Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/p3rHEUvik5zdgHUZNJa9bqhPrJg.roa
File: p3rHEUvik5zdgHUZNJa9bqhPrJg.roa (raw, json)
Hash identifier: tkvpcShTLlYsLYmX4Xq0aQVZEpsi6kN9QUQTQyCU6nQ=
Subject key identifier: A7:7A:C7:11:4B:E2:93:9C:DD:80:75:19:34:96:BD:6E:A8:4F:AC:98
Certificate issuer: /CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Certificate serial: 0B
Authority key identifier: B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/p3rHEUvik5zdgHUZNJa9bqhPrJg.roa
Signing time: Thu 27 May 2021 10:25:08 +0000
ROA not before: Thu 27 May 2021 10:25:08 +0000
ROA not after: Fri 27 May 2022 10:21:02 +0000
asID: 138950
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Validity
Not Before: May 27 10:25:08 2021 GMT
Not After : May 27 10:21:02 2022 GMT
Subject: CN=A77AC7114BE2939CDD8075193496BD6EA84FAC98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:08:7f:6d:39:07:ef:9f:95:20:04:7a:b1:
60:66:92:13:66:3a:6c:ab:55:78:56:8f:00:5a:3a:
61:e7:85:80:d7:3e:07:bd:6c:4f:2e:40:bd:b1:9d:
ce:0a:61:f4:2e:f4:1c:cd:a7:b6:d5:53:92:5e:1f:
b8:65:48:59:8c:7a:07:ee:1c:5e:22:f8:b8:1c:41:
28:7a:4f:89:ee:97:00:0d:f7:c2:00:d5:52:e1:1b:
67:cd:74:44:68:af:cc:d4:ec:a2:b9:5f:dd:93:4e:
56:c8:a0:01:d9:ba:3f:6e:88:0c:70:8d:56:6e:f4:
b6:ae:fa:cd:dc:15:b6:36:5f:68:f9:99:23:a5:9a:
a8:f2:bb:3c:30:1f:29:26:a8:be:14:f7:f3:8c:8c:
f4:b0:26:b7:f1:dc:f9:c1:46:43:2e:26:08:28:ea:
15:f3:67:a3:09:62:c8:a3:b0:34:2f:0b:4f:09:ed:
b0:35:a2:21:30:84:23:82:c1:43:e0:aa:cb:d9:57:
b1:39:b3:93:3b:6e:74:e3:17:8c:fb:0e:d0:6c:82:
60:6e:7b:ce:c8:e6:c7:66:f8:ba:1a:91:bd:b2:f6:
62:09:d8:85:b8:de:b2:48:9c:6d:3b:fe:53:64:45:
3b:43:73:36:ef:cf:64:f8:b8:e9:55:63:25:99:c0:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7A:C7:11:4B:E2:93:9C:DD:80:75:19:34:96:BD:6E:A8:4F:AC:98
X509v3 Authority Key Identifier:
keyid:B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/p3rHEUvik5zdgHUZNJa9bqhPrJg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ae:a3:65:c7:07:6e:01:57:7b:fc:f4:fc:3a:95:2c:22:ee:30:
88:ec:4f:f9:95:9d:5d:b8:48:a7:90:ba:80:dd:80:3b:76:62:
3f:09:54:4b:be:c7:93:72:fc:08:d4:46:06:a6:eb:4f:4e:bb:
26:b8:fe:23:38:09:69:fb:1e:47:3d:6d:c1:62:fd:dd:24:b9:
cf:5d:d0:ab:50:68:e7:45:fb:d9:e4:55:e1:f5:0d:ca:2e:ff:
dc:99:b4:3a:62:92:0e:83:73:67:ed:05:a6:05:ee:f2:90:49:
50:d9:99:09:67:b8:74:ff:1d:01:a6:20:65:19:f5:f4:61:c8:
20:15:ed:f3:87:5f:3b:87:0b:1b:25:25:d6:67:31:22:04:d4:
ab:6b:53:fa:98:f9:3a:b9:b4:11:58:63:b4:45:07:c3:63:c3:
68:2e:b7:7e:23:39:10:b8:d8:9d:b3:b2:fc:45:a1:5e:71:c2:
ea:64:19:23:36:e2:84:33:cf:c8:48:eb:af:3c:bb:e8:09:86:
3c:f3:41:2b:81:45:d8:1f:3b:81:8b:1b:e2:f4:d7:3c:9f:88:
e7:f4:ee:58:ce:6c:c5:dc:18:89:4a:61:50:03:b1:84:c5:a6:
0c:3f:4f:57:c1:6f:b1:fd:fb:61:b4:cc:0e:10:74:e5:c8:ac:
43:f9:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org