Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/AksZp-CQasqGyGYCebYg9Jckd08.roa
File: AksZp-CQasqGyGYCebYg9Jckd08.roa (raw, json)
Hash identifier: cHMCbrSoDfDxKCssNMFLlWlG/zhRU3QkWKxCQ7/SyVw=
Subject key identifier: 02:4B:19:A7:E0:90:6A:CA:86:C8:66:02:79:B6:20:F4:97:24:77:4F
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D61
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/AksZp-CQasqGyGYCebYg9Jckd08.roa
Signing time: Thu 03 Oct 2024 15:04:48 +0000
ROA not before: Thu 03 Oct 2024 15:04:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:04:48 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=024B19A7E0906ACA86C8660279B620F49724774F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b9:c6:c2:b8:a2:8c:52:1a:33:63:24:91:ce:
7b:c3:75:e1:a3:cb:1f:a2:5d:30:e2:46:59:34:83:
65:91:67:11:f8:35:f7:f5:b3:77:41:56:8c:11:8d:
dc:07:78:81:db:3c:fd:6b:0d:68:cf:a4:3e:39:bc:
20:a1:4a:0f:5b:2d:9c:41:79:b5:12:25:c7:15:06:
9b:9a:24:a4:68:6f:72:0b:9f:fa:d1:6f:4e:5d:59:
be:99:01:bf:4e:42:94:e1:c6:59:59:de:ad:c2:bd:
40:e6:b3:cf:ae:ea:8a:62:c9:79:9b:c4:bd:38:65:
37:15:cb:93:29:47:69:6b:bf:2e:fa:b7:80:7f:47:
b3:7d:01:15:0e:00:80:4c:91:cc:5c:5d:57:78:a1:
36:2a:90:34:ad:5d:9c:95:2a:7f:2f:08:52:21:92:
cd:b5:42:30:04:74:40:cd:a7:38:fc:70:15:5d:70:
59:78:82:51:34:9d:0b:e7:b2:67:e2:b6:71:57:d7:
c2:d5:36:c7:8b:a5:3a:9a:f3:01:b6:56:81:4c:fe:
ad:fc:fb:0b:22:61:30:ee:4a:f0:3b:24:4a:da:02:
1d:e2:23:95:56:07:28:a4:73:b2:25:53:00:6b:db:
b3:3f:12:6b:10:c1:1d:93:33:fc:ae:a4:c3:b1:cc:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:19:A7:E0:90:6A:CA:86:C8:66:02:79:B6:20:F4:97:24:77:4F
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/AksZp-CQasqGyGYCebYg9Jckd08.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.32.0/22
Signature Algorithm: sha256WithRSAEncryption
94:23:a2:a3:85:ea:0c:83:f5:b1:8a:6e:88:0d:e0:5a:09:a8:
0d:16:45:d7:72:00:f1:76:38:45:55:d2:00:75:e9:e1:ca:33:
11:2f:f8:aa:42:cb:06:b4:c7:10:c3:4c:f3:54:6b:50:c5:2d:
02:71:fd:60:68:b0:8c:3e:d7:23:61:5a:68:94:36:26:50:fd:
47:f1:ac:a9:76:aa:0f:b4:fa:71:d0:01:24:55:16:40:8a:0d:
2f:14:ee:c6:4c:c0:25:48:c7:1c:09:b6:81:c1:50:4a:cd:7f:
a2:96:77:c4:b5:d7:79:44:15:51:32:e2:a4:c4:ee:77:7d:35:
67:db:1e:25:42:09:e2:0a:7d:62:44:cf:00:51:2d:dc:40:8e:
41:ea:c0:5b:26:75:77:e5:85:52:f6:05:43:62:11:f6:3e:ab:
9e:37:6f:48:71:ef:c4:85:75:1f:42:cc:bd:22:ca:dc:32:ad:
9e:9d:0d:02:e1:3f:94:21:14:cc:73:58:f8:b3:e0:ba:c2:7a:
7c:4a:92:c7:40:4d:57:8a:62:0c:95:26:a1:7b:73:28:61:14:
ab:74:93:e2:90:aa:78:29:68:a5:dd:1c:93:ca:95:90:1c:c6:
b1:1c:4b:2f:35:0c:ee:17:ab:96:79:8c:fa:92:e9:e8:e3:04:
5d:a8:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org