Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/jk-_RZD7lyZHdHP0WCyooT2mIYU.roa
File: jk-_RZD7lyZHdHP0WCyooT2mIYU.roa (raw, json)
Hash identifier: Q/YbME7vYBZFEcUxaJZBtxFwOGuDI/sS9QHfa3FHp1U=
Subject key identifier: 8E:4F:BF:45:90:FB:97:26:47:74:73:F4:58:2C:A8:A1:3D:A6:21:85
Certificate issuer: /CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Certificate serial: 04
Authority key identifier: B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/jk-_RZD7lyZHdHP0WCyooT2mIYU.roa
Signing time: Thu 27 May 2021 10:25:06 +0000
ROA not before: Thu 27 May 2021 10:25:06 +0000
ROA not after: Fri 27 May 2022 10:21:02 +0000
asID: 134769
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Validity
Not Before: May 27 10:25:06 2021 GMT
Not After : May 27 10:21:02 2022 GMT
Subject: CN=8E4FBF4590FB9726477473F4582CA8A13DA62185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:fb:ad:f5:b5:d3:e5:a4:52:f2:57:2c:1a:
c6:25:e9:38:02:29:b7:a6:2f:78:92:02:19:8c:b0:
13:7e:a2:d2:dc:a3:b6:c9:07:56:eb:af:56:56:f0:
25:c8:33:6b:94:36:bf:cc:f0:3f:7d:4f:5b:e1:e4:
97:92:d4:af:56:d7:17:73:9c:f9:e1:20:ff:a1:54:
ab:43:73:5e:a2:87:61:ea:36:1e:d9:26:5d:41:14:
60:76:ae:22:f9:80:6d:47:2d:6a:4b:fb:cb:2a:1e:
30:52:d2:dd:aa:2a:8d:dc:5f:10:be:5c:b8:dd:0a:
14:16:58:5e:31:0f:36:f2:d7:98:3b:7b:78:98:4c:
b1:47:80:5d:5c:bb:f2:ac:38:fb:6d:24:90:e0:37:
43:b1:91:a5:16:f8:dc:ab:b6:f5:02:87:cd:68:de:
ab:76:d4:58:6a:15:7c:ef:2d:66:1d:d0:79:ca:50:
5d:e2:a9:85:ee:fb:05:4f:45:2e:9a:d0:6a:c9:f4:
71:96:8d:15:19:36:a3:ac:62:34:a7:77:c8:03:7d:
af:9b:57:f3:63:d3:60:5b:8b:00:c0:54:4b:a3:d6:
fe:5a:c6:eb:3b:e3:27:e7:34:44:38:12:73:8a:13:
0c:95:f8:8d:02:a9:fe:0f:ba:8c:7d:57:89:fe:10:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4F:BF:45:90:FB:97:26:47:74:73:F4:58:2C:A8:A1:3D:A6:21:85
X509v3 Authority Key Identifier:
keyid:B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/jk-_RZD7lyZHdHP0WCyooT2mIYU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8b:09:52:f4:ef:6b:8d:16:51:e2:80:d1:11:95:81:3b:7c:9c:
58:50:84:76:eb:72:2b:f3:8e:1b:0f:0a:7e:35:ee:cb:cb:d7:
0d:bc:42:84:9c:35:c7:3d:cc:2b:ea:73:71:8e:70:82:6a:a7:
48:ba:3a:ac:85:91:bc:09:4e:7c:9b:62:47:05:b7:f9:56:0c:
98:93:1a:10:cf:92:82:27:65:2d:46:02:a1:1f:b3:dc:1c:24:
ee:b8:fc:03:46:32:9d:04:c9:21:b1:47:55:d2:ee:bf:13:05:
6d:65:c9:2f:e1:5a:78:bc:fa:c3:e1:f1:4a:34:30:ee:d5:59:
f1:d2:a7:74:5d:99:c7:29:f5:ef:80:ff:a3:23:b3:dd:5d:10:
47:c1:19:a9:27:f0:7a:09:37:a0:20:a6:9e:cd:c9:67:5d:1d:
29:31:23:00:1e:2f:aa:d9:b3:45:bd:de:f6:59:db:bd:72:d3:
58:02:41:01:ae:67:d7:04:7a:48:76:28:ba:76:78:f4:24:fd:
96:cf:23:d3:d5:ab:ec:b0:cd:23:16:a7:4b:bc:0a:d9:e3:e7:
6f:b4:ec:a2:88:bd:67:37:21:46:fe:43:48:9e:1e:e6:3a:51:
67:c6:98:8c:a3:90:94:06:f8:cc:bd:b0:15:d3:dd:e8:b5:76:
eb:f2:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org