Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/9LCnMrEK-rOyAZh5-cP6S8Y1tf0.roa
File: 9LCnMrEK-rOyAZh5-cP6S8Y1tf0.roa (raw, json)
Hash identifier: 2eK8cQSsrTgmE1bHDmpv3nl1G2mbzR630kYQRN8LMgo=
Subject key identifier: F4:B0:A7:32:B1:0A:FA:B3:B2:01:98:79:F9:C3:FA:4B:C6:35:B5:FD
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 094B
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/9LCnMrEK-rOyAZh5-cP6S8Y1tf0.roa
Signing time: Tue 07 Jun 2022 02:11:16 +0000
ROA not before: Tue 07 Jun 2022 02:11:16 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 135373
IP address blocks: 112.73.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379 (0x94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: Jun 7 02:11:16 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=F4B0A732B10AFAB3B2019879F9C3FA4BC635B5FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:9d:c5:2e:ab:e4:5b:ba:e8:e2:d3:bb:cb:
a7:4a:72:65:cb:70:1e:49:27:32:8e:b1:1e:27:2e:
6f:84:1f:c4:c3:49:b4:17:bd:93:a7:ea:37:37:6b:
6a:c2:2c:a9:bc:61:eb:c0:6b:d8:a6:0c:28:f2:40:
7d:cf:c7:ef:30:6e:96:13:7d:2d:03:b6:fb:6f:44:
a0:40:13:b6:f2:65:dc:ab:c3:93:64:7e:85:d3:3e:
df:a0:1f:ba:24:66:05:25:c2:05:a9:d6:fb:ec:a0:
0f:15:81:32:64:4c:18:52:b5:e1:91:49:ec:8d:b8:
16:e1:67:49:b5:6e:51:bc:78:80:6e:fb:0e:a0:e5:
b7:d9:74:ac:20:5d:b5:2d:0a:52:9b:e5:63:4e:ec:
54:e9:a4:e6:a6:78:aa:a3:55:5d:88:48:bc:ae:32:
13:2c:48:c8:8c:8c:0e:03:2c:da:d6:b2:35:2b:e4:
04:2c:1b:c9:61:90:20:5f:f0:08:6f:c1:e0:b7:2e:
5b:10:c0:b1:91:ab:62:5f:45:39:ab:0c:a9:78:fe:
68:51:9f:27:14:ca:39:6b:0c:b9:e6:c0:53:d6:1d:
db:ce:ab:95:89:aa:36:e3:76:58:8f:e9:f9:72:02:
02:a2:46:d9:f1:35:d5:c9:27:b3:4a:56:ee:48:c0:
e2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B0:A7:32:B1:0A:FA:B3:B2:01:98:79:F9:C3:FA:4B:C6:35:B5:FD
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/9LCnMrEK-rOyAZh5-cP6S8Y1tf0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.73.0.0/19
Signature Algorithm: sha256WithRSAEncryption
68:d8:7d:26:02:75:3f:34:12:ee:50:a1:8f:b1:0c:cf:c2:22:
cd:f6:17:45:a4:58:cc:26:e1:79:98:66:8e:2e:1a:ed:2a:fd:
41:61:cd:70:bd:54:84:01:17:ad:98:d3:53:f5:f9:e1:7d:76:
27:39:e1:38:5c:13:0d:a1:84:fa:f8:a9:8d:ad:f4:1d:ed:0f:
bb:f3:21:14:55:e4:ef:5d:3a:52:29:b8:af:b8:00:c5:a9:cf:
f4:61:bb:58:16:e8:38:15:2c:69:c9:6f:5f:da:58:59:e8:12:
11:74:bc:30:d9:5b:3d:d4:7c:8e:d1:48:bc:3f:c0:dd:60:f1:
63:49:e9:c6:2a:b3:b2:4c:92:5b:47:73:3e:d6:87:ee:b5:c6:
bf:e1:32:38:64:29:7d:31:33:92:56:f0:da:cc:25:38:bd:31:
89:5f:05:9b:42:9a:68:d4:c1:32:b7:9f:f3:23:c4:ca:62:0b:
bf:47:1c:92:74:ad:e9:15:cc:83:b1:b4:da:3f:3e:fb:88:3b:
27:fb:b7:49:5d:fb:c6:18:59:62:64:bc:c6:cb:f4:47:28:30:
47:04:87:00:08:c7:5c:a5:72:ea:d5:96:f3:d3:49:e5:3a:4c:
e4:9b:3c:ba:03:51:6f:11:73:dc:97:4e:f1:e6:66:d1:c5:2a:
e0:8c:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org