Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/WrzBIohVcXOjnEoMYwcZlDO4hQw.roa
File: WrzBIohVcXOjnEoMYwcZlDO4hQw.roa (raw, json)
Hash identifier: uRCyYKWswj+qxDnvZ1Ov3fQbExi3cf4oiQEHTMHiBTk=
Subject key identifier: 5A:BC:C1:22:88:55:71:73:A3:9C:4A:0C:63:07:19:94:33:B8:85:0C
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0130
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/WrzBIohVcXOjnEoMYwcZlDO4hQw.roa
Signing time: Sun 16 Apr 2023 00:58:42 +0000
ROA not before: Sun 16 Apr 2023 00:58:42 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 35913
IP address blocks: 123.98.64.0/22 maxlen: 24
123.98.72.0/22 maxlen: 24
123.98.80.0/22 maxlen: 24
123.98.100.0/22 maxlen: 24
210.79.68.0/22 maxlen: 24
210.79.72.0/22 maxlen: 24
210.79.76.0/22 maxlen: 24
210.79.84.0/22 maxlen: 24
210.79.88.0/22 maxlen: 24
210.79.92.0/22 maxlen: 24
210.79.100.0/22 maxlen: 24
210.79.104.0/22 maxlen: 24
210.79.112.0/22 maxlen: 24
210.79.116.0/22 maxlen: 24
210.79.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Apr 16 00:58:42 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=5ABCC12288557173A39C4A0C6307199433B8850C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:6a:e8:ea:d9:f2:c1:64:d0:ed:08:3d:71:
68:65:1a:f9:c1:de:36:c4:7f:a1:2f:87:50:ac:ea:
f0:5a:d4:71:d6:36:2a:21:bc:15:cf:cd:34:e3:ad:
08:f5:b7:55:99:ca:0a:a7:5e:5b:4e:7e:e5:19:e0:
af:18:e1:84:0f:3d:9f:08:ba:f1:ab:94:ae:7b:bb:
89:8f:b1:78:9e:b1:83:3c:a9:ce:dd:d4:78:98:a6:
9d:25:04:2a:44:98:e9:5e:4f:5a:22:8d:a8:0c:48:
60:31:de:9d:2a:1a:47:c0:d0:46:ff:99:66:61:8e:
af:c9:e3:0d:28:cf:4e:ec:44:08:a7:0d:8c:48:a4:
cd:fa:57:ef:62:ee:26:34:df:51:89:e7:ca:d7:12:
e8:1a:04:77:bc:64:e0:d0:1c:b0:08:fe:c2:e9:01:
14:bd:4c:67:e0:00:4c:94:9d:29:96:93:47:c6:df:
f1:9f:ba:0c:d3:30:14:cd:73:2f:a4:97:22:c4:f4:
e6:0e:19:07:61:b9:23:56:aa:5f:72:e5:a7:76:5b:
54:b0:30:a9:1d:cf:00:2a:6c:85:a4:bc:f8:7c:c5:
14:0e:05:32:f3:46:b7:af:5c:66:c3:6f:3e:5c:35:
29:57:ad:25:ca:e6:be:df:c3:78:b6:c8:9f:23:f5:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:C1:22:88:55:71:73:A3:9C:4A:0C:63:07:19:94:33:B8:85:0C
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/WrzBIohVcXOjnEoMYwcZlDO4hQw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.64.0/22
123.98.72.0/22
123.98.80.0/22
123.98.100.0/22
210.79.68.0-210.79.79.255
210.79.84.0-210.79.95.255
210.79.100.0-210.79.107.255
210.79.112.0/21
210.79.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:55:42:18:56:12:51:98:5a:ab:71:a5:04:01:ab:57:6d:a7:
03:8e:fe:0b:f4:14:0a:ef:a1:9d:e4:4e:de:16:84:60:c0:e6:
91:ca:5c:78:1a:59:d2:d6:ae:1d:da:b7:59:8b:d8:dc:45:01:
73:da:8e:72:75:97:d5:0e:38:88:55:80:86:3e:c5:ca:4b:69:
34:42:4f:91:c5:f9:5f:e7:03:c9:9d:55:b1:dd:b8:db:a9:62:
43:86:2a:e8:cb:0f:35:76:89:4b:bf:87:ed:31:35:c5:09:22:
9a:09:df:47:3b:3a:7c:4f:da:10:03:21:3b:f4:ee:e1:0e:07:
72:b3:f1:77:91:bf:f2:17:91:0d:16:ab:e2:3c:70:71:50:b3:
5b:a7:73:22:ad:91:ed:c6:c3:f4:1e:bf:40:3b:bf:d6:07:5d:
f4:75:9e:b1:1e:6f:14:d9:a6:00:1e:38:08:10:d5:18:a5:45:
cd:ca:00:f6:e6:7c:3f:26:69:41:b8:b8:d0:87:c5:85:07:f7:
f9:06:5f:2b:62:7d:2a:f2:bc:25:80:1f:33:de:f4:58:9b:ce:
e8:e4:c9:5c:f6:4e:5a:ab:76:b8:47:20:59:2d:12:b6:b9:fd:
54:d3:6d:28:b9:24:15:43:28:04:e6:81:f6:24:ec:39:72:6a:
63:8e:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org