Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/marU0d83bXmpM-oRUdkj_yCd5zQ.roa
File: marU0d83bXmpM-oRUdkj_yCd5zQ.roa (raw, json)
Hash identifier: ErOF1+8MyW6FhU6sxinDTtxjEVk5wSesOK27LI1X1c0=
Subject key identifier: 99:AA:D4:D1:DF:37:6D:79:A9:33:EA:11:51:D9:23:FF:20:9D:E7:34
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D49
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/marU0d83bXmpM-oRUdkj_yCd5zQ.roa
Signing time: Thu 03 Oct 2024 14:53:01 +0000
ROA not before: Thu 03 Oct 2024 14:53:01 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 211.149.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3401 (0xd49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 14:53:01 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=99AAD4D1DF376D79A933EA1151D923FF209DE734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:18:96:95:91:95:1a:1c:e2:ad:16:ca:9b:
5f:e3:00:c7:a9:1b:dc:69:49:20:13:14:26:4e:a1:
0f:60:02:00:bf:5d:b5:fa:cb:df:93:39:8f:ea:cf:
59:34:ad:7a:0e:5a:27:da:78:35:e9:1a:5a:0f:ff:
86:dd:65:cc:c7:47:09:8a:ad:61:19:7c:14:21:f5:
f4:db:7b:19:9d:1f:c8:94:be:5f:6c:d5:b8:80:53:
59:61:c8:bf:5f:f1:e3:0d:3b:fd:0c:2c:f7:f0:90:
15:3a:4d:4f:47:f5:c1:f2:95:b4:c3:c6:95:5a:62:
1f:30:4d:7d:35:2e:b3:d2:96:3c:6e:6b:8b:f4:b8:
73:a5:3c:a8:bc:44:f2:9f:66:2f:39:9a:dc:4b:8d:
9d:78:78:fa:16:52:86:54:12:ce:63:5a:ae:bb:b6:
df:ba:35:98:c0:02:19:0a:3d:ff:a0:c3:73:e5:cc:
19:76:ed:4e:0c:ad:96:ad:1a:e0:bb:54:6b:8f:21:
80:f3:9a:78:88:4a:dd:b2:91:bc:37:65:d5:35:41:
5f:e1:3f:68:a4:b3:cb:ef:d3:de:18:a5:7a:ca:60:
67:4e:45:d1:f5:d1:31:de:20:51:cb:51:15:5d:f2:
f0:99:8f:5f:68:ef:38:ae:df:c0:fb:a6:98:09:d1:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AA:D4:D1:DF:37:6D:79:A9:33:EA:11:51:D9:23:FF:20:9D:E7:34
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/marU0d83bXmpM-oRUdkj_yCd5zQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.60.0/22
Signature Algorithm: sha256WithRSAEncryption
73:ae:2a:a1:ae:a4:66:cb:df:46:14:46:f0:b9:0c:66:f4:11:
39:b3:f6:15:33:be:68:75:22:78:fb:d5:27:36:ad:ff:57:47:
ff:bd:ae:a4:75:e7:1d:ff:9f:d2:cc:e4:99:a8:24:b0:c0:0b:
57:58:b6:ba:82:8e:8c:3a:a7:0a:38:50:89:a3:9b:09:fd:8b:
23:4b:a4:58:a5:ee:d3:3e:94:58:68:58:bf:2b:99:49:7c:8c:
95:36:07:68:78:39:9c:29:0a:58:3b:9c:81:a2:2b:01:46:aa:
c0:0c:59:d1:87:6b:40:a5:4a:51:72:b6:76:68:1d:d3:df:2a:
fd:ce:9e:63:0e:64:27:58:72:74:b2:bc:d5:67:64:ce:a8:6e:
c6:cb:6b:6c:cc:09:37:7c:83:68:b2:60:60:bd:99:3a:96:33:
fa:83:7d:00:d2:c7:bb:97:0e:b8:1c:ad:b2:b8:53:36:f5:bd:
2e:74:72:96:3d:e6:eb:b6:dd:fc:2e:15:8d:78:92:81:80:a7:
1d:91:96:13:23:d3:a4:dd:01:a3:5c:d2:03:15:2e:6c:0d:5d:
2e:16:f4:18:ad:09:a5:9f:bd:7a:b0:7f:00:43:7b:cc:18:1b:
18:46:8d:f3:72:b0:28:a9:d5:0a:72:bc:54:3e:05:c7:25:0d:
c1:7b:eb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org