Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ag4YmfFg9gXurruR0c7HGqE9ZsY.roa
File: ag4YmfFg9gXurruR0c7HGqE9ZsY.roa (raw, json)
Hash identifier: KVJ5EmvMwyVlutykT4RQAfZ/q68QXS2f766spomFAWY=
Subject key identifier: 6A:0E:18:99:F1:60:F6:05:EE:AE:BB:91:D1:CE:C7:1A:A1:3D:66:C6
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D47
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ag4YmfFg9gXurruR0c7HGqE9ZsY.roa
Signing time: Thu 03 Oct 2024 14:52:41 +0000
ROA not before: Thu 03 Oct 2024 14:52:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 211.149.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3399 (0xd47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 14:52:41 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6A0E1899F160F605EEAEBB91D1CEC71AA13D66C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:d0:b0:f6:13:00:e8:c6:0e:2f:1b:07:89:
79:9a:ef:da:09:c1:47:7c:3f:47:3c:a7:dc:5a:f3:
56:b1:4b:bc:77:fe:cc:2a:7e:01:9f:88:fd:3f:6a:
2e:6d:7c:a2:8b:bb:73:a7:8c:7f:bb:1f:a8:49:88:
8a:c5:88:90:33:b8:54:5a:d2:a1:a5:0c:7f:69:0c:
0f:5d:a7:a8:44:fb:8c:4e:32:0c:bc:99:7a:cb:50:
09:d4:17:ef:2f:31:14:ad:d1:32:a1:92:27:53:04:
84:e8:1b:6d:c1:58:78:bd:37:63:ee:27:2f:18:7b:
19:ab:25:7c:d2:9e:d9:f4:17:04:18:e3:17:b7:04:
52:02:87:6e:cd:c4:82:ec:8e:63:8a:a9:c1:75:40:
d2:64:e7:24:2d:28:f5:37:d2:d5:fc:ca:fc:a0:4b:
b8:69:ec:52:38:a2:62:46:6b:71:b3:99:df:33:57:
e7:c8:9c:3b:9d:5a:b4:ba:b4:ef:ed:36:84:fa:d4:
1c:9b:ac:0e:38:45:9f:44:98:86:bc:8b:0d:65:d5:
8c:f8:ac:82:14:e9:ed:a8:f0:d0:19:5f:59:45:38:
81:95:65:6f:7f:e2:4b:0c:f5:95:7a:6a:1c:60:d2:
b6:1b:09:52:7d:2b:f1:b0:09:43:a2:0c:55:c3:bc:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0E:18:99:F1:60:F6:05:EE:AE:BB:91:D1:CE:C7:1A:A1:3D:66:C6
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ag4YmfFg9gXurruR0c7HGqE9ZsY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.52.0/22
Signature Algorithm: sha256WithRSAEncryption
45:36:e3:31:c0:e9:fd:bf:25:bd:bf:32:ff:d6:09:a0:60:3c:
3a:3a:89:52:7a:12:46:4c:4a:07:27:93:54:85:e9:17:18:05:
4a:49:c0:45:29:cf:4d:45:35:51:5e:32:32:50:16:74:64:d7:
e1:41:44:bb:2f:77:31:30:2f:6c:58:5e:7f:06:2a:97:51:95:
fd:56:ac:e7:7a:77:4b:c9:dd:15:c5:0c:1a:c6:86:0d:11:c5:
a8:c7:b2:22:48:07:c8:41:ea:c8:f4:15:73:e0:67:57:aa:75:
70:94:4f:f5:58:e5:8b:27:d8:ee:dd:ac:39:e9:e4:f9:c2:ae:
dd:1b:8c:b2:97:14:b5:51:f8:21:06:6d:13:9f:88:5c:4b:02:
e1:54:8f:96:f2:25:9a:75:f2:d7:04:4f:06:25:fe:07:f3:cb:
7c:35:fb:45:84:be:3b:74:bb:08:14:b8:3a:ef:45:4d:d0:ca:
97:0f:95:d3:c5:c3:9f:2b:dc:19:24:57:6b:1b:e6:74:c7:66:
40:c2:5d:2c:92:f1:de:01:08:31:f1:77:e6:c5:1a:4a:6d:0d:
e6:2f:35:44:30:f5:c4:e2:24:0b:69:5f:8f:1d:b4:5f:fe:8b:
12:a6:0b:14:2c:e0:ed:b8:a6:65:be:c6:01:29:5d:1c:60:59:
4f:66:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org