Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/SctGwp5z_chF-ubAE2GVRPzeHUs.roa
File: SctGwp5z_chF-ubAE2GVRPzeHUs.roa (raw, json)
Hash identifier: XDMwvsrKl/XdBNKc4GnXIQykawCwXFMTq5SGbb9w6go=
Subject key identifier: 49:CB:46:C2:9E:73:FD:C8:45:FA:E6:C0:13:61:95:44:FC:DE:1D:4B
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 66
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/SctGwp5z_chF-ubAE2GVRPzeHUs.roa
Signing time: Tue 21 Mar 2023 02:49:02 +0000
ROA not before: Tue 21 Mar 2023 02:49:02 +0000
ROA not after: Wed 06 Mar 2024 10:22:30 +0000
asID: 21700
IP address blocks: 210.79.64.0/22 maxlen: 24
210.79.80.0/22 maxlen: 24
210.79.96.0/22 maxlen: 24
210.79.108.0/22 maxlen: 24
210.79.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 21 02:49:02 2023 GMT
Not After : Mar 6 10:22:30 2024 GMT
Subject: CN=49CB46C29E73FDC845FAE6C013619544FCDE1D4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:24:d0:94:cd:8c:56:be:3e:2c:8d:46:06:
f0:97:8d:44:95:14:ab:2a:20:c9:32:fd:ae:fb:66:
98:93:e9:99:9b:f5:ca:ea:9b:bc:c5:4a:11:1f:76:
50:b3:61:a3:d8:1b:6e:8c:b7:92:7a:25:42:6c:6d:
e7:b5:22:ec:68:b0:6b:af:2c:cf:f1:6e:37:c1:83:
5b:fe:c8:40:82:02:74:84:ef:b5:1e:05:3d:f4:f6:
b4:72:1b:5f:71:b6:66:03:b7:41:03:c5:9c:f0:a4:
0b:ee:0b:94:fb:24:57:34:5a:b7:47:df:2b:f1:3d:
21:5b:2e:9b:dc:dc:ce:12:a4:95:c3:49:82:73:b8:
db:61:c3:6b:cd:fa:eb:9d:5e:73:a4:72:b0:8e:ae:
0a:4d:37:4a:33:3f:b2:17:4b:e2:54:53:33:dd:02:
9e:26:a8:62:30:6f:dd:72:f6:8c:83:ac:03:6e:e1:
68:a7:ad:bb:90:26:ee:96:68:08:39:a0:1c:27:ad:
06:15:b5:d9:1e:20:49:b2:e1:15:6e:61:a5:a3:e3:
06:93:93:4e:4f:f0:f9:29:ee:bc:d6:3a:d0:7e:b8:
93:f5:67:68:46:5f:a1:93:f7:99:da:82:20:46:a4:
ff:ce:17:9f:b6:fc:e5:4b:3a:a8:c2:b5:3c:99:1f:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CB:46:C2:9E:73:FD:C8:45:FA:E6:C0:13:61:95:44:FC:DE:1D:4B
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/SctGwp5z_chF-ubAE2GVRPzeHUs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.64.0/22
210.79.80.0/22
210.79.96.0/22
210.79.108.0/22
210.79.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:9e:d9:45:6d:f7:bd:fd:d1:17:cb:bc:63:f6:f7:49:5f:04:
e1:e2:7d:64:14:2e:38:34:b5:44:11:c2:41:90:43:ee:6c:4f:
58:93:e8:65:88:f0:7e:28:7a:2e:bd:fa:61:c3:64:2d:09:4f:
b0:3c:26:86:79:56:53:7b:c6:42:92:bd:36:ae:7a:b7:98:c5:
99:00:c4:b2:39:d4:e8:5c:ca:8d:75:80:97:01:41:53:4b:dd:
82:b1:a2:fb:18:59:c6:cb:7b:d3:26:7e:15:d8:a9:3e:ed:d3:
d3:3d:96:d0:ee:5d:ac:c9:0a:de:99:a0:6e:00:3a:db:0b:ae:
c3:63:b0:79:35:4e:1e:fa:75:80:64:4a:99:99:48:5a:eb:a5:
03:e7:7e:fc:25:f2:df:ab:78:30:9b:18:f6:b8:74:dd:b5:60:
e3:58:38:f1:a0:dc:6b:0f:06:c2:b3:ce:9b:d8:dc:1a:7d:49:
6d:aa:53:e0:96:bf:5b:e5:a2:b4:f1:54:17:ba:b6:51:49:c3:
eb:ae:98:0c:50:72:a7:11:f1:61:5a:78:63:2b:58:1c:fc:ce:
27:8c:2e:70:81:13:89:38:43:5a:e4:42:cb:0f:7c:3b:59:df:
52:81:bb:1d:ba:89:90:b8:78:ab:4c:48:a5:4a:ff:65:d9:85:
df:ba:59:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org