Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/233/LNBWKt41Zdy5sTRotetHHGVvJ6w.roa
File: LNBWKt41Zdy5sTRotetHHGVvJ6w.roa (raw, json)
Hash identifier: SpBGfeKIoCqjBSnA0wdhmTJO6GBp4Lvfc9qIhWqBeJ0=
Subject key identifier: 2C:D0:56:2A:DE:35:65:DC:B9:B1:34:68:B5:EB:47:1C:65:6F:27:AC
Certificate issuer: /CN=DAD7AD4765DB70EA858F18178181F83B0F2CFCAA
Certificate serial: 0B59
Authority key identifier: DA:D7:AD:47:65:DB:70:EA:85:8F:18:17:81:81:F8:3B:0F:2C:FC:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2tetR2XbcOqFjxgXgYH4Ow8s_Ko.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/LNBWKt41Zdy5sTRotetHHGVvJ6w.roa
Signing time: Thu 17 Feb 2022 05:37:35 +0000
ROA not before: Thu 17 Feb 2022 05:37:35 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 37965
IP address blocks: 222.126.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2905 (0xb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAD7AD4765DB70EA858F18178181F83B0F2CFCAA
Validity
Not Before: Feb 17 05:37:35 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=2CD0562ADE3565DCB9B13468B5EB471C656F27AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:58:6b:a8:8f:a1:ff:ff:b5:0c:9f:2f:40:
3a:92:a1:0a:d9:f4:57:79:f1:4f:3d:75:28:a1:82:
a4:42:38:bc:45:b2:54:ba:a8:c6:13:d2:c2:83:08:
cd:22:16:18:4f:df:cc:7e:16:25:e8:6b:ec:f0:d1:
5f:95:62:24:a7:ad:61:a6:b2:6b:08:2b:50:44:1c:
0c:2e:88:bb:c0:1e:9d:0e:c2:4a:51:d3:2c:e8:04:
7e:6c:1e:61:f2:66:cc:d3:6d:8d:60:46:01:7c:e0:
b1:93:6d:48:9f:8b:32:56:83:16:04:22:f7:89:ea:
de:c7:4f:00:e5:9c:c4:e7:bd:ee:97:7f:ce:71:ab:
a5:7f:81:30:cc:c0:59:37:04:2b:c6:bc:6b:92:9e:
96:c7:57:bf:6e:18:d3:6b:a7:4e:61:95:66:03:1a:
43:ad:39:e8:51:ee:3d:15:9d:7d:55:2b:e0:fd:54:
b0:3c:75:46:32:05:9c:bf:1c:35:60:c3:e2:e4:f2:
1e:ef:46:2f:f8:51:33:de:6d:06:85:87:64:62:27:
2a:08:7f:a7:fb:a2:e3:e1:07:29:b6:6e:fc:a5:8f:
20:30:a8:94:2a:db:62:a1:a1:17:4b:b0:cb:82:22:
f1:d4:97:63:e4:56:40:8d:c1:85:b2:f1:fd:36:c5:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:56:2A:DE:35:65:DC:B9:B1:34:68:B5:EB:47:1C:65:6F:27:AC
X509v3 Authority Key Identifier:
keyid:DA:D7:AD:47:65:DB:70:EA:85:8F:18:17:81:81:F8:3B:0F:2C:FC:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/2tetR2XbcOqFjxgXgYH4Ow8s_Ko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2tetR2XbcOqFjxgXgYH4Ow8s_Ko.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/233/LNBWKt41Zdy5sTRotetHHGVvJ6w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.126.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4b:ef:0f:61:96:bf:aa:21:4f:92:28:69:92:2f:31:5b:ad:3b:
d8:85:7e:4b:20:76:3a:86:99:9e:db:8b:5d:88:05:bf:75:94:
3f:fd:f1:09:e9:45:ff:31:4f:4f:39:6e:58:ef:a0:d8:73:3d:
7a:be:9c:3b:84:d1:02:94:ab:da:83:91:09:9e:e9:60:a8:bd:
69:04:9d:90:7d:97:f9:73:e2:69:e6:f0:03:c6:87:1c:3b:a4:
f1:c9:f9:2b:06:47:ae:ba:8c:0d:2a:f9:8c:de:8d:f9:88:ad:
d3:32:a0:0e:13:56:a3:9b:40:b1:fb:63:5b:fb:40:c5:13:97:
a4:0e:fa:f6:56:48:8e:9c:74:a2:0d:92:89:a0:fa:98:ef:39:
fc:b8:3b:8a:36:f9:11:1e:e4:84:f5:8a:44:69:3d:7f:3d:1d:
d4:0b:24:87:6d:5c:53:e3:2d:80:bc:2c:2c:a3:40:3b:43:a2:
b1:69:25:92:99:98:cb:71:93:60:d2:9b:13:78:5f:85:52:e6:
01:ca:c0:02:96:b4:29:b0:b4:21:ba:8e:cf:25:d1:de:8a:26:
3e:b6:65:fd:11:64:3d:4b:ef:8e:89:89:6e:fa:ea:23:9f:25:
02:a7:91:77:c3:13:2b:37:8f:2e:a8:a5:f2:d8:d3:36:02:b8:
41:bb:b7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org