Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3316/X-IezH7IZsP-5NMicLi3D8itEBg.roa
File: X-IezH7IZsP-5NMicLi3D8itEBg.roa (raw, json)
Hash identifier: pC3j0o4XeODIVN9cul3i3daXwi3udSN3Z95cSEDWD7A=
Subject key identifier: 5F:E2:1E:CC:7E:C8:66:C3:FE:E4:D3:22:70:B8:B7:0F:C8:AD:10:18
Certificate issuer: /CN=9162D04F9109FFFDF72CF5B179CED92B9F1A53DE
Certificate serial: 04
Authority key identifier: 91:62:D0:4F:91:09:FF:FD:F7:2C:F5:B1:79:CE:D9:2B:9F:1A:53:DE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kWLQT5EJ__33LPWxec7ZK58aU94.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3316/X-IezH7IZsP-5NMicLi3D8itEBg.roa
Signing time: Mon 02 Sep 2024 06:21:23 +0000
ROA not before: Mon 02 Sep 2024 06:21:23 +0000
ROA not after: Tue 02 Sep 2025 01:19:22 +0000
asID: 136146
IP address blocks: 160.30.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9162D04F9109FFFDF72CF5B179CED92B9F1A53DE
Validity
Not Before: Sep 2 06:21:23 2024 GMT
Not After : Sep 2 01:19:22 2025 GMT
Subject: CN=5FE21ECC7EC866C3FEE4D32270B8B70FC8AD1018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:ad:d7:f4:80:c0:e1:a3:b6:45:c2:ea:27:
f2:43:71:ac:58:1d:39:38:67:53:25:e9:fb:58:20:
5a:73:01:27:44:97:5f:82:62:81:8d:72:42:25:aa:
ed:cf:cd:0f:c3:23:4f:cb:d1:aa:cf:d1:b9:12:b5:
ea:91:93:26:2f:f0:66:b8:a3:10:50:9e:c1:1b:24:
b8:4d:40:9c:31:1c:67:8c:ff:45:09:b7:b7:84:dd:
71:57:e8:cd:f5:63:3d:28:d6:95:e6:a0:70:fd:95:
82:fb:d4:ec:f1:5e:d7:6f:7f:3c:09:5e:31:64:fb:
c8:f6:00:fb:37:c2:9d:11:aa:9d:a3:81:9d:98:6b:
32:29:6f:7c:ff:6c:70:5d:39:fa:5b:e7:47:ef:e4:
99:c3:ce:22:d5:ec:d3:00:42:48:dc:c1:32:b3:27:
19:cb:2b:1c:6f:55:79:79:34:15:d2:1d:a6:55:8a:
9d:1f:f9:f6:ef:94:b0:16:4e:ba:a0:c7:98:65:c8:
81:7b:f4:fc:e6:27:22:1a:27:ce:08:7c:5e:6e:b0:
17:14:e7:1f:87:d3:7a:5b:43:69:b1:80:08:35:62:
db:6e:db:ad:40:2d:7a:04:d5:0e:fb:a4:53:ff:80:
92:a6:8a:47:9c:8b:a8:2c:27:90:b7:61:38:70:aa:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E2:1E:CC:7E:C8:66:C3:FE:E4:D3:22:70:B8:B7:0F:C8:AD:10:18
X509v3 Authority Key Identifier:
keyid:91:62:D0:4F:91:09:FF:FD:F7:2C:F5:B1:79:CE:D9:2B:9F:1A:53:DE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3316/kWLQT5EJ__33LPWxec7ZK58aU94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kWLQT5EJ__33LPWxec7ZK58aU94.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3316/X-IezH7IZsP-5NMicLi3D8itEBg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.230.0/23
Signature Algorithm: sha256WithRSAEncryption
33:ee:aa:fa:92:20:3f:85:d0:03:10:ca:ee:76:11:dd:73:cd:
01:df:39:2a:36:b8:a7:a6:95:72:e2:fc:79:a0:69:2f:4e:29:
73:12:b1:0a:45:4b:dc:36:a1:ca:e2:da:ee:65:1b:55:a6:46:
26:15:3a:70:c9:ed:45:09:d0:b3:dc:fe:e9:77:9b:f0:54:0e:
75:69:35:b7:f1:8d:c4:09:fa:c9:3e:06:8f:8c:1c:9d:86:af:
9b:16:26:3f:dd:c2:a9:95:77:25:e1:1b:e8:a0:91:fc:f1:ea:
a5:78:ca:a7:01:5d:ef:64:f8:e6:2c:84:f8:d4:10:3a:fe:f4:
24:56:4a:77:88:f2:c5:02:5e:e9:a4:16:59:70:59:68:23:20:
27:c4:5a:cb:4a:56:f1:7a:6b:de:75:8d:17:cd:0d:a8:cc:76:
65:5f:81:b6:8d:18:a5:7a:ce:e6:b9:49:34:64:dd:04:83:a4:
f2:b1:b4:82:97:8d:eb:84:d7:64:69:09:0a:0a:4d:cc:08:a7:
8d:00:31:5e:0a:e9:17:b9:05:27:cf:3f:5b:32:bf:4a:c0:92:
97:b1:51:a2:6e:1a:94:5e:9a:d4:f9:0e:d6:e4:26:b8:57:a8:
f4:d0:7f:85:9e:58:f9:5c:03:26:32:2b:4e:1c:a6:79:19:67:
23:46:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 03:20:55 2024 by rpki-client on console-fra.rpki-client.org