Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/lD2mXe3hx1axrcbC1sDNQnJuUNY.roa
File: lD2mXe3hx1axrcbC1sDNQnJuUNY.roa (raw, json)
Hash identifier: mbBZMERXvCYZujYctNrdxgbn9ApkbmGLjkAMpFg4yeg=
Subject key identifier: 94:3D:A6:5D:ED:E1:C7:56:B1:AD:C6:C2:D6:C0:CD:42:72:6E:50:D6
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 094D
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/lD2mXe3hx1axrcbC1sDNQnJuUNY.roa
Signing time: Mon 06 Jun 2022 20:06:36 +0000
ROA not before: Mon 06 Jun 2022 20:06:36 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 134769
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jun 6 20:06:36 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=943DA65DEDE1C756B1ADC6C2D6C0CD42726E50D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:61:33:74:e4:15:14:f4:25:e3:3f:a7:22:
67:75:48:04:d4:fa:ab:a5:99:ea:73:a2:7c:bb:46:
18:22:70:c3:6f:24:58:9d:d9:5c:2b:ef:ee:66:37:
c9:50:88:d3:ce:58:8c:16:13:0a:33:2c:e9:1f:c0:
20:8c:a2:8c:8d:95:88:c3:8a:28:c5:ec:e5:47:e4:
e8:06:c5:ad:8a:9e:f7:ae:3f:fd:6c:6f:d3:be:6d:
8e:87:4c:fc:55:74:fa:2e:ea:f3:fd:68:b9:93:bc:
f8:05:46:1c:52:f9:9b:68:7a:98:4f:1f:f4:52:b2:
83:24:82:c6:d2:0c:b8:75:49:3a:19:3a:40:67:a0:
40:86:41:84:73:94:57:73:6d:96:7f:df:f6:49:80:
9d:4e:b3:a2:6f:21:41:6f:35:19:12:6b:6b:b5:0e:
b7:ab:41:8f:9d:3c:1b:f1:4a:96:4f:21:3f:f9:d8:
88:49:4a:72:bf:e3:70:40:ae:88:35:f1:c8:99:89:
05:e1:f6:3f:d9:f3:42:89:8b:fb:f2:93:77:8d:0f:
af:f7:1f:39:d6:88:02:56:6e:69:aa:27:20:c0:80:
b2:05:7f:fc:22:f2:9b:73:ec:9e:93:8f:e8:76:bf:
ad:85:85:8e:93:fe:16:db:95:72:94:6c:0e:5c:b5:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:A6:5D:ED:E1:C7:56:B1:AD:C6:C2:D6:C0:CD:42:72:6E:50:D6
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/lD2mXe3hx1axrcbC1sDNQnJuUNY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9a:bd:1e:29:26:0d:20:a9:ee:af:98:e6:bc:72:2d:4b:89:ea:
5e:29:5a:3d:25:8f:dd:49:d6:df:4a:7f:19:1f:19:2b:ad:26:
3e:99:34:39:9a:c0:fe:7c:c2:0f:c3:98:a2:d4:63:3f:c1:2b:
cb:b1:cd:ec:9b:b5:72:d6:1d:e6:83:7b:87:01:c7:7f:03:f9:
a0:99:06:6a:5e:4a:9e:23:60:ee:21:b0:93:a5:0c:94:f0:73:
a5:aa:da:2b:44:41:9b:ae:bb:d7:fd:41:3a:24:95:92:23:3a:
24:6b:a7:7c:d6:7b:2c:b1:12:28:b7:c4:83:64:f0:5e:6a:ae:
51:c9:2b:d8:bb:77:91:e6:71:4b:19:55:02:41:65:db:ed:e7:
a0:f3:1a:3a:70:ea:6a:97:b8:05:f6:6f:1d:6d:47:44:7f:dc:
60:67:81:f2:76:59:08:9d:24:91:b9:0b:0b:e1:72:38:05:76:
c5:8a:e0:98:ec:b2:0c:cf:2c:6e:f7:ab:32:3d:1e:b9:e0:4f:
58:d1:b8:2f:92:f3:57:fa:96:d1:c8:bf:1d:a2:f8:ba:13:a5:
41:68:e7:e8:b9:f0:7c:79:21:e3:b3:67:29:ef:c4:ab:8e:44:
67:53:f7:a8:7f:e5:28:f3:c5:41:af:d9:d8:83:57:27:e4:f1:
e3:20:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org