Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/dT2chZdtVNRLPzQ_434hEACK7r0.roa
File: dT2chZdtVNRLPzQ_434hEACK7r0.roa (raw, json)
Hash identifier: sj5jSPUTFKqAOk3NhKsIvZ9whJ10EH/p6vpEb5GeoV4=
Subject key identifier: 75:3D:9C:85:97:6D:54:D4:4B:3F:34:3F:E3:7E:21:10:00:8A:EE:BD
Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial: 0FC0
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/dT2chZdtVNRLPzQ_434hEACK7r0.roa
Signing time: Tue 09 May 2023 07:17:25 +0000
ROA not before: Tue 09 May 2023 07:17:25 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 131314
IP address blocks: 113.21.239.0/24 maxlen: 24
202.47.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4032 (0xfc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Validity
Not Before: May 9 07:17:25 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=753D9C85976D54D44B3F343FE37E2110008AEEBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:25:c7:e2:88:a4:81:d6:e7:be:3e:82:fd:
05:7c:0a:25:e2:a2:2b:45:4e:a3:a1:64:bb:fc:f7:
6c:56:bd:50:7f:d6:b5:3a:64:3b:d4:6f:d3:c8:ae:
58:41:68:02:50:11:1a:54:4a:e5:c4:cf:8b:8d:4e:
4e:e2:f7:97:74:0d:2b:40:2c:36:5d:29:17:5a:7c:
e5:7c:bd:44:7c:16:4b:69:8a:5a:1a:9f:f1:08:b3:
16:83:2b:df:1d:a2:fa:f0:66:a6:08:8b:52:0a:7d:
1d:83:eb:fd:66:4c:81:c7:2d:d5:ee:7f:4d:e2:1b:
68:ad:d9:c6:54:cd:f9:df:09:49:a5:61:2c:55:fa:
cf:35:a5:6b:7a:95:61:56:d8:fd:eb:41:4b:0d:79:
f1:3f:47:33:c4:30:91:d0:dd:f8:d1:39:df:b0:54:
d9:d3:73:92:c4:f0:98:5c:e7:17:09:aa:af:86:53:
12:1a:9d:df:19:10:e1:ff:41:6c:cd:8e:62:e2:00:
43:95:a3:47:78:1e:b4:ad:e2:0d:eb:2b:25:9b:f3:
6a:a1:cd:1b:49:9a:ca:b8:e9:d7:ae:0c:b0:ba:c9:
aa:c1:93:bb:16:10:39:c8:13:c1:6a:00:7c:43:77:
17:92:c4:d0:f2:5b:d4:c0:75:b0:fe:10:8a:18:6d:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3D:9C:85:97:6D:54:D4:4B:3F:34:3F:E3:7E:21:10:00:8A:EE:BD
X509v3 Authority Key Identifier:
keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/dT2chZdtVNRLPzQ_434hEACK7r0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.239.0/24
202.47.106.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ea:05:ff:73:a8:40:a7:6c:d0:4b:67:ba:ae:1f:01:d6:2d:
bd:45:b4:e7:6b:55:b2:52:8f:a8:4c:72:d6:ee:db:12:cf:ce:
31:c7:52:74:98:ff:6f:37:b1:0e:3f:e1:9c:8f:5e:f9:0e:a7:
32:40:42:83:43:60:3d:fb:f4:c4:89:58:87:fa:71:d2:92:ca:
07:0d:bf:12:f8:9d:98:dd:b0:0c:01:af:35:0b:68:52:5b:b6:
ef:dd:58:2f:e8:38:95:84:7f:04:42:78:b1:85:09:28:2d:98:
c1:68:5d:c5:59:94:98:59:fb:62:0d:56:9e:09:e1:d6:cc:08:
73:fe:34:0d:83:b2:22:db:7c:59:cc:c2:ea:45:0e:6e:25:52:
9d:c1:97:78:de:b3:55:fe:3f:fb:08:58:61:7b:a6:30:b2:20:
8e:ec:dd:6c:7a:67:31:a8:3c:d6:67:52:7f:e1:2f:8c:39:ca:
33:14:a6:37:69:7b:21:0a:04:1e:4a:2d:3e:0e:d3:5f:93:77:
05:b7:85:7b:7a:2b:b8:fe:f8:0a:7d:0b:8c:0d:45:d6:7f:4a:
37:df:de:98:8d:27:eb:bf:62:a2:6a:79:f3:03:a0:04:37:c4:
5c:8c:bd:3b:58:c5:09:57:84:a0:3a:42:2f:ea:c4:ab:51:5c:
c9:94:c5:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org