Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ZsZVxm7myf3CNsOFEkFqtsdJad8.roa
File: ZsZVxm7myf3CNsOFEkFqtsdJad8.roa (raw, json)
Hash identifier: jrkWXyyZTSa2PtMTd8mI502bRVdFMfcVrFvecTqjK3w=
Subject key identifier: 66:C6:55:C6:6E:E6:C9:FD:C2:36:C3:85:12:41:6A:B6:C7:49:69:DF
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D6D
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ZsZVxm7myf3CNsOFEkFqtsdJad8.roa
Signing time: Thu 03 Oct 2024 15:06:17 +0000
ROA not before: Thu 03 Oct 2024 15:06:17 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3437 (0xd6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:06:17 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=66C655C66EE6C9FDC236C38512416AB6C74969DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:b8:28:4e:b9:c5:e5:b4:36:a6:a5:c9:d4:
c1:57:8c:e8:ee:61:83:9e:99:39:f9:2c:f8:bb:c6:
57:75:fe:a7:2d:8d:28:7f:1f:ee:08:aa:c2:dc:f2:
d9:a6:41:74:31:46:c8:10:aa:3e:39:ee:31:e5:4a:
70:1b:e8:f5:e6:1c:f1:f8:2f:e5:34:d8:43:0e:04:
5d:31:35:df:66:31:9b:d7:bd:bf:62:d2:95:4d:ab:
08:e6:5a:bc:31:df:74:9b:60:47:72:88:f2:f6:f6:
79:e9:09:2e:f0:bc:f3:88:35:4d:3d:ba:ec:ed:f9:
07:5e:9e:ef:ce:00:91:ca:53:f4:b5:de:e7:66:25:
b5:7a:49:49:55:76:18:d8:9b:46:78:6e:ec:f9:93:
2e:a3:25:61:b8:17:be:44:b4:af:99:d5:4e:e5:01:
b7:2f:d5:a2:ed:cc:10:cc:8f:d5:23:e5:79:d7:88:
ec:49:0b:29:9b:d7:fb:f1:d6:de:c5:12:66:31:e5:
c0:f8:32:d3:23:9d:a9:6b:05:6b:21:d9:fd:03:25:
4d:a9:41:d2:18:31:09:02:2f:54:1f:9a:2a:9a:35:
91:2c:44:56:e9:72:f0:a3:66:4f:e8:d4:bb:cb:6e:
c9:7c:37:d7:85:95:97:4c:b9:6b:b3:af:1d:ec:c4:
88:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C6:55:C6:6E:E6:C9:FD:C2:36:C3:85:12:41:6A:B6:C7:49:69:DF
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ZsZVxm7myf3CNsOFEkFqtsdJad8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.68.0/22
Signature Algorithm: sha256WithRSAEncryption
27:7d:69:f3:2c:f2:21:f0:a0:5e:b3:da:ba:5c:ff:f5:23:a2:
58:73:e9:c1:df:1c:99:36:e2:4d:a9:36:fc:8f:dd:35:db:ff:
74:8c:45:a9:b6:c5:46:5f:76:e8:d1:b1:1c:ec:94:04:ba:a4:
80:5c:5d:37:61:f6:6c:e2:ce:ec:3b:e6:85:e0:ac:1f:1c:bd:
fe:af:b3:87:28:ee:f0:ea:df:2a:a9:d2:8b:cf:d4:1f:b5:88:
02:e7:ca:98:b1:87:24:64:09:54:58:ba:5a:37:a8:ba:f0:55:
21:b4:3f:8e:f8:f1:12:5b:fc:59:75:ad:95:d8:95:84:59:71:
69:a4:34:cc:ac:b8:a5:1c:68:34:96:de:ab:8b:85:62:73:e2:
ec:a7:d1:2f:b5:c9:de:ae:e4:61:08:a5:a4:6b:e1:08:38:0a:
a1:07:54:19:61:f6:f9:5d:19:0a:94:0f:01:ba:5e:bc:51:57:
d5:5a:c7:c3:20:4d:34:bf:a5:7e:d2:90:47:56:38:a1:28:7e:
34:88:d4:0f:8e:f4:c6:18:0e:ae:d1:6d:70:2e:c4:92:28:22:
6e:7e:32:bf:4d:04:50:5f:f1:b8:7d:21:1d:cb:98:65:a0:d2:
ef:3c:af:7a:6d:2c:95:87:fa:9d:cd:af:79:06:ad:a1:ed:a0:
10:a0:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org