Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/cUw3e9H139kxTzlxXUvHzeewkzQ.roa
File: cUw3e9H139kxTzlxXUvHzeewkzQ.roa (raw, json)
Hash identifier: usKpkXE+01B6PdJZFWQUu1lh8GZlDvdLPHGsUMPZgDA=
Subject key identifier: 71:4C:37:7B:D1:F5:DF:D9:31:4F:39:71:5D:4B:C7:CD:E7:B0:93:34
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 8D
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/cUw3e9H139kxTzlxXUvHzeewkzQ.roa
Signing time: Thu 23 Mar 2023 02:52:41 +0000
ROA not before: Thu 23 Mar 2023 02:52:41 +0000
ROA not after: Wed 06 Mar 2024 10:22:30 +0000
asID: 35913
IP address blocks: 210.79.68.0/22 maxlen: 24
210.79.76.0/22 maxlen: 24
210.79.88.0/22 maxlen: 24
210.79.100.0/22 maxlen: 24
210.79.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 23 02:52:41 2023 GMT
Not After : Mar 6 10:22:30 2024 GMT
Subject: CN=714C377BD1F5DFD9314F39715D4BC7CDE7B09334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:af:d1:58:6a:d1:54:9b:a1:34:d2:81:79:
c5:81:71:ad:25:dc:5c:6f:6d:ab:cc:a3:12:e2:e3:
4a:d5:1f:9b:b8:0d:9b:a1:ae:36:42:25:56:2b:b6:
36:17:9e:85:2d:69:2a:b2:73:4e:50:17:c0:e4:b0:
66:c6:ad:f4:40:f9:c7:93:bd:53:78:6d:ab:7e:ce:
63:8a:96:be:e0:c4:a0:0d:41:6c:dd:6e:52:db:fd:
e6:1e:0d:c7:63:01:0a:ef:20:d1:f0:1b:4a:6d:ce:
85:ba:b5:a9:a1:5e:a1:2c:fd:83:a2:79:44:32:8f:
3a:ff:a1:bf:22:d3:2a:1a:8f:31:86:73:07:18:0a:
6e:1e:24:7c:b2:62:f0:91:89:34:41:57:eb:76:13:
a8:bb:e3:5c:b4:c8:cc:71:4f:2d:3b:f9:da:5c:56:
9f:7b:00:a5:2c:62:4a:dd:37:f6:5d:cf:13:dc:86:
53:d3:a0:8f:59:04:1c:60:17:7a:dc:97:51:db:01:
d4:4c:e7:a6:f4:1d:be:20:46:58:4e:ef:49:d0:dc:
a3:9b:60:a1:41:48:8f:9a:ed:73:52:1c:98:8d:71:
c9:bd:78:14:42:55:72:84:aa:a8:cf:00:99:18:78:
7d:5a:aa:0d:e8:b6:4c:8c:8d:c1:15:52:ca:06:bd:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4C:37:7B:D1:F5:DF:D9:31:4F:39:71:5D:4B:C7:CD:E7:B0:93:34
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/cUw3e9H139kxTzlxXUvHzeewkzQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.68.0/22
210.79.76.0/22
210.79.88.0/22
210.79.100.0/22
210.79.112.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:74:a8:aa:f8:ce:04:85:e5:11:bf:ba:7f:a8:83:03:72:3f:
14:68:bf:68:fe:40:b7:53:6d:02:fc:ea:36:0a:60:11:46:08:
51:a3:6c:c0:eb:3f:14:37:cf:78:fa:65:25:63:28:d5:0b:2a:
f3:52:19:ff:f4:7b:3b:6a:b9:1a:70:18:f9:f0:93:f9:3b:9b:
a3:64:30:aa:14:a8:f8:4e:2f:96:6e:0a:04:00:6a:9a:e4:9a:
1b:b0:67:de:4b:51:ad:c1:5f:7b:8b:82:13:26:05:bf:1e:c7:
a5:db:7e:70:f5:1c:68:92:e6:14:b9:cc:6d:ed:8f:c0:01:f7:
d0:36:39:fa:50:e9:0f:0c:6f:32:e8:62:b5:d2:2c:00:2a:d2:
e8:56:83:d0:5e:db:1b:5c:72:c3:4a:e2:14:4a:89:bf:c2:ae:
28:8c:21:80:94:85:42:99:1f:68:4f:6e:88:d7:93:61:9f:e0:
6a:4b:42:c4:b7:13:cd:64:83:27:f2:51:98:8a:65:9b:27:5c:
32:71:45:fd:6e:0f:c8:7b:7c:b6:73:43:95:d2:c6:9f:f1:cb:
0d:62:de:e2:f2:71:b2:07:46:04:d8:51:75:cf:35:99:11:d0:
c5:2f:d2:d2:90:22:cd:86:41:a6:cb:06:75:92:12:79:a9:9b:
19:1e:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org