Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/MYI4A4Yn9kwk4uIQ4CaHElayEi4.roa
File: MYI4A4Yn9kwk4uIQ4CaHElayEi4.roa (raw, json)
Hash identifier: MQUKwdm/H2wJdD9cNLbL69tXJKszxsGxt+lHBJBbSXo=
Subject key identifier: 31:82:38:03:86:27:F6:4C:24:E2:E2:10:E0:26:87:12:56:B2:12:2E
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 017C
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/MYI4A4Yn9kwk4uIQ4CaHElayEi4.roa
Signing time: Wed 26 Apr 2023 04:27:38 +0000
ROA not before: Wed 26 Apr 2023 04:27:38 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 21700
IP address blocks: 210.79.64.0/22 maxlen: 24
210.79.80.0/22 maxlen: 24
210.79.96.0/22 maxlen: 24
210.79.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Apr 26 04:27:38 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=318238038627F64C24E2E210E026871256B2122E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:d6:41:6d:3b:01:e1:bb:de:4c:25:30:cd:
4c:75:72:5f:80:fa:53:aa:8b:59:2b:b3:6a:a1:8e:
1b:26:e3:59:ca:ae:bb:3b:cd:96:ad:d1:c6:1d:85:
74:58:dc:3a:b2:74:2c:c6:ed:7f:50:bb:1c:ef:78:
50:51:ea:ad:c0:7c:34:d8:92:f2:28:d7:36:7a:51:
fa:96:4d:b0:12:c3:fd:24:5d:28:2a:98:f3:1d:bf:
2e:9d:4f:5a:bd:f9:33:99:b7:c4:5f:41:bf:35:9c:
4c:b3:0a:a6:3c:99:ae:a8:36:72:a9:d9:1a:66:f1:
7d:d6:48:df:ef:58:e4:d2:ef:c8:ea:94:0c:ad:f6:
ed:00:50:03:19:9c:27:11:9d:48:6f:17:f5:18:85:
a4:a3:a3:7f:00:19:dd:0b:64:df:b0:04:59:d6:47:
93:45:14:3a:48:d2:4c:99:ea:6c:b1:c9:8b:5a:02:
3f:37:8e:1b:ef:ce:d5:c6:1b:82:7b:f8:d4:85:61:
a0:8f:57:7a:14:b7:73:16:d3:ef:da:b3:ff:2d:1d:
c9:67:47:9f:42:ca:12:56:6a:cc:38:fb:2e:c0:36:
ee:16:db:a8:57:ae:15:22:ad:30:43:ca:3e:25:62:
0f:90:ea:d3:51:9c:08:92:3c:02:b8:4b:fa:79:0f:
28:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:38:03:86:27:F6:4C:24:E2:E2:10:E0:26:87:12:56:B2:12:2E
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/MYI4A4Yn9kwk4uIQ4CaHElayEi4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.64.0/22
210.79.80.0/22
210.79.96.0/22
210.79.120.0/22
Signature Algorithm: sha256WithRSAEncryption
e0:2c:60:03:4d:93:9e:b2:cb:37:26:39:f7:ff:f9:bc:37:ae:
d3:05:37:ca:1b:a1:6d:31:3d:32:93:83:fe:e8:e3:01:1a:b1:
cc:ab:b8:f5:75:24:db:84:7f:22:88:ab:47:23:42:96:55:85:
b9:8c:96:8c:83:d7:30:bc:54:55:c3:fe:41:d3:05:3c:c6:29:
eb:b1:b9:f6:2f:9a:a4:4e:43:8b:57:d9:7a:1d:5c:83:34:56:
49:a3:a9:0f:5f:82:6a:fe:68:e7:6e:a8:52:e6:be:89:45:6b:
74:0e:35:18:20:f1:2f:8d:b1:f1:69:cd:78:3d:90:4d:2c:fb:
eb:05:16:24:bf:a2:7e:92:fc:48:0b:cf:9c:2e:ec:66:b9:a9:
83:43:59:15:8f:e2:27:2d:fc:98:7d:0d:78:36:8c:94:59:67:
11:62:24:70:df:55:88:fd:81:50:2d:4d:51:08:40:cc:b1:9f:
17:f8:7f:c1:6d:64:6a:3f:c6:ab:14:a5:33:04:08:b4:ab:5d:
68:f2:22:a8:1b:a6:47:fe:8b:ea:f6:88:65:29:27:47:8a:92:
88:23:b5:cf:1b:74:9f:82:9d:fb:e4:86:aa:36:e5:68:44:cb:
2b:f8:e4:f3:7f:c9:c3:86:44:82:a1:08:27:78:38:a6:27:8e:
71:c1:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org