Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/Ovkf8GEDcydBH-ZLgvdg9uquyc4.roa
File: Ovkf8GEDcydBH-ZLgvdg9uquyc4.roa (raw, json)
Hash identifier: ulXnszdgNlTntyRaVvUZQBoIUm5KVeTizyzxtAPaAI4=
Subject key identifier: 3A:F9:1F:F0:61:03:73:27:41:1F:E6:4B:82:F7:60:F6:EA:AE:C9:CE
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 01E7
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Ovkf8GEDcydBH-ZLgvdg9uquyc4.roa
Signing time: Wed 10 May 2023 04:37:16 +0000
ROA not before: Wed 10 May 2023 04:37:16 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 35913
IP address blocks: 210.79.104.0/22 maxlen: 24
210.79.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487 (0x1e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: May 10 04:37:16 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=3AF91FF061037327411FE64B82F760F6EAAEC9CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:66:b7:88:a3:22:58:c5:45:04:c2:f5:76:
c5:cd:d4:37:5d:34:08:5c:f3:f7:e0:27:6c:89:4a:
27:32:2b:97:6c:e9:ec:81:c3:6f:ed:dd:ee:be:a8:
10:61:75:6f:5e:02:94:39:ad:e9:18:c7:d1:2b:51:
b4:54:77:72:bb:86:3b:76:3e:a5:15:d8:48:40:fa:
4c:50:22:f1:b1:88:31:0b:25:8d:a8:52:a4:b6:77:
13:2c:e1:77:e4:d7:7b:cb:70:28:9c:a8:38:9b:06:
56:10:ec:2c:29:29:69:05:23:94:af:1f:fa:29:98:
c7:8a:08:34:a1:10:25:ef:d8:a7:14:de:b0:66:69:
b8:59:96:15:b2:68:9b:50:da:45:99:4e:15:08:d0:
99:e9:21:11:34:16:fd:ab:90:6b:af:98:02:45:df:
ef:ac:0e:0e:93:7d:59:30:e5:b9:b5:8e:6a:d0:b2:
82:52:c1:1f:66:6c:1f:bc:d1:d0:8b:77:80:d5:9e:
2b:3e:c9:3a:81:97:1c:c6:55:0a:81:06:03:7d:8c:
70:f9:51:87:61:21:45:b2:43:cd:14:07:f1:ad:f9:
c4:ab:9a:70:33:dd:b7:29:de:61:14:42:00:32:e4:
cc:b9:91:96:49:6c:42:e0:bc:84:4b:7d:18:74:72:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:1F:F0:61:03:73:27:41:1F:E6:4B:82:F7:60:F6:EA:AE:C9:CE
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/Ovkf8GEDcydBH-ZLgvdg9uquyc4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.104.0/22
210.79.124.0/22
Signature Algorithm: sha256WithRSAEncryption
12:67:8e:49:bb:66:11:c1:b1:f5:6f:6a:60:86:8b:54:03:ec:
9a:b6:63:b6:12:5f:d8:d6:f7:7d:83:b1:a7:37:23:fd:d4:f1:
cf:34:b2:bf:cf:94:de:c1:81:01:1d:0f:4d:a1:ab:ab:7d:d9:
f9:a2:e3:4c:8f:78:13:4e:3b:8b:b5:ee:d6:cd:fb:29:24:af:
82:6f:00:4d:29:9d:ef:f9:3a:3e:f8:ee:b5:1a:ce:9c:23:5e:
c8:a7:6e:c1:97:97:8b:6c:e7:1e:da:c7:26:fe:60:60:e4:b0:
28:f5:d3:f4:e7:41:f2:11:8f:88:18:17:f1:dd:18:d6:30:a7:
86:bf:92:1e:da:c3:91:cc:3f:b6:f5:2e:b3:ee:e7:cc:45:05:
84:c1:41:2f:db:71:91:67:c5:1e:2a:86:ff:e8:1c:6f:5d:0a:
49:36:d0:17:b3:62:e9:44:d7:b3:de:6a:2c:3d:ac:cf:d2:e8:
11:17:79:46:a1:95:61:a3:5d:5b:a0:a1:25:a9:70:5b:c2:06:
3c:3e:49:5e:4d:96:c0:35:6f:9b:c4:67:34:87:2d:74:e1:48:
8e:2a:a7:62:48:a1:f2:2c:46:9f:2b:fb:d6:50:b6:b5:f6:67:
73:a4:db:3f:7c:b4:8b:91:cd:78:ae:65:74:1e:b1:21:67:79:
b3:26:8c:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org