Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/4fCGsS18VD7_Ws-yExFeRCcZr7M.roa
File: 4fCGsS18VD7_Ws-yExFeRCcZr7M.roa (raw, json)
Hash identifier: I7zXz1VmvrcIQKWatlEftg/8h7/9MRdsXHXgn/DlVnQ=
Subject key identifier: E1:F0:86:B1:2D:7C:54:3E:FF:5A:CF:B2:13:11:5E:44:27:19:AF:B3
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 02C9
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/4fCGsS18VD7_Ws-yExFeRCcZr7M.roa
Signing time: Mon 12 Jun 2023 09:34:45 +0000
ROA not before: Mon 12 Jun 2023 09:34:45 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 35913
IP address blocks: 123.98.68.0/22 maxlen: 24
123.98.96.0/22 maxlen: 24
123.98.108.0/22 maxlen: 24
123.98.120.0/22 maxlen: 24
210.79.104.0/22 maxlen: 24
210.79.124.0/22 maxlen: 24
211.149.36.0/22 maxlen: 24
211.149.44.0/22 maxlen: 24
211.149.56.0/22 maxlen: 24
211.149.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jun 12 09:34:45 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E1F086B12D7C543EFF5ACFB213115E442719AFB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9e:51:97:41:03:6c:8c:df:5e:e5:fa:c3:a9:
f2:94:3e:4f:14:db:60:d5:93:f7:e7:bb:e9:fa:38:
e8:19:c9:76:cb:57:fb:f9:17:4c:20:bc:e8:64:ce:
ff:11:57:1b:64:f3:df:29:de:0d:63:85:32:95:f9:
ba:d6:2b:79:c3:39:8e:bc:4a:54:97:43:dd:53:95:
1f:8e:8e:46:10:3e:2e:4f:a4:2b:fe:70:8d:4b:40:
38:dd:68:e3:5f:1a:49:1b:18:0b:23:c7:e9:66:68:
0f:4d:51:c6:bc:03:82:b1:5e:85:79:2a:de:58:bc:
b4:1b:cb:03:71:ad:d4:01:26:60:bb:b8:65:dc:03:
4a:d5:a6:14:a1:28:4f:37:00:a0:5a:1d:95:28:1f:
40:98:13:d0:7f:8e:d4:47:59:f5:4e:38:a2:ba:ff:
a9:dc:5d:e8:0e:bb:e2:15:3b:ea:08:1c:13:49:96:
a5:3d:10:06:59:d8:18:35:4c:7e:d5:3f:5b:3f:76:
a3:06:5c:3a:31:35:d5:b1:a2:14:61:1f:f9:0a:73:
58:99:59:59:43:ba:e5:43:ce:29:ad:3d:39:d2:b4:
59:18:72:5e:fe:23:49:47:a1:15:a9:80:2e:85:15:
cd:18:e6:47:01:98:a5:da:bc:95:47:6d:c1:7e:41:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F0:86:B1:2D:7C:54:3E:FF:5A:CF:B2:13:11:5E:44:27:19:AF:B3
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/4fCGsS18VD7_Ws-yExFeRCcZr7M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.68.0/22
123.98.96.0/22
123.98.108.0/22
123.98.120.0/22
210.79.104.0/22
210.79.124.0/22
211.149.36.0/22
211.149.44.0/22
211.149.56.0/22
211.149.84.0/22
Signature Algorithm: sha256WithRSAEncryption
86:3c:25:16:76:77:10:3f:d3:d5:84:ba:44:17:83:e5:40:81:
45:17:88:b8:ee:61:d9:61:2f:96:4e:0b:69:58:bb:6e:5b:4e:
d4:36:ce:27:b8:65:24:e3:79:ab:3a:5e:20:27:53:f5:15:f2:
28:5d:60:8b:2e:9d:64:4a:c2:41:20:46:8e:95:24:cb:6b:16:
9f:23:c0:af:d3:ea:ca:ac:28:59:f4:7d:1f:a4:8b:5c:8c:69:
e5:46:84:e0:9c:ef:7c:1b:d5:b6:ff:05:c7:7c:31:9f:89:73:
67:60:a5:2b:eb:68:93:29:6a:d6:7b:f3:b4:1e:6d:ed:3e:d1:
31:3f:9a:5d:21:99:17:be:03:04:44:c9:f9:eb:66:c4:e1:7d:
82:92:f0:ed:bb:e0:14:6f:b3:02:b0:aa:98:82:36:d7:ef:d3:
a9:5a:97:24:40:f6:2b:2d:05:7e:f5:10:3d:83:c5:17:d4:76:
98:1e:5f:86:cb:bb:73:d7:72:3c:bd:19:0d:2d:0e:f8:47:db:
96:d5:24:05:78:6c:42:26:ae:35:0f:27:04:b1:b6:21:6e:d0:
2a:3c:45:af:1d:d7:16:48:28:87:c6:a8:56:c2:30:23:20:a7:
db:20:04:ed:44:f6:a8:8c:ff:ff:8e:f3:5f:39:9a:01:5a:fd:
87:53:00:14
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgICAskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzA2MTIw
OTM0NDVaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEUxRjA4NkIxMkQ3QzU0
M0VGRjVBQ0ZCMjEzMTE1RTQ0MjcxOUFGQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjnlGXQQNsjN9e5frDqfKUPk8U22DVk/fnu+n6OOgZyXbLV/v5
F0wgvOhkzv8RVxtk898p3g1jhTKV+brWK3nDOY68SlSXQ91TlR+OjkYQPi5PpCv+
cI1LQDjdaONfGkkbGAsjx+lmaA9NUca8A4KxXoV5Kt5YvLQbywNxrdQBJmC7uGXc
A0rVphShKE83AKBaHZUoH0CYE9B/jtRHWfVOOKK6/6ncXegOu+IVO+oIHBNJlqU9
EAZZ2Bg1TH7VP1s/dqMGXDoxNdWxohRhH/kKc1iZWVlDuuVDzimtPTnStFkYcl7+
I0lHoRWpgC6FFc0Y5kcBmKXavJVHbcF+QfntAgMBAAGjggInMIICIzAdBgNVHQ4E
FgQU4fCGsS18VD7/Ws+yExFeRCcZr7MwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzLzRmQ0dzUzE4VkQ3X1dz
LXlFeEZlUkNjWnI3TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwVQYIKwYBBQUHAQcBAf8ERjBEMEIEAgABMDwD
BAJ7YkQDBAJ7YmADBAJ7YmwDBAJ7YngDBALST2gDBALST3wDBALTlSQDBALTlSwD
BALTlTgDBALTlVQwDQYJKoZIhvcNAQELBQADggEBAIY8JRZ2dxA/09WEukQXg+VA
gUUXiLjuYdlhL5ZOC2lYu25bTtQ2zie4ZSTjeas6XiAnU/UV8ihdYIsunWRKwkEg
Ro6VJMtrFp8jwK/T6sqsKFn0fR+ki1yMaeVGhOCc73wb1bb/Bcd8MZ+Jc2dgpSvr
aJMpatZ787Qebe0+0TE/ml0hmRe+AwREyfnrZsThfYKS8O274BRvswKwqpiCNtfv
06lalyRA9istBX71ED2DxRfUdpgeX4bLu3PXcjy9GQ0tDvhH25bVJAV4bEImrjUP
JwSxtiFu0Co8Ra8d1xZIKIfGqFbCMCMgp9sgBO1E9qiM//+O8185mgFa/YdTABQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org