Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/L7aBBt8WlmMTqT5hMKGe8smOA7c.roa
File: L7aBBt8WlmMTqT5hMKGe8smOA7c.roa (raw, json)
Hash identifier: krgJiEjHYIIh1gUXqVEpk0l7/rpOnQ9iXazjK1xtUJU=
Subject key identifier: 2F:B6:81:06:DF:16:96:63:13:A9:3E:61:30:A1:9E:F2:C9:8E:03:B7
Certificate issuer: /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Certificate serial: 0D
Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/L7aBBt8WlmMTqT5hMKGe8smOA7c.roa
Signing time: Fri 25 Feb 2022 15:30:10 +0000
ROA not before: Fri 25 Feb 2022 15:30:10 +0000
ROA not after: Fri 24 Feb 2023 03:06:27 +0000
asID: 37963
IP address blocks: 110.75.0.0/18 maxlen: 24
110.75.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Validity
Not Before: Feb 25 15:30:10 2022 GMT
Not After : Feb 24 03:06:27 2023 GMT
Subject: CN=2FB68106DF16966313A93E6130A19EF2C98E03B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d0:14:03:39:4f:ec:4b:df:07:b4:5d:7f:74:
7f:84:56:42:95:85:7d:48:e8:d4:16:b2:08:01:7b:
ca:8f:59:d5:67:fb:6a:4f:57:17:29:78:17:5e:cd:
dd:aa:f8:40:8d:8e:73:e3:15:3e:39:d0:75:4c:8a:
4c:ea:de:4d:9a:fc:de:6e:53:dd:27:55:a7:f7:55:
23:71:af:cc:4c:6c:e8:3f:d8:c7:04:f8:5d:3f:60:
22:18:40:02:95:8a:6c:c6:f6:a4:59:ff:b0:4e:ec:
79:de:72:16:8c:8a:e4:08:0e:be:65:d4:12:d6:8b:
d5:6a:a1:46:11:61:3b:4d:0e:c9:30:1f:85:85:92:
30:68:39:3f:09:5d:cc:c9:6c:52:26:b9:1a:91:fe:
ae:7f:d3:db:09:49:3c:3b:e1:ed:3c:d2:3c:1c:93:
83:3d:ed:89:ab:7c:fd:c7:07:ed:5a:cf:e7:48:f7:
87:37:3a:31:46:90:41:9a:c4:4b:63:55:83:0e:2c:
a2:e4:8c:76:0d:8e:a2:1e:5b:17:5d:9b:c2:0a:78:
68:5e:da:08:aa:b3:24:ec:61:c4:4d:b4:7c:6b:cb:
6a:72:98:6e:69:a4:f5:3a:f3:41:c9:7c:30:72:d2:
25:20:5c:4f:22:79:5d:fb:fe:f0:53:60:07:5a:5b:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B6:81:06:DF:16:96:63:13:A9:3E:61:30:A1:9E:F2:C9:8E:03:B7
X509v3 Authority Key Identifier:
keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/L7aBBt8WlmMTqT5hMKGe8smOA7c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.75.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2a:d4:e5:25:3a:d0:ee:72:fb:1c:ab:1f:d4:62:3a:0c:8c:2d:
93:f8:04:57:b2:06:bc:89:1b:dd:88:5f:fb:1d:12:7e:ea:a9:
c2:0c:f0:1c:15:11:fe:36:25:d2:05:a2:e7:54:dd:1f:f2:b0:
3c:c8:d9:0d:4f:a8:3f:91:9a:ef:f5:b1:4a:f2:f3:78:58:4e:
3d:52:2b:7d:15:74:01:22:61:ee:ea:91:57:91:ea:dd:92:ed:
98:29:b3:34:53:26:7d:29:ac:65:43:00:c2:d8:d0:c9:ce:68:
39:9a:b0:da:d6:98:f8:01:4e:44:4e:cc:78:71:93:66:1a:40:
32:60:f0:31:15:7c:5f:53:19:3a:98:ca:a4:f8:0f:38:b1:7b:
6f:c3:f4:8b:9c:d0:f8:29:26:ec:c9:4f:19:97:59:f7:a6:09:
b8:a2:dc:15:09:d9:8c:88:4b:06:d3:cb:ee:00:0e:38:b4:d1:
83:73:84:f7:f3:58:c8:f7:35:ac:2a:ad:a8:24:fa:13:04:38:
d7:4e:75:14:87:37:dd:36:52:eb:08:60:fe:68:b0:c8:7b:d6:
b1:1b:30:fd:32:56:e6:39:55:95:10:8d:43:40:84:5d:c5:76:
85:d8:71:27:d9:1b:81:48:76:16:4b:7f:ea:8e:e2:37:8d:75:
df:53:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org