Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/6U5pGDxo-yG-hrjlrN1XoBagxrY.roa
File: 6U5pGDxo-yG-hrjlrN1XoBagxrY.roa (raw, json)
Hash identifier: Du1BEygfT6LYlctWYDvGTajn0XD9W2ltV2p6BjL+VyQ=
Subject key identifier: E9:4E:69:18:3C:68:FB:21:BE:86:B8:E5:AC:DD:57:A0:16:A0:C6:B6
Certificate issuer: /CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Certificate serial: 0705
Authority key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/6U5pGDxo-yG-hrjlrN1XoBagxrY.roa
Signing time: Fri 10 Feb 2023 02:44:50 +0000
ROA not before: Fri 10 Feb 2023 02:44:50 +0000
ROA not after: Tue 16 Jan 2024 06:09:07 +0000
asID: 37963
IP address blocks: 47.112.0.0/16 maxlen: 24
47.113.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Validity
Not Before: Feb 10 02:44:50 2023 GMT
Not After : Jan 16 06:09:07 2024 GMT
Subject: CN=E94E69183C68FB21BE86B8E5ACDD57A016A0C6B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:fb:1e:9c:d5:21:02:47:15:11:99:e8:0b:
b9:92:7f:39:48:5f:1e:5d:93:e0:23:a9:6d:6e:1f:
d2:98:47:d6:ed:11:5e:2c:8e:87:bb:7d:3f:cd:d4:
5d:89:f6:7a:d3:85:66:5a:22:2a:a4:1d:80:2b:d2:
6d:a1:55:4f:0b:ee:5c:be:e2:ef:6b:d3:4f:07:c5:
7d:eb:e8:f8:87:b1:15:c9:2b:49:79:67:79:e3:ab:
96:ee:3f:b4:5e:21:21:1b:a2:e0:c3:95:8c:b0:af:
43:4f:1f:61:91:f6:e0:2b:78:8f:9e:d2:a6:e9:6d:
89:3f:df:b6:9f:a7:10:3f:68:32:da:f9:cc:d6:72:
ae:da:b2:21:9e:b0:20:79:a8:87:94:c1:5c:f3:75:
33:cb:dc:23:32:be:00:ee:83:08:0d:6a:05:f9:f2:
e1:66:97:8c:d1:b3:96:bd:af:cd:c5:3d:d6:ec:18:
2e:2b:40:b2:30:89:1c:58:27:6d:86:ab:f0:31:86:
62:fe:2c:da:98:f3:06:d3:5b:34:5b:5e:a4:e9:88:
a7:00:fe:28:60:e9:96:8e:a7:bc:e0:ee:ba:ab:2b:
60:f0:ed:e3:44:41:a1:f0:e9:4c:4c:d7:9c:df:9e:
7f:f5:31:a6:0b:16:81:c2:6d:a1:36:05:20:05:09:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:69:18:3C:68:FB:21:BE:86:B8:E5:AC:DD:57:A0:16:A0:C6:B6
X509v3 Authority Key Identifier:
keyid:CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/6U5pGDxo-yG-hrjlrN1XoBagxrY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
47.112.0.0/15
Signature Algorithm: sha256WithRSAEncryption
58:8c:f4:e2:94:74:1a:2a:5c:13:bb:9e:2d:17:fe:9b:36:85:
ce:21:d8:89:79:1d:3e:5d:8c:45:ff:21:06:8b:61:95:c0:fc:
a7:0b:91:f0:2b:73:10:aa:fb:d5:2e:b6:71:1b:11:9e:48:d4:
0d:a6:55:df:32:aa:64:a8:1e:21:34:6b:eb:63:0c:b1:eb:e9:
59:38:1f:93:e7:82:35:75:37:f0:c0:cf:2c:fe:30:a7:d7:19:
f5:18:7d:75:10:fa:ab:c4:6d:63:3a:ed:ab:01:80:af:c8:0b:
00:7d:8c:ec:17:1b:3f:be:68:47:7e:3b:9b:57:38:bb:18:a6:
92:1e:4b:eb:de:2b:63:2f:12:49:72:93:71:00:47:34:87:0e:
42:46:b5:07:7d:71:8a:21:a3:c4:99:0e:87:1a:37:55:57:24:
c6:db:72:af:f3:c8:b4:04:fa:9d:81:4b:f4:b8:35:32:9d:b8:
a2:a6:b1:f9:0d:82:1c:59:c6:d7:20:d6:12:bb:1a:45:fa:29:
d2:37:54:47:a4:04:2d:6e:13:88:96:d7:fb:ec:54:0f:58:81:
84:1f:ed:2f:4d:98:f2:c5:16:41:9a:ee:e0:0c:38:c6:52:75:
c8:b8:45:98:9e:a8:1d:ad:bc:a8:37:f1:f0:00:fc:1a:bd:69:
c7:80:26:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:01 2024 by rpki-client on console-ams.rpki-client.org