Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/AgtktTc-Qh94FddENT9AADe5FbY.roa
File: AgtktTc-Qh94FddENT9AADe5FbY.roa (raw, json)
Hash identifier: 7+IUS5E7j8Vtniroj6xIIqOchgO33KJPx47LdAvP0i0=
Subject key identifier: 02:0B:64:B5:37:3E:42:1F:78:15:D7:44:35:3F:40:00:37:B9:15:B6
Certificate issuer: /CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Certificate serial: 0706
Authority key identifier: CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/AgtktTc-Qh94FddENT9AADe5FbY.roa
Signing time: Fri 10 Feb 2023 02:44:50 +0000
ROA not before: Fri 10 Feb 2023 02:44:50 +0000
ROA not after: Tue 16 Jan 2024 06:09:07 +0000
asID: 37963
IP address blocks: 47.112.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1798 (0x706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0A9CB02937B57DCE66A17FB84216D7ABE76434
Validity
Not Before: Feb 10 02:44:50 2023 GMT
Not After : Jan 16 06:09:07 2024 GMT
Subject: CN=020B64B5373E421F7815D744353F400037B915B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:c5:c8:e8:ed:2f:f2:ad:01:3b:de:3c:be:
30:ea:ed:f3:ca:0f:8d:c7:91:4d:7a:17:76:e3:ee:
53:09:5b:ae:ca:de:4a:c6:77:48:32:86:61:73:8e:
2d:74:9d:1e:6f:d6:97:12:27:c7:bc:08:a9:14:ba:
42:dd:f4:07:f1:14:35:d1:9e:0f:87:ab:b5:cd:cc:
a7:59:ca:c3:58:df:83:24:42:97:2d:c1:7a:9b:2a:
e0:b5:5d:9b:f3:62:d7:ab:79:82:ff:00:1b:88:95:
88:05:3c:7b:0b:b8:c3:a7:48:a7:d9:82:0d:6a:e1:
eb:04:b1:3b:15:7e:b7:73:82:fa:c5:80:41:db:65:
86:c4:68:82:c4:ad:cd:28:23:2e:6c:66:7b:28:74:
62:0b:c7:42:21:4e:36:ec:14:21:2b:05:35:55:66:
27:63:c0:d7:bb:44:66:68:17:d0:86:0c:a5:b1:4e:
8e:a8:1c:08:1b:0c:74:9f:67:07:e8:c9:10:8e:83:
09:04:a1:65:7a:b6:71:ee:c3:8e:76:46:bf:de:d4:
d9:14:c5:a0:fe:a0:df:b7:fa:e4:5a:be:8a:6a:83:
31:01:c5:fb:f0:76:25:75:db:ea:fd:6b:c9:28:95:
b0:07:93:17:8a:60:d8:d7:e0:f4:5f:a2:81:ba:76:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0B:64:B5:37:3E:42:1F:78:15:D7:44:35:3F:40:00:37:B9:15:B6
X509v3 Authority Key Identifier:
keyid:CE:0A:9C:B0:29:37:B5:7D:CE:66:A1:7F:B8:42:16:D7:AB:E7:64:34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/zgqcsCk3tX3OZqF_uEIW16vnZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zgqcsCk3tX3OZqF_uEIW16vnZDQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/AgtktTc-Qh94FddENT9AADe5FbY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
47.112.0.0/15
Signature Algorithm: sha256WithRSAEncryption
bf:30:1c:c5:c9:f9:24:4c:b1:f2:a9:b0:29:ab:c5:ef:e6:f0:
61:38:22:50:82:54:ff:f9:27:97:17:e1:89:a3:53:c1:2f:1f:
ea:eb:9f:93:ce:e9:cb:8a:ef:59:22:73:5b:6e:a4:f1:98:6f:
00:98:67:50:44:92:84:e2:06:01:dd:f8:67:9b:03:80:b6:ec:
7e:7e:0c:d1:38:d8:19:6d:5e:9d:49:47:ce:f4:1e:f8:69:28:
1a:82:78:1f:29:d8:4a:ee:c9:ac:f5:e9:97:ee:68:a6:01:23:
0d:3f:6d:d0:e1:69:01:b4:d9:2f:03:31:22:4f:d0:99:de:a0:
55:b4:dc:54:e7:d9:1c:53:de:d0:70:ce:9a:58:e9:39:a3:75:
05:c8:53:f0:b7:79:88:dd:76:e6:72:fd:2c:97:36:0c:4f:96:
2d:5d:fe:f3:67:6d:db:0f:24:ab:63:9e:56:5b:1e:32:91:d6:
b0:ed:44:88:18:6a:eb:21:1c:04:d3:16:0f:45:75:dd:6e:c1:
bc:4f:1e:bf:4b:fa:4c:94:eb:c3:ba:ac:8d:9c:72:c3:d1:58:
95:cb:ca:00:98:3a:8d:75:af:ea:3d:97:4c:cc:f7:b8:80:e9:
38:7a:de:6d:3b:3a:7a:15:bf:de:85:1d:db:af:83:93:61:69:
b9:d0:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:44 2024 by rpki-client on console-fra.rpki-client.org