Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ENPqJ8COU-6_biGmVwuaukb3D2g.roa
File: ENPqJ8COU-6_biGmVwuaukb3D2g.roa (raw, json)
Hash identifier: a6AhbZodFcBIma340ox1BWPazk5BRpyandUkHN1s0ek=
Subject key identifier: 10:D3:EA:27:C0:8E:53:EE:BF:6E:21:A6:57:0B:9A:BA:46:F7:0F:68
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D69
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ENPqJ8COU-6_biGmVwuaukb3D2g.roa
Signing time: Thu 03 Oct 2024 15:05:46 +0000
ROA not before: Thu 03 Oct 2024 15:05:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3433 (0xd69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:05:46 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=10D3EA27C08E53EEBF6E21A6570B9ABA46F70F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:68:1d:63:8b:02:76:df:c7:b8:dd:cc:92:
3b:f6:1f:f9:cc:0c:80:cc:3b:1b:19:60:f2:88:e8:
e5:0e:af:6b:6c:de:39:c4:d8:4f:53:a4:f1:e6:c6:
5e:49:1f:f5:bb:fe:35:04:0f:b0:80:9c:0d:f5:3a:
1f:46:39:11:dc:25:12:30:b2:b9:55:b8:7f:97:f3:
8d:89:79:b0:4a:4d:37:7e:fd:94:21:e2:12:d2:ae:
21:46:3a:76:1f:32:d3:c4:42:ff:59:b5:8a:f4:21:
8f:bc:2e:74:92:9f:00:dc:98:2b:73:49:54:c4:b0:
e3:40:66:6f:71:2d:36:11:fe:b3:31:78:46:7d:22:
2a:74:80:6f:2d:3c:57:86:db:d6:13:0a:89:4d:bb:
8d:90:e7:dc:db:41:38:79:e8:00:73:c7:31:77:d9:
d5:b0:06:cc:13:91:59:c1:3e:38:92:19:5f:52:33:
22:dc:7e:b3:79:3f:12:5a:fe:ce:86:c0:05:ed:0b:
22:f0:71:f1:ca:d8:9f:88:b4:34:9a:ba:b9:62:13:
77:91:0b:a6:23:5e:69:e3:98:3c:df:ea:7c:3b:1a:
f5:08:2b:ed:5a:ec:a5:08:2d:9c:6a:b4:b2:2b:ac:
8d:0e:27:a2:e8:db:9f:84:73:36:91:61:31:d9:24:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D3:EA:27:C0:8E:53:EE:BF:6E:21:A6:57:0B:9A:BA:46:F7:0F:68
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ENPqJ8COU-6_biGmVwuaukb3D2g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.56.0/22
Signature Algorithm: sha256WithRSAEncryption
18:11:fc:23:64:1a:8a:e2:ee:0b:aa:e6:e3:19:2c:bc:c1:b9:
fc:60:72:73:e8:c2:e0:64:a3:2d:c4:42:50:b6:85:41:ae:ef:
a0:1d:5b:35:5c:c0:b8:c0:01:63:0a:6a:29:59:08:77:5c:13:
24:2b:be:fd:18:57:81:c9:bc:15:6f:f8:87:49:54:cf:58:bf:
4a:04:cb:30:55:00:f9:b0:e7:dc:02:44:e5:f5:cb:6f:8b:1f:
95:7a:10:52:f5:6f:23:54:ba:09:7d:08:6c:f4:b8:f8:8e:09:
6a:8f:35:27:9a:4f:47:c0:93:6a:02:d0:8e:92:4a:b1:61:ec:
54:46:61:ae:d5:1b:a0:ae:70:8e:bc:ff:0d:97:77:4b:1f:9c:
7e:e0:43:e6:75:a2:dd:e7:da:b3:74:df:cd:39:35:59:5b:8d:
d3:2c:5c:a4:84:e9:9e:3e:18:ff:1f:65:1a:e1:b1:7f:47:88:
5d:4f:77:e1:10:c6:35:20:ca:70:84:ca:8c:70:ea:74:da:cc:
b5:c5:8e:6c:96:8c:8f:ce:e1:26:48:82:7f:85:c1:96:c4:39:
f0:d5:20:d4:d6:ef:90:cb:5e:02:da:d6:73:f5:bf:87:45:1c:
af:b5:49:84:b9:45:a9:82:29:0b:39:81:13:59:be:3c:1b:b3:
15:9c:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org