Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/mS5-7MAl0-RnaLsEyT-PPeIDEdA.roa
File: mS5-7MAl0-RnaLsEyT-PPeIDEdA.roa (raw, json)
Hash identifier: +ccwlutcGN9p0EW53be/QxMH0UWUXd168VcVq36naxs=
Subject key identifier: 99:2E:7E:EC:C0:25:D3:E4:67:68:BB:04:C9:3F:8F:3D:E2:03:11:D0
Certificate issuer: /CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Certificate serial: 07
Authority key identifier: B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/mS5-7MAl0-RnaLsEyT-PPeIDEdA.roa
Signing time: Thu 27 May 2021 10:25:06 +0000
ROA not before: Thu 27 May 2021 10:25:06 +0000
ROA not after: Fri 27 May 2022 10:21:02 +0000
asID: 4837
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Validity
Not Before: May 27 10:25:06 2021 GMT
Not After : May 27 10:21:02 2022 GMT
Subject: CN=992E7EECC025D3E46768BB04C93F8F3DE20311D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5f:f0:9f:71:cb:28:f1:e8:d9:8d:92:29:e1:
c5:08:ce:66:cc:eb:10:69:3c:8e:f2:31:43:c1:8d:
0c:a8:bc:cd:5d:91:67:0b:7c:ca:4b:e9:77:3d:11:
16:21:b1:f5:e3:1b:8c:81:5b:af:88:31:b1:e7:40:
30:81:e2:3c:2f:6d:ba:56:1e:c8:17:7b:91:d2:ef:
6c:13:f3:c1:92:e8:c0:0d:2a:35:59:a5:a5:c7:21:
30:c6:24:4d:8d:e2:12:13:e8:6e:2e:83:5a:02:7e:
8d:8b:aa:7c:47:3f:b4:62:2f:de:36:8d:74:cd:19:
c8:39:5f:46:5c:79:60:68:19:55:a9:67:36:94:05:
ca:7c:57:1b:8b:ee:02:84:05:f5:c3:72:9a:8d:cb:
0d:20:a4:2a:72:e2:c0:44:d5:a5:7a:c4:e2:ce:1b:
84:31:60:a2:e2:e7:a7:7b:a7:4d:77:a8:c6:81:02:
11:1a:28:94:61:9b:6d:64:bf:c7:f5:2f:b8:6a:ca:
b5:5e:5a:d2:0a:16:0d:f9:59:78:38:7f:5f:bd:2a:
1a:cf:b2:0c:60:b8:53:c1:5a:29:62:95:c8:97:f3:
5c:2c:a2:07:62:7f:db:f2:82:96:3f:1f:52:f1:9e:
c7:e0:e8:29:15:bb:de:c2:80:25:d0:d4:1e:79:45:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2E:7E:EC:C0:25:D3:E4:67:68:BB:04:C9:3F:8F:3D:E2:03:11:D0
X509v3 Authority Key Identifier:
keyid:B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/mS5-7MAl0-RnaLsEyT-PPeIDEdA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
64:b3:9a:49:2c:1a:19:2e:85:87:78:1b:c3:65:39:9a:23:c3:
c7:a1:7d:de:f9:9e:7a:62:82:32:e9:8e:a1:99:81:35:ad:05:
24:af:e7:5c:43:09:27:e5:8d:6a:39:0b:42:51:1a:fc:16:b7:
b4:13:56:93:46:57:fd:17:1b:76:96:98:42:ce:b2:a6:bd:19:
01:d8:85:8f:17:8b:08:91:e2:ea:44:d4:d7:18:53:7c:2a:26:
a1:53:3d:9e:b2:42:a8:5c:f0:61:be:a9:6e:bd:f1:b2:bd:b4:
c4:19:98:a5:47:39:09:8f:0c:74:89:e8:bf:25:e6:b9:5c:58:
80:6c:05:21:56:4c:cb:0b:38:e3:b1:3c:0d:16:f6:27:7b:e9:
1c:b3:cf:5c:59:bb:28:ee:d2:89:22:25:3c:c7:ee:f8:db:36:
97:48:ef:8d:46:99:ee:e5:0d:7e:38:8b:80:09:30:09:05:1c:
17:04:47:fd:5e:cc:fa:e5:b9:3d:bc:1a:b0:7a:37:58:83:a8:
f1:16:ae:1e:0c:df:91:a4:d5:38:33:a9:b1:f5:c7:a7:c3:33:
69:ab:bf:8d:75:7c:bd:d1:17:2f:f0:c4:87:48:b4:10:f9:28:
90:5e:ed:04:26:c1:05:5e:71:f3:75:9d:26:df:7f:75:04:01:
0e:12:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org