Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/Sy6lQrfFxkbnJyYinQo8qqZHLNw.roa
File: Sy6lQrfFxkbnJyYinQo8qqZHLNw.roa (raw, json)
Hash identifier: raCy9IPGl3PYapmLefyWYKI3drvhsxZD1JZHsiiYoJs=
Subject key identifier: 4B:2E:A5:42:B7:C5:C6:46:E7:27:26:22:9D:0A:3C:AA:A6:47:2C:DC
Certificate issuer: /CN=5FC627EF6134E4A04E7328003BB2B2F6A7196579
Certificate serial: 0704
Authority key identifier: 5F:C6:27:EF:61:34:E4:A0:4E:73:28:00:3B:B2:B2:F6:A7:19:65:79
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X8Yn72E05KBOcygAO7Ky9qcZZXk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Sy6lQrfFxkbnJyYinQo8qqZHLNw.roa
Signing time: Thu 03 Jun 2021 08:47:29 +0000
ROA not before: Thu 03 Jun 2021 08:47:29 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 58593
IP address blocks: 40.72.0.0/15 maxlen: 32
40.72.0.0/16 maxlen: 32
40.72.0.0/17 maxlen: 32
40.72.128.0/17 maxlen: 32
40.72.254.0/24 maxlen: 32
40.72.255.0/24 maxlen: 32
40.73.0.0/17 maxlen: 32
40.73.99.0/24 maxlen: 32
40.73.128.0/17 maxlen: 32
40.125.128.0/17 maxlen: 32
40.126.64.0/18 maxlen: 32
52.130.0.0/20 maxlen: 32
52.130.16.0/20 maxlen: 32
52.130.32.0/19 maxlen: 32
52.130.64.0/19 maxlen: 32
52.130.96.0/20 maxlen: 32
52.130.112.0/20 maxlen: 32
52.130.128.0/18 maxlen: 32
52.130.192.0/18 maxlen: 32
52.131.0.0/17 maxlen: 32
52.131.128.0/17 maxlen: 32
139.217.0.0/16 maxlen: 32
139.217.0.0/17 maxlen: 32
139.217.128.0/17 maxlen: 32
139.219.0.0/16 maxlen: 32
139.219.0.0/17 maxlen: 32
139.219.128.0/17 maxlen: 32
159.27.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1796 (0x704)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FC627EF6134E4A04E7328003BB2B2F6A7196579
Validity
Not Before: Jun 3 08:47:29 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=4B2EA542B7C5C646E72726229D0A3CAAA6472CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:dc:29:85:1c:4d:10:e9:e8:c4:d5:32:77:
bb:9f:8a:4e:12:ad:ab:10:45:8b:05:e5:b7:58:33:
2d:c9:97:26:16:42:0d:88:6f:cd:7b:47:1e:17:a5:
d3:bd:92:c6:c0:20:cc:d2:d2:5c:25:c1:30:46:0d:
98:0a:b4:b6:a0:e7:e7:6c:79:9d:83:88:66:d6:62:
f8:34:56:21:e6:ef:95:bc:e9:4d:5a:92:a4:6b:e3:
c6:9d:73:bd:7f:51:9d:66:23:9c:ad:8e:98:6b:15:
82:d4:51:d4:11:ba:33:92:cc:90:96:c5:f4:85:06:
56:f0:b6:c2:43:ab:20:12:9b:39:fd:7c:3d:52:45:
76:80:ff:4b:3d:cd:e7:25:64:18:67:24:f6:5c:3f:
80:f1:f3:ed:e0:2d:09:70:50:32:35:b5:6f:8a:77:
d5:e5:c3:9b:f2:2a:c3:d3:1b:b7:88:ea:c1:33:76:
82:5c:75:5c:65:37:bb:6b:90:b7:b2:2a:82:d5:97:
b8:ed:09:42:19:a4:cf:5a:5d:66:a9:b3:75:5a:7f:
cc:7c:a7:b5:32:ea:54:04:ec:c2:cd:ba:ab:62:88:
3b:d7:90:20:f0:b9:d8:c3:af:e0:91:46:2d:93:a7:
6c:13:2d:3f:64:27:92:a9:27:e0:39:b2:c3:f5:41:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2E:A5:42:B7:C5:C6:46:E7:27:26:22:9D:0A:3C:AA:A6:47:2C:DC
X509v3 Authority Key Identifier:
keyid:5F:C6:27:EF:61:34:E4:A0:4E:73:28:00:3B:B2:B2:F6:A7:19:65:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/X8Yn72E05KBOcygAO7Ky9qcZZXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X8Yn72E05KBOcygAO7Ky9qcZZXk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Sy6lQrfFxkbnJyYinQo8qqZHLNw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
40.72.0.0/15
40.125.128.0/17
40.126.64.0/18
52.130.0.0/15
139.217.0.0/16
139.219.0.0/16
159.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:7b:0c:18:55:9c:06:07:2a:18:9c:46:ee:59:e4:4a:b9:2f:
0b:09:50:12:ef:00:ec:f7:f1:30:3a:1a:42:6d:bb:91:52:6b:
58:93:47:22:dc:ad:77:73:28:eb:45:ed:44:2e:91:21:79:a6:
4b:f2:27:86:27:62:01:d9:4d:44:2f:6c:a8:1f:cb:ce:19:b4:
77:4c:f2:de:73:46:6e:8c:a0:f6:f8:49:ef:10:67:ad:69:64:
49:88:1a:a5:6d:e9:c5:a4:cf:11:8c:95:12:3d:e6:74:e5:25:
3b:25:86:04:e1:ac:ae:47:61:4e:09:e4:97:f7:83:0b:9c:4e:
42:94:8d:41:40:e6:cf:9c:2d:9b:bf:28:d3:9c:d0:85:83:8b:
4f:11:bf:0b:d4:ca:39:a0:33:27:21:c1:98:bc:ff:09:11:92:
ed:2b:35:72:fb:62:0a:84:dc:d0:dd:7e:b9:23:19:56:38:3d:
b3:4b:61:e4:2b:e6:9e:c6:3b:c9:29:41:e7:94:be:70:fa:40:
33:92:b3:76:d9:0d:a4:8b:03:8b:46:9b:94:61:fe:a8:c6:99:
3e:9d:87:22:54:30:ca:c1:43:57:cd:a0:a3:e9:26:de:95:7d:
9d:bd:97:17:03:91:31:aa:15:db:44:ac:b9:f9:5d:3c:d6:33:
ae:8d:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org