Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/Sb9mK266jDIH4mnnNAFQLc-XdJk.roa
File: Sb9mK266jDIH4mnnNAFQLc-XdJk.roa (raw, json)
Hash identifier: rg3cHqUAQzWP+SCz1iZJhjH/fktahGH4b0UlQLbY2kE=
Subject key identifier: 49:BF:66:2B:6E:BA:8C:32:07:E2:69:E7:34:01:50:2D:CF:97:74:99
Certificate issuer: /CN=23320A4BAF0AF9313530EC99D3686433703E071F
Certificate serial: 0C65
Authority key identifier: 23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/Sb9mK266jDIH4mnnNAFQLc-XdJk.roa
Signing time: Tue 07 Jun 2022 10:07:41 +0000
ROA not before: Tue 07 Jun 2022 10:07:41 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 54994
IP address blocks: 203.130.50.0/24 maxlen: 24
203.130.52.0/24 maxlen: 24
203.130.63.0/24 maxlen: 24
220.243.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3173 (0xc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23320A4BAF0AF9313530EC99D3686433703E071F
Validity
Not Before: Jun 7 10:07:41 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=49BF662B6EBA8C3207E269E73401502DCF977499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:47:78:08:2a:db:93:5d:0e:24:d7:04:a8:fe:
b5:74:8a:02:77:43:18:14:a0:5b:d8:06:fe:4d:c0:
e2:25:7a:b6:ec:54:ea:00:7a:1d:65:a2:04:2b:d2:
a8:0d:d3:75:da:5f:42:74:68:b1:dd:d1:40:2c:a5:
ce:37:83:49:e8:f9:93:a1:5b:36:94:47:0d:28:55:
9c:51:7d:58:11:94:72:f2:2d:e5:f1:b5:b1:db:69:
8b:bd:61:f2:b8:d3:7c:9b:c2:99:ab:98:01:ff:e7:
43:19:0f:53:07:f1:08:1b:c1:a6:9c:b3:01:3a:25:
fb:ec:5d:97:a7:c0:b6:e3:3e:b1:bc:72:1d:90:de:
90:51:e8:3e:2e:8a:31:03:df:e4:0a:48:75:ce:ca:
85:72:8b:62:45:98:da:bf:f0:93:6e:75:83:31:08:
f2:8e:ae:3d:e3:7b:e1:3f:98:46:9f:12:06:25:c9:
25:2e:01:64:b6:5a:d1:81:6e:0a:1b:a9:3f:2f:b5:
90:83:2c:eb:b7:13:bd:5d:06:de:84:c0:d7:35:79:
b9:1e:8c:18:86:87:07:fd:fc:d8:5e:ff:45:3a:01:
19:f9:bf:cb:e9:85:02:e6:fa:6b:6f:fb:f6:5f:d5:
75:da:2b:e7:0b:58:6d:24:d0:22:a9:da:a9:da:a3:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BF:66:2B:6E:BA:8C:32:07:E2:69:E7:34:01:50:2D:CF:97:74:99
X509v3 Authority Key Identifier:
keyid:23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/Sb9mK266jDIH4mnnNAFQLc-XdJk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.130.50.0/24
203.130.52.0/24
203.130.63.0/24
220.243.248.0/24
Signature Algorithm: sha256WithRSAEncryption
97:da:9f:22:13:05:d8:1b:c0:ba:70:72:7c:97:0a:10:38:cc:
c9:70:05:f3:d8:43:b1:74:1a:42:77:b1:b0:43:c2:5e:4b:73:
51:15:f1:07:c0:c4:bf:d6:2f:8d:de:e3:df:91:63:ed:b8:9f:
cf:44:12:57:32:da:be:0b:54:ee:4c:4f:b9:b5:2c:8a:1d:c0:
df:5f:c7:69:a1:91:41:2b:64:07:82:ba:05:47:42:73:05:7c:
0e:76:43:d8:9e:28:1a:da:b8:b7:c5:4e:ae:38:ac:fb:45:bb:
4b:dc:de:ca:61:80:cf:bc:6a:0b:cc:f6:04:4a:ce:bf:ec:6e:
76:2f:fb:1c:10:b9:99:9c:fa:ae:6a:8b:75:04:0a:77:dc:b9:
ca:db:a4:57:4e:89:69:76:e9:1d:7e:e7:e5:61:a9:2b:bf:ea:
c2:df:00:52:d1:20:fa:18:a8:a0:12:4a:cf:2a:2e:d2:e4:16:
1b:8c:6f:3f:3b:68:82:cf:bd:2d:ed:25:8e:78:13:90:22:06:
88:59:6e:6a:58:d7:14:f7:c5:59:50:5f:49:61:46:5c:24:3a:
c5:f4:57:69:37:4a:a5:0f:c9:57:be:14:3b:75:e0:f7:8a:5c:
a2:46:33:0c:1c:13:48:69:e5:76:88:3d:75:61:3e:be:a3:d8:
4f:36:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:15 2023 by rpki-client on console-ams.rpki-client.org