Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/h3lKwpD-VhfC90spf-SdLb6sZEw.roa
File: h3lKwpD-VhfC90spf-SdLb6sZEw.roa (raw, json)
Hash identifier: xYQ186Qitr0OmiiQ8aC5Vx1dUP0Th93ufkyLdd+EyCw=
Subject key identifier: 87:79:4A:C2:90:FE:56:17:C2:F7:4B:29:7F:E4:9D:2D:BE:AC:64:4C
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 0953
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/h3lKwpD-VhfC90spf-SdLb6sZEw.roa
Signing time: Mon 06 Jun 2022 20:06:39 +0000
ROA not before: Mon 06 Jun 2022 20:06:39 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 18257
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2387 (0x953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jun 6 20:06:39 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=87794AC290FE5617C2F74B297FE49D2DBEAC644C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:91:93:bb:58:e9:3a:22:ee:2b:3e:43:ae:
fc:d9:d9:4f:ca:e7:b9:17:c9:dd:8e:ce:45:e8:6d:
1b:02:65:4b:77:c9:df:af:6a:1d:f1:cb:38:e7:44:
84:eb:02:c2:f6:32:08:e5:2c:44:4f:eb:6e:6f:e1:
bc:d9:15:eb:f9:ad:88:46:ef:3a:c2:bd:85:1b:b1:
af:85:ce:b8:c2:3a:b1:a6:c2:34:37:5e:56:51:95:
9c:38:12:1b:46:5c:9a:52:ec:15:94:43:86:be:3a:
a9:ba:96:84:dc:53:40:00:3b:98:cf:86:c3:28:68:
e6:ba:21:2b:95:a1:c1:c2:47:e9:61:c4:44:e8:19:
14:20:2d:ff:fa:15:39:53:51:45:91:13:dc:a3:e0:
8f:58:2d:02:0a:33:ce:2d:bd:33:3d:e5:7e:c7:52:
93:38:96:b9:f7:ed:dc:cf:bc:f3:6e:dc:b6:17:33:
7f:2e:51:a2:82:c8:af:da:a6:61:9a:94:a1:35:51:
c9:4d:83:68:85:09:d0:fb:7b:ef:8c:58:b2:79:10:
40:6c:7a:dd:95:ae:1c:db:b7:69:82:20:26:63:b3:
7a:f2:8f:a5:19:23:59:e6:9d:b4:67:e9:87:6f:13:
3f:96:1c:8a:37:23:d0:9d:62:c9:6c:66:ac:87:74:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:79:4A:C2:90:FE:56:17:C2:F7:4B:29:7F:E4:9D:2D:BE:AC:64:4C
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/h3lKwpD-VhfC90spf-SdLb6sZEw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2e:91:7a:07:c2:38:e4:ee:05:c8:bc:aa:31:dc:d5:21:fe:b0:
28:a8:dc:4c:36:af:30:e8:72:87:67:f1:06:44:63:1a:bc:89:
07:d1:4f:cf:9f:c0:41:7a:10:5a:df:eb:95:0f:6a:76:33:12:
ba:ca:88:56:f8:c7:6a:69:a1:e5:4e:99:2b:69:fc:2b:8e:4b:
09:74:54:ca:92:3f:e3:2b:c6:e7:7a:4e:7f:a4:f6:e9:4d:51:
4e:48:d8:01:d7:81:95:ad:de:8d:a6:6e:e8:5a:c0:24:d1:eb:
ac:9f:fb:c6:65:e5:0e:3b:3f:6f:dd:e9:1c:19:13:7c:da:bc:
a4:ef:e3:6c:9c:f7:58:00:18:d5:b3:ff:c7:97:ca:9b:fd:a4:
37:25:10:59:fe:01:9c:76:79:1a:50:8c:68:2a:ec:31:85:d7:
3d:96:b9:d0:c0:f4:99:e5:9c:6f:ca:30:5a:ca:04:47:b2:47:
b3:76:c1:32:c3:ed:ca:64:78:0f:e8:b1:cd:5c:97:f6:2b:58:
a4:e3:50:58:de:6c:95:f6:91:33:ca:0e:a2:a8:91:7e:33:11:
e6:89:d6:b9:2b:35:25:cc:06:a4:98:1b:01:0f:a7:5f:f8:d1:
45:bd:76:7c:18:e7:dc:50:81:ad:5b:79:49:29:35:a3:e4:04:
c6:fb:b5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org