Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/i3669JyE1LNRj0E12VaXVYsf-fc.roa
File: i3669JyE1LNRj0E12VaXVYsf-fc.roa (raw, json)
Hash identifier: E05Az1fWkWFhII7SCZ4eiMRHd2LYzmRq1DBp8ctDy04=
Subject key identifier: 8B:7E:BA:F4:9C:84:D4:B3:51:8F:41:35:D9:56:97:55:8B:1F:F9:F7
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D63
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/i3669JyE1LNRj0E12VaXVYsf-fc.roa
Signing time: Thu 03 Oct 2024 15:05:12 +0000
ROA not before: Thu 03 Oct 2024 15:05:12 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 123.98.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3427 (0xd63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 15:05:12 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8B7EBAF49C84D4B3518F4135D95697558B1FF9F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:c2:07:c6:a2:ab:8f:ee:f1:8c:b0:c8:ac:
3a:1e:8a:5e:ab:2d:59:ed:84:29:ca:32:07:e7:4a:
93:c9:f4:33:de:28:8c:e1:8c:9e:17:8d:21:ca:5d:
6e:5c:79:8f:3c:3c:eb:c7:83:07:a3:b5:9f:73:cd:
a9:d0:be:f0:7e:fc:54:f4:84:2b:1b:a7:c4:37:59:
b5:a7:48:3e:73:b9:f3:e6:80:af:60:01:b8:6c:f7:
c8:d8:4e:1c:88:7d:f0:0e:c7:95:25:19:83:1b:a1:
a3:21:b6:46:04:7f:6f:6a:eb:81:c2:ba:7f:ee:dd:
0c:a6:d6:cf:cb:a1:5a:42:44:70:24:f0:14:7e:ba:
ce:5d:19:3a:84:9d:d6:63:1e:01:7f:64:64:29:af:
02:9a:22:42:6c:a0:17:75:d3:ee:18:9c:8f:89:0a:
b9:90:a0:91:e8:9e:54:9c:75:39:b8:38:c1:d8:56:
0c:f5:88:22:cb:c7:22:f9:8e:62:cb:7f:13:76:b3:
bf:d9:67:22:14:2a:10:ad:5a:11:89:7b:b7:e9:3b:
70:9b:ed:f7:6f:66:19:66:90:99:15:b0:a5:5f:bc:
00:e9:6e:1b:16:cb:a7:e7:0a:d6:8f:d1:48:c8:18:
27:19:ad:b7:b6:48:60:32:17:92:cd:b8:f7:a2:db:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:BA:F4:9C:84:D4:B3:51:8F:41:35:D9:56:97:55:8B:1F:F9:F7
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/i3669JyE1LNRj0E12VaXVYsf-fc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.40.0/22
Signature Algorithm: sha256WithRSAEncryption
92:a5:9b:31:00:8a:03:dc:89:5a:04:39:f6:2b:69:2f:62:fe:
a3:e3:6b:06:a1:99:58:f0:51:c2:c5:77:5f:3d:f6:f2:f5:96:
0f:b9:a0:54:4f:7f:81:f6:95:08:be:98:cf:f5:8c:96:67:03:
75:46:e1:ab:45:ca:fd:9c:63:e1:44:9c:37:84:d5:8e:08:7d:
fc:5d:53:92:2f:46:9f:d4:cb:fd:39:ed:7f:67:45:d5:5d:48:
f4:dd:3a:82:07:c4:1f:3e:f8:c2:6c:9a:9d:79:f3:b2:19:94:
3d:98:a2:40:3c:ee:eb:99:59:0d:63:13:30:ee:d2:be:9d:42:
d0:b8:dc:fa:79:e9:2c:d8:9e:45:df:09:22:ac:c6:fa:38:bc:
af:a7:de:cc:4d:4c:d4:65:c5:5b:f5:7f:4e:1c:91:a8:d7:9e:
b2:ab:20:77:d6:35:4d:78:3c:0c:bd:b3:a2:e8:ba:37:b4:fe:
f8:5c:de:84:1f:12:da:a4:52:32:ab:a1:c5:64:c7:64:19:11:
27:3c:d0:2e:5d:63:47:d3:9e:2d:00:c8:21:c7:d8:f5:aa:69:
92:6b:23:cc:a7:d8:b4:08:2e:12:18:f4:c4:ba:03:a1:d8:56:
69:3a:a4:dd:aa:5e:65:25:f4:38:79:7d:5b:b6:e8:42:85:7a:
c7:16:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org