Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/332/IeBWnWXu4b9AMePJ2llmbfP6Qbc.roa
File: IeBWnWXu4b9AMePJ2llmbfP6Qbc.roa (raw, json)
Hash identifier: zZkwipqTOpOikVfij7fLHLOrqo8mPK4QKEdjrHg8OiQ=
Subject key identifier: 21:E0:56:9D:65:EE:E1:BF:40:31:E3:C9:DA:59:66:6D:F3:FA:41:B7
Certificate issuer: /CN=8646EA74356E704AEDD163ECA94E5A442308DF78
Certificate serial: 0D31
Authority key identifier: 86:46:EA:74:35:6E:70:4A:ED:D1:63:EC:A9:4E:5A:44:23:08:DF:78
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkbqdDVucErt0WPsqU5aRCMI33g.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/IeBWnWXu4b9AMePJ2llmbfP6Qbc.roa
Signing time: Mon 06 Jun 2022 20:06:19 +0000
ROA not before: Mon 06 Jun 2022 20:06:19 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 24424
IP address blocks: 203.208.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3377 (0xd31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8646EA74356E704AEDD163ECA94E5A442308DF78
Validity
Not Before: Jun 6 20:06:19 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=21E0569D65EEE1BF4031E3C9DA59666DF3FA41B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:48:2e:43:2d:e2:b2:d6:2c:4b:8b:ae:dc:
1f:05:25:f1:2b:e3:f8:fc:99:27:22:bb:74:be:9b:
72:4c:b5:f9:cc:93:af:a8:81:e5:e9:f8:44:12:84:
ac:3d:5b:14:8a:20:cc:3a:3e:78:ae:ba:f2:13:90:
8d:45:3e:9f:39:41:83:ec:56:30:02:9e:ce:6a:d2:
54:6f:ad:2c:03:a0:f0:21:a4:d1:fc:01:59:9c:36:
32:0d:90:65:e8:09:a0:80:72:91:fe:af:64:80:09:
9e:55:7d:46:34:e6:8c:0c:d8:5e:bb:bc:51:03:e4:
4c:e1:f4:99:cc:1c:56:46:b1:96:78:1a:e8:5a:53:
0e:de:fc:c6:cb:92:e2:5f:04:47:5c:d0:32:1c:64:
3f:6c:2d:c1:94:be:66:68:8f:fd:ef:4e:da:85:db:
e9:38:0d:8a:0a:ad:a7:40:cc:bc:d6:cf:55:2f:a5:
3c:d8:62:c8:35:05:08:6e:8b:25:d1:3e:70:0e:5b:
cb:f4:16:d8:52:84:c6:6c:6d:7f:99:29:3f:ab:43:
75:af:33:5f:35:bd:b5:af:d1:91:5d:b8:22:a4:ee:
0d:a0:27:43:0e:1a:c9:c0:1d:c0:15:61:35:7e:62:
55:2f:66:ff:7c:2e:f6:25:cf:9f:9e:33:40:fc:6f:
ee:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:56:9D:65:EE:E1:BF:40:31:E3:C9:DA:59:66:6D:F3:FA:41:B7
X509v3 Authority Key Identifier:
keyid:86:46:EA:74:35:6E:70:4A:ED:D1:63:EC:A9:4E:5A:44:23:08:DF:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/hkbqdDVucErt0WPsqU5aRCMI33g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hkbqdDVucErt0WPsqU5aRCMI33g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/IeBWnWXu4b9AMePJ2llmbfP6Qbc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
42:2b:c6:41:68:c1:b1:2a:bd:fc:cf:2d:32:71:fb:a5:d6:40:
f3:f9:48:30:b8:16:a1:d8:ab:df:e8:9f:00:76:ea:bc:d0:28:
3d:16:8a:7c:ca:de:a0:fd:08:4c:d7:8a:4d:7a:08:6e:dc:55:
26:3c:93:8a:9a:fc:fd:b0:c9:04:dd:14:8b:2c:c6:39:0b:7a:
e2:96:51:11:ef:ce:8d:c7:f6:05:9b:22:c1:73:e2:88:39:ce:
8c:fc:3b:04:be:7a:c6:e4:68:83:cb:b2:5f:51:58:f5:98:11:
d8:3a:63:23:94:99:02:67:d8:6e:35:55:c0:a7:3b:8e:99:a1:
c3:1c:66:0e:0f:09:fb:7b:80:40:f1:20:ab:e1:e2:3f:03:01:
0a:fb:a1:c5:89:04:a4:13:3c:82:e6:f4:35:d4:4a:b5:31:aa:
43:b3:c8:43:df:7d:20:e1:58:da:e5:02:bd:c1:25:25:19:61:
c5:98:31:c4:3a:a1:5e:f7:68:59:52:ab:cf:06:2a:45:29:89:
b5:83:02:3d:a3:7e:9c:75:1f:93:b7:a3:9d:7a:5a:98:ec:aa:
5a:cb:df:a8:cf:bc:2f:fd:73:cf:2b:6b:7e:1f:f7:bf:44:bd:
70:3d:b6:8f:08:ea:fa:89:77:1d:88:44:11:87:1c:64:78:5f:
72:c9:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org