Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/z3qHqdmTJwguTdr21NcerVB8rRs.roa
File: z3qHqdmTJwguTdr21NcerVB8rRs.roa (raw, json)
Hash identifier: pPh34p1eDODpfl4q3rIIXmumxuYS3Rdg53+ltWyrsbQ=
Subject key identifier: CF:7A:87:A9:D9:93:27:08:2E:4D:DA:F6:D4:D7:1E:AD:50:7C:AD:1B
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 70
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/z3qHqdmTJwguTdr21NcerVB8rRs.roa
Signing time: Tue 21 Mar 2023 02:50:54 +0000
ROA not before: Tue 21 Mar 2023 02:50:54 +0000
ROA not after: Wed 06 Mar 2024 10:22:30 +0000
asID: 1239
IP address blocks: 210.79.68.0/22 maxlen: 24
210.79.76.0/22 maxlen: 24
210.79.88.0/22 maxlen: 24
210.79.100.0/22 maxlen: 24
210.79.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Mar 21 02:50:54 2023 GMT
Not After : Mar 6 10:22:30 2024 GMT
Subject: CN=CF7A87A9D99327082E4DDAF6D4D71EAD507CAD1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:51:63:ba:63:8b:71:27:01:60:df:75:2d:
12:98:be:81:db:19:12:56:a8:e1:d0:9b:bb:d5:e0:
ab:51:40:3d:be:29:4d:fa:cf:49:74:52:2c:76:27:
d2:26:53:3a:ca:c2:07:7a:d4:18:f7:7d:73:48:e5:
57:b4:27:23:25:29:41:aa:7b:9c:44:7b:e7:67:be:
86:c7:3a:20:75:3a:85:36:28:e5:fa:a0:8c:0e:6c:
c3:c7:5d:77:ad:c5:cb:ef:51:c0:1b:8a:6c:e5:8d:
54:f1:22:25:8f:db:b8:94:a2:bc:ff:4c:03:0c:b4:
0e:13:ab:72:06:60:5b:26:3d:d7:ad:be:cf:2f:f0:
c0:7e:12:b3:c1:f1:d1:3c:5a:a7:ff:8f:d9:a5:ec:
ff:52:3d:fe:9e:ea:26:be:a1:27:f3:a7:20:ed:a2:
56:aa:c7:ce:6c:b2:53:95:52:bc:92:8a:ae:1e:3c:
7c:de:bc:07:4a:23:52:b1:35:9f:99:8b:6a:17:4b:
5b:71:97:02:d7:a0:f7:9d:20:55:02:b3:b9:af:00:
e2:91:de:f0:a4:c3:03:60:2c:9e:a2:5f:58:e8:45:
8c:75:81:05:88:77:b0:ca:6d:8c:03:ad:ce:d6:f6:
7e:96:4a:e6:c7:00:e2:fc:41:99:14:ab:e4:57:f3:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7A:87:A9:D9:93:27:08:2E:4D:DA:F6:D4:D7:1E:AD:50:7C:AD:1B
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/z3qHqdmTJwguTdr21NcerVB8rRs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.68.0/22
210.79.76.0/22
210.79.88.0/22
210.79.100.0/22
210.79.112.0/22
Signature Algorithm: sha256WithRSAEncryption
15:67:10:02:a1:d2:2c:50:11:42:8b:c7:8a:5c:38:e6:ce:d8:
1a:51:f6:65:7c:eb:47:4a:c7:bb:b0:f3:b5:08:47:44:fb:e0:
c1:bf:c1:bb:0e:5c:f8:d1:35:68:ed:18:21:3e:57:4e:5d:8c:
0b:59:72:ba:72:7e:4c:f3:a9:d8:ae:50:95:0b:83:02:68:3a:
01:29:cd:8b:b4:4d:6b:e1:ab:52:f9:34:57:8c:b2:46:8e:07:
c4:c3:bd:ff:45:e7:f4:4c:b6:ff:ec:c0:ab:8c:e3:20:9c:a8:
c2:c8:d8:3c:e7:07:08:fb:f8:40:33:b3:c8:e5:13:37:cb:7b:
0a:40:88:5c:dc:ea:2c:55:72:97:c8:fb:41:a5:d9:47:30:67:
dd:c4:98:c6:5a:3d:89:c2:16:40:27:e8:8c:b0:38:56:82:e0:
d9:5f:c1:b8:90:dc:21:30:20:21:4d:f0:2c:b9:e1:75:1c:de:
e3:9c:42:9f:95:8c:47:cd:aa:4e:2e:a7:1d:b6:18:09:5d:8d:
fe:45:da:69:c2:fa:2e:b7:08:66:38:0f:d7:bf:c1:6d:12:a9:
97:e0:9e:4b:9e:ac:b6:95:59:08:30:47:1e:50:15:ed:34:4f:
b8:10:4c:3f:7b:b6:31:d4:11:17:ae:e2:3c:22:76:be:83:75:
6a:2a:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org