Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/aB5U7lwqtRAVs98mfx9Ord7oZvE.roa
File: aB5U7lwqtRAVs98mfx9Ord7oZvE.roa (raw, json)
Hash identifier: ufyOjl1LAhTwOmb+aokgYnfKaa9iEfIqU94ZdAVjrbw=
Subject key identifier: 68:1E:54:EE:5C:2A:B5:10:15:B3:DF:26:7F:1F:4E:AD:DE:E8:66:F1
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 094C
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/aB5U7lwqtRAVs98mfx9Ord7oZvE.roa
Signing time: Mon 06 Jun 2022 20:06:35 +0000
ROA not before: Mon 06 Jun 2022 20:06:35 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 138527
IP address blocks: 118.184.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jun 6 20:06:35 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=681E54EE5C2AB51015B3DF267F1F4EADDEE866F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:38:ee:4c:8a:9f:2a:d6:d4:86:a1:6f:87:
97:99:98:15:2f:b4:ef:f0:cb:74:fb:2a:d8:f4:bc:
83:0d:85:c4:b8:a1:80:b8:54:85:4a:6c:00:18:09:
03:25:29:0c:c2:cb:f3:0f:1e:5d:20:e1:51:f4:b4:
70:cd:d6:07:7b:3d:62:91:9b:68:8b:bc:39:f7:f5:
8b:a3:b7:c4:da:92:b7:ab:08:4b:a9:35:6f:4c:34:
ee:87:07:bd:b7:1d:6f:30:ac:ad:23:c9:cd:d5:77:
7a:b0:1a:3c:85:ce:75:1b:48:0e:0c:21:0f:86:2b:
98:6d:a6:02:9a:7e:5a:7e:65:7f:8b:e4:38:33:4e:
dc:b9:1d:5d:1d:19:b4:bc:96:2d:a7:86:6a:2c:38:
74:ee:75:37:50:bb:a4:03:e4:d4:c0:47:03:fc:c8:
1d:81:6c:aa:98:99:23:b0:56:b3:0a:b0:bb:02:89:
9c:e7:cf:51:0c:2c:89:b9:15:21:f2:94:4f:c8:47:
0f:31:0a:7d:f4:dd:b1:ca:6e:63:22:ff:fc:40:55:
fa:b3:6f:23:fa:3c:d2:27:88:1b:2f:9b:19:ed:67:
fb:a9:bb:fa:3c:6b:30:0c:f7:f3:c4:d5:36:cd:af:
8d:8b:61:82:3f:b9:3b:1f:61:08:e1:70:7c:e7:84:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1E:54:EE:5C:2A:B5:10:15:B3:DF:26:7F:1F:4E:AD:DE:E8:66:F1
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/aB5U7lwqtRAVs98mfx9Ord7oZvE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.157.0/24
Signature Algorithm: sha256WithRSAEncryption
65:45:c6:00:c1:d4:83:26:9c:77:b7:68:ce:a0:c9:04:a3:ef:
02:c4:46:b6:ef:aa:b2:8d:b2:1e:bb:da:fa:9f:0b:d4:cd:b2:
3a:f6:b0:d4:3a:66:1c:50:ce:c8:ec:3d:f3:bf:77:e1:91:b5:
a2:fa:68:82:9e:79:1f:8f:e3:8f:e1:87:02:89:ef:81:50:55:
fc:d2:5c:e3:b3:6c:37:4e:61:ab:39:5e:57:1f:60:68:bf:af:
30:28:97:66:87:0b:1a:7a:5d:6d:7b:fb:d8:2e:98:0a:36:b6:
26:28:e1:34:ad:e5:ef:9a:6d:89:95:04:c0:28:7a:70:0d:d7:
b4:24:de:fc:b8:66:36:a5:2b:05:c8:d9:dd:01:24:e9:94:6e:
fb:4e:77:66:25:c4:9c:12:b3:3e:68:7d:3b:92:47:7a:28:19:
ab:a0:4b:c5:a8:37:00:c0:38:ff:98:23:f0:46:43:e4:12:f0:
c3:f4:0b:02:ca:4b:7c:c2:af:86:67:c2:a2:c8:c0:24:d0:45:
dd:e3:56:ca:02:54:4e:06:27:48:90:52:0e:2a:d1:92:df:0f:
d9:85:f8:b8:34:4e:60:fc:4e:33:41:85:2c:54:96:2f:aa:c9:
05:b2:2f:47:91:f5:80:7c:eb:e5:f9:51:a0:92:73:4a:62:57:
32:6b:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org