Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/HKXTbPc7BU_73Idgtbxrbpae-dM.roa
File: HKXTbPc7BU_73Idgtbxrbpae-dM.roa (raw, json)
Hash identifier: are8oQAdON8G77STOITGjWom86kvWwDi6KQ4eQQFbSY=
Subject key identifier: 1C:A5:D3:6C:F7:3B:05:4F:FB:DC:87:60:B5:BC:6B:6E:96:9E:F9:D3
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: D5
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/HKXTbPc7BU_73Idgtbxrbpae-dM.roa
Signing time: Tue 04 Apr 2023 06:55:21 +0000
ROA not before: Tue 04 Apr 2023 06:55:21 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 35913
IP address blocks: 210.79.68.0/22 maxlen: 24
210.79.72.0/22 maxlen: 24
210.79.76.0/22 maxlen: 24
210.79.84.0/22 maxlen: 24
210.79.88.0/22 maxlen: 24
210.79.92.0/22 maxlen: 24
210.79.100.0/22 maxlen: 24
210.79.104.0/22 maxlen: 24
210.79.112.0/22 maxlen: 24
210.79.116.0/22 maxlen: 24
210.79.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Apr 4 06:55:21 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=1CA5D36CF73B054FFBDC8760B5BC6B6E969EF9D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:24:b6:ae:32:ce:da:50:98:57:3c:e5:72:
68:97:1c:f3:15:78:62:88:1d:e3:87:33:e3:7a:8f:
c4:38:00:99:22:26:5c:16:dc:20:15:d1:fe:72:02:
06:60:ac:ed:b9:f8:5a:36:ff:75:1a:28:2e:9b:bf:
2e:fe:f2:ff:68:53:79:e8:2e:be:75:26:13:51:f8:
8e:71:74:c0:49:72:e8:8a:11:15:73:b8:32:80:fc:
01:8b:3b:2e:ff:33:50:67:ce:d4:ce:b4:e6:ba:65:
c8:b5:42:75:fb:da:0e:7e:f7:61:ce:f7:c0:94:09:
c2:4a:4e:89:a7:50:8a:aa:15:f3:13:e0:3d:19:fb:
3a:f5:14:41:25:f7:1c:b9:56:e9:a9:ed:43:f4:03:
59:d9:c6:a8:73:96:6a:77:6a:2d:cb:18:f8:47:48:
5e:30:d7:4c:5a:2e:9a:da:8d:e7:9f:ef:0a:47:dd:
36:52:83:a7:fc:9e:c8:bb:53:bf:09:61:43:8a:46:
f9:15:19:10:e4:af:05:47:7c:22:3c:5a:eb:a3:45:
bc:9c:25:ae:6f:14:4d:11:ee:5e:13:4c:64:a5:df:
a8:17:d6:e5:f1:b8:9e:73:24:4f:56:a0:83:ad:d4:
b6:2c:44:d2:30:f6:68:64:6a:3e:46:48:b7:e0:45:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A5:D3:6C:F7:3B:05:4F:FB:DC:87:60:B5:BC:6B:6E:96:9E:F9:D3
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/HKXTbPc7BU_73Idgtbxrbpae-dM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.68.0-210.79.79.255
210.79.84.0-210.79.95.255
210.79.100.0-210.79.107.255
210.79.112.0/21
210.79.124.0/22
Signature Algorithm: sha256WithRSAEncryption
47:3d:6e:f0:bb:b8:83:7d:57:8e:ec:d2:38:08:b7:83:70:f6:
04:18:99:c3:9a:dc:ff:73:b8:de:8f:60:f0:2a:f5:98:7e:83:
08:8c:52:7e:7d:10:f8:b1:12:85:ef:ac:e0:c5:07:5d:e9:eb:
6c:df:58:2a:03:fc:a4:c2:5a:b3:85:ac:18:c1:67:9f:62:2c:
6f:43:f1:03:63:79:24:87:e5:b6:c9:bc:8e:f2:05:ef:cb:58:
ec:7a:10:c6:ca:30:fc:1f:ed:21:69:91:8e:f9:4a:f3:21:79:
bf:14:fd:59:a2:9e:74:d0:c7:d6:b3:57:3a:cc:b6:21:d2:5f:
24:88:25:08:67:fb:8e:e7:0a:49:87:97:c9:1e:80:77:26:19:
12:7e:b7:44:93:e2:74:15:2e:f2:08:8f:12:41:d3:39:f1:95:
f0:8b:7e:a2:f5:2c:1a:f1:ed:96:4a:da:29:bf:3d:ee:93:a8:
d4:fc:8c:45:13:b6:bb:2c:e2:11:55:2a:7c:90:42:d7:51:76:
d9:22:3a:e0:03:7e:38:ae:19:50:15:ca:ee:73:f1:6b:19:04:
7b:7b:a1:25:fd:a3:22:05:e5:b5:ef:3e:ca:4f:ce:f0:f7:91:
66:98:f8:25:81:a1:b0:22:5a:8c:0c:65:81:8b:07:72:d6:55:
ac:4f:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org