Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/jtVkgSo7oho7rDy8zKRabWic6zE.roa
File: jtVkgSo7oho7rDy8zKRabWic6zE.roa (raw, json)
Hash identifier: NfZFC4TCE2OAFCLtLsBMilUshWOmt3Sf1Z3754K7sRo=
Subject key identifier: 8E:D5:64:81:2A:3B:A2:1A:3B:AC:3C:BC:CC:A4:5A:6D:68:9C:EB:31
Certificate issuer: /CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Certificate serial: 05
Authority key identifier: CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/jtVkgSo7oho7rDy8zKRabWic6zE.roa
Signing time: Wed 01 Jun 2022 07:07:48 +0000
ROA not before: Wed 01 Jun 2022 07:07:48 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 58593
IP address blocks: 163.228.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDEF7111DE98BD756D92B34D394DA2D39EFF9B8E
Validity
Not Before: Jun 1 07:07:48 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=8ED564812A3BA21A3BAC3CBCCCA45A6D689CEB31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:18:03:f0:95:87:b1:08:8d:91:57:28:7f:
00:79:ab:3f:cf:9f:99:e6:a4:d0:c3:11:fb:10:d8:
9a:94:ea:89:fc:72:f3:ac:e1:54:58:40:fb:c9:9c:
56:98:5f:a7:dc:df:e8:8b:c9:de:d3:cf:a3:a7:f2:
f5:fe:1c:6f:df:94:9a:17:9a:02:f3:c3:66:46:19:
eb:34:3b:05:a9:3c:3d:0b:e6:2b:cb:66:b2:20:b6:
d9:76:2c:d3:e0:59:bc:b3:67:93:cf:dd:df:c2:c7:
d6:d3:94:2c:47:08:2d:21:d4:33:6e:32:3e:2c:74:
72:6d:d1:b2:4b:60:69:f9:7f:7d:59:99:32:e2:2a:
ee:d7:54:8a:4b:39:8d:1f:8f:ef:5c:d9:a0:6f:64:
ce:98:1d:f7:90:b3:75:ef:b7:2f:b5:44:1b:35:b4:
be:f3:34:26:67:31:8f:8e:8b:b1:92:67:39:9a:c7:
77:ea:bd:1f:ef:89:ec:2a:35:8d:0a:32:4c:18:5b:
fe:74:a2:21:f2:86:29:4b:55:35:d1:aa:67:21:cd:
3c:83:22:9d:81:79:ed:3a:16:04:f6:08:e3:65:f0:
0e:3b:a5:35:bf:20:89:eb:cb:9b:e7:29:ff:0b:39:
83:7a:00:24:c8:67:7f:58:27:21:10:24:43:14:65:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:64:81:2A:3B:A2:1A:3B:AC:3C:BC:CC:A4:5A:6D:68:9C:EB:31
X509v3 Authority Key Identifier:
keyid:CD:EF:71:11:DE:98:BD:75:6D:92:B3:4D:39:4D:A2:D3:9E:FF:9B:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/ze9xEd6YvXVtkrNNOU2i057_m44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ze9xEd6YvXVtkrNNOU2i057_m44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/jtVkgSo7oho7rDy8zKRabWic6zE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:ea:a3:3b:d7:81:e5:86:f3:04:15:81:b4:9b:76:bf:a6:49:
73:6a:65:f3:49:10:2c:62:33:73:6a:2d:e8:f1:35:e4:68:b1:
62:9b:0e:08:07:4c:93:15:ea:08:82:fc:e8:6d:43:fc:7b:4d:
34:a1:d3:e5:4d:37:c1:d4:b3:e2:dd:35:e4:36:72:6f:6f:27:
c0:9c:23:04:77:8f:a9:a2:95:5d:76:53:cd:4d:72:cd:ca:ef:
64:9d:09:9a:51:49:96:d1:9e:3f:1f:52:66:76:28:70:f8:de:
5c:66:e0:75:37:13:45:87:53:cf:18:f4:37:c5:58:3c:72:d3:
5e:fa:69:6e:5c:0d:1b:36:38:81:22:02:e2:16:cb:5a:0e:ed:
cb:ca:42:05:49:b4:7f:16:b2:1a:f3:b4:e7:5e:f9:45:b5:ae:
29:67:12:e9:04:cc:9d:ee:70:f9:79:34:dc:c3:7f:d2:4d:60:
9c:68:40:e6:b8:92:d5:a1:62:94:83:47:87:3e:41:6c:c4:05:
24:e9:91:b0:0a:d0:b7:c7:1e:cc:be:63:37:64:53:96:ae:3d:
3b:5f:ef:a9:f6:77:47:fc:f5:91:40:a1:fc:70:83:c8:3a:bf:
a8:1e:31:1e:cc:e7:bb:cd:3d:cc:37:c1:ff:b5:4c:37:e8:0a:
0f:c3:d4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org