Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/wB4GQ8CbfaNj9gkYm9NSSautX4U.roa
File: wB4GQ8CbfaNj9gkYm9NSSautX4U.roa (raw, json)
Hash identifier: IwYvgekJtU5IBYCo1XnNL+kEpdaLbNKmuH5xEhx/CYY=
Subject key identifier: C0:1E:06:43:C0:9B:7D:A3:63:F6:09:18:9B:D3:52:49:AB:AD:5F:85
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0289
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/wB4GQ8CbfaNj9gkYm9NSSautX4U.roa
Signing time: Thu 01 Jun 2023 15:34:30 +0000
ROA not before: Thu 01 Jun 2023 15:34:30 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 34549
IP address blocks: 123.98.64.0/22 maxlen: 24
123.98.72.0/22 maxlen: 24
123.98.80.0/22 maxlen: 24
123.98.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Jun 1 15:34:30 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=C01E0643C09B7DA363F609189BD35249ABAD5F85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:13:0a:cd:6f:57:56:41:08:17:16:4b:43:ef:
ac:66:11:da:ad:a9:ff:c9:7a:72:b8:87:4b:af:26:
23:4e:1a:7f:35:81:be:c6:e9:a4:1d:a4:ad:25:c6:
3b:1b:b6:20:e1:e0:7d:04:35:50:e1:16:df:96:7c:
ca:c4:35:94:64:f6:f1:85:1d:9c:c0:79:69:9b:40:
ef:44:cc:a7:6d:2b:5e:b6:f9:d5:82:13:49:94:ef:
02:47:d5:da:90:65:3b:0c:cf:f8:b5:69:f7:62:14:
e4:65:66:70:7a:95:b2:64:73:15:43:20:91:4d:6e:
84:6d:de:4c:a1:c4:56:bd:8b:84:19:f0:dd:7b:57:
25:75:3e:ea:5e:69:7e:6f:8a:3c:67:da:cb:b3:ed:
04:37:c5:d9:52:67:65:de:89:d3:02:f6:23:9d:79:
f4:25:30:c5:2f:a3:9e:82:1d:c1:1a:61:ec:1d:7d:
61:7d:89:f1:8d:5c:04:fa:05:00:ce:f5:fd:3d:11:
56:54:22:4c:dc:a5:77:10:62:10:56:f0:18:b9:a0:
e4:f0:5e:f1:77:89:12:81:18:a4:ea:4e:56:f6:67:
e2:cf:dc:b6:8e:6a:1c:fd:69:9c:d3:83:2f:11:11:
d5:e3:15:c9:bf:c9:80:19:51:0e:2e:60:f7:0f:36:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1E:06:43:C0:9B:7D:A3:63:F6:09:18:9B:D3:52:49:AB:AD:5F:85
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/wB4GQ8CbfaNj9gkYm9NSSautX4U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.98.64.0/22
123.98.72.0/22
123.98.80.0/22
123.98.100.0/22
Signature Algorithm: sha256WithRSAEncryption
69:67:11:17:a1:a2:bd:b0:f0:16:b3:fb:ed:91:72:91:ad:b2:
25:c5:0c:fa:d0:6f:8d:58:21:99:84:9d:ac:fc:86:6a:94:e4:
0e:88:3d:9f:b6:27:bd:5a:82:52:55:43:9a:cc:bf:b3:f9:40:
61:55:f8:10:8f:ae:df:3e:97:b6:a9:91:d0:bb:9f:26:00:c5:
d7:b5:c2:96:b7:b1:fc:02:93:66:7c:da:89:86:8b:b0:99:ce:
6e:e5:40:6d:20:ef:cc:7e:82:66:9f:8a:73:38:b2:99:63:c4:
02:91:c6:7f:e8:48:6d:5f:63:d2:9a:67:28:b7:35:31:aa:44:
86:df:09:cc:23:af:75:ea:0e:fe:e2:7e:f5:86:bc:d1:3b:f0:
12:37:69:9b:da:53:3d:88:fa:b0:94:95:ef:bd:d9:e0:99:33:
4f:3a:f1:ca:27:18:8b:ee:69:1b:71:77:1a:8c:f3:b3:7a:4b:
30:67:53:86:b7:38:dc:cf:96:49:f3:19:04:b3:f1:b7:2d:96:
ad:d5:9f:39:33:56:2d:87:89:a0:e4:6e:93:e8:e1:bb:ce:69:
bf:fc:bb:db:be:be:42:2e:c9:f2:e4:b5:40:75:ba:96:ef:59:
50:f8:cd:a0:af:c5:42:86:7c:48:24:cd:d2:31:04:3c:01:af:
6f:aa:8f:49
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgICAokwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzA2MDEx
NTM0MzBaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKEMwMUUwNjQzQzA5QjdE
QTM2M0Y2MDkxODlCRDM1MjQ5QUJBRDVGODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoEwrNb1dWQQgXFktD76xmEdqtqf/JenK4h0uvJiNOGn81gb7G
6aQdpK0lxjsbtiDh4H0ENVDhFt+WfMrENZRk9vGFHZzAeWmbQO9EzKdtK162+dWC
E0mU7wJH1dqQZTsMz/i1afdiFORlZnB6lbJkcxVDIJFNboRt3kyhxFa9i4QZ8N17
VyV1PupeaX5vijxn2suz7QQ3xdlSZ2XeidMC9iOdefQlMMUvo56CHcEaYewdfWF9
ifGNXAT6BQDO9f09EVZUIkzcpXcQYhBW8Bi5oOTwXvF3iRKBGKTqTlb2Z+LP3LaO
ahz9aZzTgy8REdXjFcm/yYAZUQ4uYPcPNiC1AgMBAAGjggIDMIIB/zAdBgNVHQ4E
FgQUwB4GQ8CbfaNj9gkYm9NSSautX4UwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3dCNEdROENiZmFOajln
a1ltOU5TU2F1dFg0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgD
BAJ7YkADBAJ7YkgDBAJ7YlADBAJ7YmQwDQYJKoZIhvcNAQELBQADggEBAGlnEReh
or2w8Baz++2RcpGtsiXFDPrQb41YIZmEnaz8hmqU5A6IPZ+2J71aglJVQ5rMv7P5
QGFV+BCPrt8+l7apkdC7nyYAxde1wpa3sfwCk2Z82omGi7CZzm7lQG0g78x+gmaf
inM4spljxAKRxn/oSG1fY9KaZyi3NTGqRIbfCcwjr3XqDv7ifvWGvNE78BI3aZva
Uz2I+rCUle+92eCZM0868conGIvuaRtxdxqM87N6SzBnU4a3ONzPlknzGQSz8bct
lq3VnzkzVi2HiaDkbpPo4bvOab/8u9u+vkIuyfLktUB1upbvWVD4zaCvxUKGfEgk
zdIxBDwBr2+qj0k=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org