Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/Bgj9M3ozcRZE5XsSWk_4ZdAuHAk.roa
File: Bgj9M3ozcRZE5XsSWk_4ZdAuHAk.roa (raw, json)
Hash identifier: yx3R0aMa5cB1n8WOiCrDolaBd9bfNUkiQG9sk9K7a94=
Subject key identifier: 06:08:FD:33:7A:33:71:16:44:E5:7B:12:5A:4F:F8:65:D0:2E:1C:09
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 06E4
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Bgj9M3ozcRZE5XsSWk_4ZdAuHAk.roa
Signing time: Thu 18 May 2023 07:24:01 +0000
ROA not before: Thu 18 May 2023 07:24:01 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 58593
IP address blocks: 163.228.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: May 18 07:24:01 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=0608FD337A33711644E57B125A4FF865D02E1C09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:0c:aa:bf:a5:0f:b6:fa:75:eb:a5:97:d3:
b8:8c:80:56:db:1b:c8:78:e3:50:a3:aa:c4:0f:6c:
75:4c:a1:8a:8e:de:4b:d3:9d:c9:4a:18:9b:6f:c4:
5d:84:de:ad:d0:8d:49:e5:d1:db:ba:00:a0:ab:57:
94:5d:c4:8a:b9:77:dd:cd:74:23:8e:68:1d:03:32:
d3:62:96:9d:7c:ba:1e:01:fd:fc:a7:03:9b:a7:6e:
f4:0b:e6:b9:72:53:9f:00:0d:9e:f8:47:cd:76:04:
3f:13:cc:95:ab:e9:03:96:da:4a:ad:90:13:75:6a:
71:82:25:4d:bc:bc:a4:de:21:df:30:e5:0c:55:6d:
13:24:4d:25:93:ec:97:fc:66:27:97:6a:3a:35:e0:
37:2f:bc:29:71:22:77:00:66:cc:d1:64:7c:90:75:
1d:5e:d3:ea:4e:cf:d0:86:47:75:49:31:7d:06:e0:
0e:e8:f0:c1:9a:28:03:2d:b0:e8:3a:bd:f4:db:38:
69:07:8e:0f:30:3d:8c:01:94:99:1b:89:cd:a5:6d:
98:54:78:86:eb:a2:ba:45:a4:0f:d7:11:d6:21:f6:
fc:00:a4:06:93:77:04:f8:f9:a5:fc:c9:c9:d1:0a:
84:5b:78:59:c5:cd:9a:47:c2:9f:7c:1c:7b:c2:f5:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:FD:33:7A:33:71:16:44:E5:7B:12:5A:4F:F8:65:D0:2E:1C:09
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Bgj9M3ozcRZE5XsSWk_4ZdAuHAk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:d6:75:08:43:26:6f:12:0e:59:a0:55:73:97:b5:93:c4:28:
e6:d4:f6:90:2f:44:ca:b1:a5:d2:fc:6f:11:b4:f9:30:4f:4d:
46:01:06:ca:48:4f:41:07:9d:6d:5e:c5:15:9d:a3:56:3f:44:
f9:c3:36:57:12:3a:a5:91:dd:c2:66:1f:67:0c:8f:b6:97:a1:
ce:53:d2:6e:a2:fd:84:cd:77:6e:16:eb:d9:6a:3d:2f:f8:7a:
6f:fb:3c:75:e0:40:de:c0:6a:ba:27:64:41:31:f0:59:f6:c4:
9b:9d:34:e3:44:35:7b:7a:92:b7:4e:87:fa:51:3f:b7:d4:d1:
aa:87:ce:41:56:d6:de:8f:a0:ef:52:31:81:05:3d:99:e9:09:
3f:1e:a8:b0:95:e4:c3:b3:0a:25:dc:26:fc:a1:89:d6:b4:3b:
3b:1f:1d:e7:03:10:54:81:97:e8:90:66:3f:40:29:b5:02:dd:
03:24:c9:ca:81:92:78:69:c6:06:76:c2:7e:61:b4:15:7c:90:
be:6e:c9:3d:f8:b3:f6:e3:3c:64:35:79:5a:52:0a:8f:7d:ca:
f7:62:f3:0a:21:d0:e3:14:90:e0:a4:6f:59:60:93:ee:a2:d0:
50:23:72:9f:20:13:14:01:62:59:01:73:a8:6a:0c:c0:d4:91:
ba:9e:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org