9:01:9b:
c1:29:2b:a8:ad:35:5e:45:21:c3:6a:f2:14:7d:c9:32:f0:50:
b5:68:46:ba:c8:b1:88:03:0e:b0:e6:52:08:f5:4a:e8:ae:57:
13:43:49:7f:9c:31:f1:9e:e6:bf:aa:b8:61:11:bb:fa:f4:3e:
7e:3f:d3:f4:db:80:9d:5e:07:1c:13:f4:f9:27:e3:93:47:92:
88:2c:2b:db:b2:cb:c4:bd:32:0a:25:5e:97:ee:97:2a:49:2a:
35:92:21:e9:2b:06:63:61:36:b0:fc:52:d5:a0:50:30:99:59:
81:33:37:79:81:12:7e:6e:e8:16:4a:f0:f6:cb:ee:42:de:b0:
92:78:3e:59:78:a7:b7:c1:e6:10:d1:71:7f:69:fe:01:37:b7:
e3:3f:79:d8:86:f7:ff:83:dd:54:ba:ca:01:d2:af:d0:7b:d6:
67:b7:5a:d1:e6:a9:f5:40:65:48:53:b1:89:13:52:ce:b9:ac:
1b:55:88:b0:07:61:09:32:a9:b9:78:38:75:da:79:bd:b9:49:
89:94:74:e8:cd:72:e2:5f:5a:7a:3b:16:1c:dc:2f:30:24:a9:
23:04:0d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org