Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/wn9HGxTDj7zlCiAPLMWKNkmylig.roa
File: wn9HGxTDj7zlCiAPLMWKNkmylig.roa (raw, json)
Hash identifier: oAA2IjARAuiKJ+wD3MmHTVFtnp6sJdIdS6l+Sojk6lg=
Subject key identifier: C2:7F:47:1B:14:C3:8F:BC:E5:0A:20:0F:2C:C5:8A:36:49:B2:96:28
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 01AE
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/wn9HGxTDj7zlCiAPLMWKNkmylig.roa
Signing time: Fri 05 May 2023 02:44:47 +0000
ROA not before: Fri 05 May 2023 02:44:47 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 34549
IP address blocks: 210.79.88.0/22 maxlen: 24
210.79.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: May 5 02:44:47 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=C27F471B14C38FBCE50A200F2CC58A3649B29628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:d4:46:5e:bf:da:c4:27:9a:3d:ee:44:d6:
d2:b5:40:1a:8a:ed:43:b9:8f:75:62:10:f6:6a:a2:
e6:d8:c9:34:a5:96:c1:8f:3d:96:26:cc:c8:e9:6f:
65:ad:40:2d:39:54:bf:fe:52:b5:52:4b:12:8d:6c:
b1:ef:3f:0d:b4:f0:06:f2:3d:c7:62:98:bf:a6:dc:
cd:1a:f9:f8:ae:8b:bd:44:d7:11:d4:bb:8b:5c:cc:
1c:80:c9:d7:df:76:b4:ac:7c:7a:3a:6f:c0:bf:a5:
9c:55:7f:2b:4c:dd:d6:c7:a3:47:92:ea:2e:88:20:
b7:73:f8:0e:6b:11:c1:7d:04:15:e2:00:f2:74:31:
75:36:cd:cf:79:27:b7:cf:c0:b9:da:cd:55:7c:76:
e2:b7:1c:2f:e5:18:cc:89:35:96:dc:74:81:1c:d9:
16:e3:be:32:b1:33:11:51:8e:24:79:bb:18:44:6c:
2b:5d:64:75:87:ea:1a:1d:ed:f1:ec:e2:15:fa:65:
6e:64:de:6f:d1:8e:37:54:f2:bf:42:f1:54:33:05:
39:f2:df:d2:39:69:c3:4c:bb:e4:4f:f1:1a:27:15:
b4:9f:b5:4b:8f:21:07:0c:7f:56:88:2d:ff:f9:b4:
b8:70:74:f7:a5:c5:f6:8c:b4:90:8a:c4:9f:6f:6b:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:47:1B:14:C3:8F:BC:E5:0A:20:0F:2C:C5:8A:36:49:B2:96:28
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/wn9HGxTDj7zlCiAPLMWKNkmylig.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.88.0/22
210.79.108.0/22
Signature Algorithm: sha256WithRSAEncryption
83:5b:34:68:26:83:78:49:09:e3:c6:32:9b:56:d7:0c:8c:62:
99:6c:c3:4f:19:4b:82:7f:ea:d8:84:9d:92:a6:d5:be:dc:bf:
1f:1a:d1:fd:5a:77:e1:95:1c:6f:1b:9e:37:3b:8d:0e:44:48:
ce:71:80:56:4d:a3:89:5b:3a:26:72:fc:46:7c:a6:c8:f8:d5:
d4:fc:16:00:a0:67:9a:45:8d:24:77:71:be:10:ec:40:8b:7f:
fd:bd:20:fe:ed:ad:54:d1:3c:23:0d:ee:35:26:a1:7b:91:48:
0a:c3:88:9c:0d:50:f6:50:76:29:73:32:68:58:7a:8a:f7:01:
0c:9d:03:a7:d6:e5:c6:53:f7:e1:01:31:0e:cb:6d:75:29:09:
57:35:73:61:96:df:54:06:2c:31:1d:64:27:e3:e2:bb:d8:d7:
86:bb:9f:cf:cc:38:da:63:62:e8:79:34:0d:02:b2:60:e0:4e:
f5:62:57:cb:9f:bc:15:62:4e:57:09:74:54:c5:c3:96:f6:9d:
de:a1:3d:dd:61:7a:5b:25:0f:bc:03:42:f1:1f:d7:44:8f:01:
f7:38:0a:42:6b:1e:c9:72:73:48:98:fe:42:aa:37:fb:62:5d:
f7:ad:a7:e2:35:99:4a:24:9f:c0:23:8b:8b:0f:d6:9d:f8:35:
30:20:2c:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org