Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/-4X8YS_pZFf0L_ryqIzLvBoywT4.roa
File: -4X8YS_pZFf0L_ryqIzLvBoywT4.roa (raw, json)
Hash identifier: oYTuHFYaw+84aNh3rJWRt/0Tf2RssSIHhVT+RCSisP0=
Subject key identifier: FB:85:FC:61:2F:E9:64:57:F4:2F:FA:F2:A8:8C:CB:BC:1A:32:C1:3E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0E
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/-4X8YS_pZFf0L_ryqIzLvBoywT4.roa
Signing time: Tue 07 Mar 2023 12:58:35 +0000
ROA not before: Tue 07 Mar 2023 12:58:35 +0000
ROA not after: Wed 06 Mar 2024 10:22:30 +0000
asID: 21700
IP address blocks: 210.79.64.0/22 maxlen: 24
210.79.80.0/22 maxlen: 24
210.79.96.0/22 maxlen: 24
210.79.108.0/22 maxlen: 24
210.79.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 7 12:58:35 2023 GMT
Not After : Mar 6 10:22:30 2024 GMT
Subject: CN=FB85FC612FE96457F42FFAF2A88CCBBC1A32C13E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:c9:3a:3d:d4:0f:94:7e:fd:7e:36:74:67:
14:95:31:5c:d6:5f:13:3a:67:38:46:88:2d:48:ee:
18:3a:d6:e8:a3:51:2b:71:1f:69:b8:ce:65:2e:a3:
bc:97:e1:71:54:90:f0:2a:12:83:41:93:c1:57:c3:
02:42:76:c3:9b:57:72:b5:68:d6:22:97:ef:f3:f4:
9c:25:c9:af:a1:53:fd:4b:1b:e8:ec:54:bb:c2:1b:
f2:2a:a0:99:e8:ed:cb:b1:3d:bb:90:7d:25:a8:f9:
7e:f5:8a:5f:31:71:9c:e1:46:46:dc:12:d9:8e:51:
fb:9a:61:3e:54:da:b4:6a:60:c2:e0:95:ed:ca:26:
21:f7:8a:37:33:0b:ab:41:6d:b6:d2:55:32:43:55:
a0:e0:9b:4c:5c:19:96:79:d9:c7:cd:66:31:02:fc:
40:d1:7d:12:76:41:a6:28:58:52:7d:23:08:7b:5b:
ef:e1:e8:28:d8:02:f2:74:77:7e:a7:64:7a:7d:99:
73:f7:12:ad:98:79:32:20:ac:7d:f7:6c:fb:c4:a8:
bf:4b:e3:ab:a4:62:2b:fd:93:ad:dc:81:2c:1d:01:
30:3a:bc:dc:d0:f6:34:ee:58:9e:7f:98:3e:3e:e6:
91:1f:10:63:c9:0b:f1:cb:f5:ee:44:0e:3e:2d:2d:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:85:FC:61:2F:E9:64:57:F4:2F:FA:F2:A8:8C:CB:BC:1A:32:C1:3E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/-4X8YS_pZFf0L_ryqIzLvBoywT4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.64.0/22
210.79.80.0/22
210.79.96.0/22
210.79.108.0/22
210.79.120.0/22
Signature Algorithm: sha256WithRSAEncryption
36:a0:5b:bf:3c:59:2d:01:bc:b8:23:d4:8c:fe:ea:b6:cc:39:
c6:a5:a9:73:42:8d:81:10:4e:f6:c5:84:d7:f0:c6:76:40:a1:
11:2e:47:5c:72:8c:d1:98:c5:86:75:57:e6:e2:e9:d2:cf:cf:
9e:a0:f7:22:d9:82:af:41:f1:f0:53:e9:c6:b8:f7:c4:3a:20:
a0:2d:b6:aa:34:ff:75:ec:cf:b6:c0:67:51:f7:72:20:da:3c:
1c:34:4c:fa:9f:84:ae:eb:35:d2:11:97:ad:06:3a:d2:ea:a8:
59:62:c0:b8:65:0b:be:30:c8:69:0a:eb:c0:a6:6a:f4:26:ae:
23:b1:58:68:f8:25:9b:43:08:d2:88:82:b2:b5:25:6c:a1:ad:
19:38:d3:d9:ef:af:08:4f:77:64:68:e6:d9:43:ad:df:4a:f6:
44:2e:4a:cf:00:ec:a7:cc:37:b5:13:2d:f1:35:ff:ce:c1:6d:
f2:b6:2a:82:39:63:75:99:ef:f7:11:cb:9d:42:d1:56:2f:f8:
82:03:06:40:49:25:89:a4:01:29:94:f3:4b:bf:86:bb:67:2b:
d7:6f:c2:ea:6c:92:c9:4d:61:47:fa:8d:45:eb:a8:1d:38:c5:
1c:61:31:6c:1d:d1:9e:72:a6:bf:15:27:ee:8f:da:e9:7d:4d:
c2:99:f8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org