Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/NVlgmDjJAzbcPaY36MYNGgmiZhk.roa
File: NVlgmDjJAzbcPaY36MYNGgmiZhk.roa (raw, json)
Hash identifier: I9lAjW7JJGCn/g79537vHQEpIvlFBd0dBMTl+umytAM=
Subject key identifier: 35:59:60:98:38:C9:03:36:DC:3D:A6:37:E8:C6:0D:1A:09:A2:66:19
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 094A
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/NVlgmDjJAzbcPaY36MYNGgmiZhk.roa
Signing time: Tue 07 Jun 2022 02:11:15 +0000
ROA not before: Tue 07 Jun 2022 02:11:15 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 134764
IP address blocks: 120.31.164.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: Jun 7 02:11:15 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=3559609838C90336DC3DA637E8C60D1A09A26619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:13:2c:32:d7:d9:2c:96:e9:a4:39:f6:a7:
9e:96:c8:4e:ee:b6:f0:50:97:2f:59:5a:53:16:e8:
32:7b:c3:40:df:7b:35:ef:e3:6d:15:42:8c:61:ac:
ba:6a:06:f4:d2:ab:51:9d:28:94:a9:b5:d1:1f:27:
fc:e8:97:92:d8:cb:01:2a:b2:4f:da:de:87:63:bd:
c9:ea:46:61:d9:05:76:dc:1a:b0:80:13:d8:e7:ef:
c1:a0:af:79:3c:08:84:ae:01:45:90:00:ba:e1:d8:
1c:0c:31:1b:28:ec:9b:8d:66:a6:90:1e:52:1d:de:
07:db:b1:05:38:c7:49:5f:c4:23:64:68:16:84:b8:
28:86:14:71:0f:a4:e0:a7:dd:59:c0:bb:90:70:e4:
4a:54:7b:82:44:af:1f:70:05:ac:60:94:52:97:68:
8b:27:26:82:29:6b:c1:f9:aa:4a:b2:16:58:2f:78:
17:22:b0:60:94:97:e5:a8:a0:d1:a7:1e:48:36:35:
03:8f:03:75:db:c2:d1:1f:e4:6f:64:e5:dd:86:a3:
b5:ad:5a:c9:90:c0:db:ae:a2:07:a5:12:1c:8c:32:
e2:b6:e3:73:91:60:10:5c:88:31:e3:94:83:e3:65:
3a:6e:cb:b6:d8:9d:1d:24:6e:f4:5a:fc:32:ba:51:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:59:60:98:38:C9:03:36:DC:3D:A6:37:E8:C6:0D:1A:09:A2:66:19
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/NVlgmDjJAzbcPaY36MYNGgmiZhk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.31.164.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:c3:ab:8f:24:8b:b0:af:ff:45:49:97:3d:f2:22:93:8d:df:
ad:4a:da:7d:8d:0c:7d:f9:36:e0:a8:23:2f:20:0a:8b:58:9e:
d5:bf:48:b4:68:72:5d:af:99:da:81:40:95:2c:29:7c:c3:95:
bc:9e:c0:8b:64:dd:01:24:82:9f:d1:d3:74:05:bb:49:cf:2e:
71:16:10:8a:ca:11:a5:a2:19:3e:9d:ca:0c:2d:f9:4a:d2:e0:
25:ac:0a:0c:86:e6:79:ea:c2:ea:a5:08:0e:21:df:72:3f:ee:
51:75:72:59:02:ec:03:5b:d7:18:55:b8:4e:bd:cd:5d:53:1e:
c2:93:11:2d:58:ee:6a:29:24:4f:03:57:d6:e1:36:d4:e0:53:
18:6b:55:e0:93:10:50:15:7d:37:3b:4e:d1:9a:28:2c:cf:96:
48:a0:b6:41:6e:13:64:12:80:2e:d9:5d:b2:3d:a8:81:e2:e0:
ed:cc:6e:4c:6e:52:2d:74:0e:c7:4f:29:1e:4b:68:76:a5:30:
36:58:62:70:9f:b6:a5:5d:a9:ce:96:67:5a:6d:84:14:86:11:
bb:02:a1:20:95:c1:d3:e0:c4:d3:70:7a:d7:3b:d5:95:ed:9f:
90:1e:3d:21:40:ed:cb:86:5d:a8:e2:38:b4:37:5e:f3:24:da:
aa:26:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org