Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/xed9XwCRwZNWEsJNAoLnPsqc3Ac.roa
File: xed9XwCRwZNWEsJNAoLnPsqc3Ac.roa (raw, json)
Hash identifier: taCVPiLRo8hn+T0MH2vI0aA3pUTN7ieX9zlNRivV0y4=
Subject key identifier: C5:E7:7D:5F:00:91:C1:93:56:12:C2:4D:02:82:E7:3E:CA:9C:DC:07
Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial: 1049
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/xed9XwCRwZNWEsJNAoLnPsqc3Ac.roa
Signing time: Mon 05 Jun 2023 03:11:16 +0000
ROA not before: Mon 05 Jun 2023 03:11:15 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 45770
IP address blocks: 43.254.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4169 (0x1049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Validity
Not Before: Jun 5 03:11:15 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=C5E77D5F0091C1935612C24D0282E73ECA9CDC07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:04:b2:61:16:78:f9:fa:2a:67:73:e7:cc:
6c:89:4d:1f:9c:01:ad:ed:64:f0:7b:57:95:7a:7f:
78:22:a2:8d:43:63:41:5d:94:4e:87:8e:80:db:6a:
30:bc:f6:7c:da:22:d2:00:09:65:94:47:48:9b:56:
da:f7:7c:3c:30:c1:90:48:7d:68:8d:db:ab:ed:41:
37:c5:77:9d:4a:cb:f3:a5:3f:77:46:5d:79:87:76:
6b:d6:ef:f6:79:54:17:64:91:20:c3:46:66:76:52:
32:60:65:fc:22:7a:5e:4a:97:ef:94:bf:ca:ed:a3:
89:96:ce:f0:05:3d:c9:7a:ed:aa:ec:8a:42:1c:f7:
65:6d:d8:4f:e6:72:61:3e:8e:95:0d:fa:08:93:9b:
84:81:d5:20:85:91:a1:f9:68:c7:8f:1a:84:02:d9:
4e:0c:ab:c5:96:90:57:59:ac:1e:7d:07:f4:9f:c1:
1f:8d:4c:d3:6d:a9:38:1d:4b:84:31:78:3a:54:01:
13:08:0d:e6:c5:69:c2:be:5a:0b:aa:3b:6b:43:64:
24:6c:2f:66:ea:62:83:2e:c2:d9:06:7c:1a:55:4d:
df:99:96:2d:6e:e2:e5:98:85:80:c8:79:8a:56:6d:
44:e0:fd:c9:a5:23:2e:0b:4c:37:1a:89:cc:80:c6:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E7:7D:5F:00:91:C1:93:56:12:C2:4D:02:82:E7:3E:CA:9C:DC:07
X509v3 Authority Key Identifier:
keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/xed9XwCRwZNWEsJNAoLnPsqc3Ac.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.228.0/22
Signature Algorithm: sha256WithRSAEncryption
03:a8:2d:45:14:69:43:8e:c6:10:8a:41:6b:11:96:66:c2:8e:
8f:cb:83:11:9d:db:d9:7c:83:07:ba:da:0d:b7:14:e6:cb:d2:
cc:5a:a7:70:7d:16:e3:78:8b:16:d4:d6:c5:51:7a:ca:7d:af:
5f:b4:16:34:ba:cf:83:56:aa:16:a5:d1:ea:d9:4f:85:d9:73:
65:ae:10:77:db:0e:57:b3:57:64:57:78:75:7f:82:45:d9:4d:
2e:b9:36:79:02:c9:4f:90:e2:fe:1c:73:83:4e:df:7f:3e:0d:
61:11:ba:ad:82:81:03:3a:28:4e:60:d3:3d:9a:c5:04:fb:70:
c0:76:47:84:64:00:df:c6:9d:2c:93:1d:1c:c0:fa:73:ad:1b:
6f:65:36:30:97:51:79:c9:11:10:08:4d:d7:63:11:46:45:cb:
c4:a9:30:f2:02:4a:2b:c3:17:47:81:b7:96:b2:44:40:fd:d9:
94:ac:78:c8:cb:b7:2d:5c:59:4a:31:9e:a8:6e:ea:b4:7d:c7:
4d:32:af:db:fd:9d:b8:8e:de:e9:24:a6:4f:0c:cc:17:16:9a:
18:63:bb:d0:07:c8:cf:c8:75:1c:67:de:6a:36:b0:04:11:6c:
58:6a:0d:85:f6:83:44:fa:29:b1:7e:f3:8e:b4:3b:c8:ee:07:
05:24:dd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org