Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/QaGrzUpa_agmEpC3ksqPEpPnyEo.roa
File: QaGrzUpa_agmEpC3ksqPEpPnyEo.roa (raw, json)
Hash identifier: yzUyka6Q4IGaLJEQ16EKlq9/8ffFhJrEeVDtGx4gKQY=
Subject key identifier: 41:A1:AB:CD:4A:5A:FD:A8:26:12:90:B7:92:CA:8F:12:93:E7:C8:4A
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 093F
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/QaGrzUpa_agmEpC3ksqPEpPnyEo.roa
Signing time: Tue 07 Jun 2022 02:15:50 +0000
ROA not before: Tue 07 Jun 2022 02:15:50 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 4808
IP address blocks: 211.155.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Jun 7 02:15:50 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=41A1ABCD4A5AFDA8261290B792CA8F1293E7C84A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:ea:d1:14:c6:b1:45:d6:8d:93:3f:79:e0:
25:aa:ab:b9:dc:a8:94:75:76:21:e6:20:db:89:68:
c2:78:fb:76:ef:60:ac:1f:3c:80:f2:2c:ac:e4:2b:
65:01:b5:cb:1f:fa:f2:f8:5f:5e:54:77:00:94:be:
42:4f:4b:62:c6:6e:aa:3b:e8:a1:43:ec:7e:e9:3f:
3b:30:62:6f:82:a4:19:ff:43:99:01:2c:c0:61:2b:
dc:5c:00:02:af:21:87:75:85:04:d0:e0:d8:46:88:
f2:0a:76:b7:7b:a7:e8:29:d7:f7:5d:87:12:f0:6c:
8f:f4:61:1e:fb:cf:cb:e1:de:af:57:87:49:41:6c:
66:1f:aa:07:9e:ae:ae:e1:58:55:99:4b:5a:2d:e9:
b1:2d:d4:35:2b:0d:c5:9c:97:ed:a7:04:a4:50:e0:
70:4b:84:f2:cd:d4:c8:e0:59:bf:33:7d:39:a7:e4:
82:1c:b2:94:06:ce:ff:68:7d:86:f6:de:29:7b:dd:
9a:41:80:10:18:db:bf:9a:00:f1:79:c6:5d:eb:25:
35:33:63:a5:29:1a:aa:11:e1:96:18:49:eb:a8:00:
5f:fb:0f:f6:92:8f:f5:fe:9e:fe:e3:ee:8b:69:29:
c3:67:8f:e7:36:1c:27:6c:5b:82:d6:84:9d:84:0a:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A1:AB:CD:4A:5A:FD:A8:26:12:90:B7:92:CA:8F:12:93:E7:C8:4A
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/QaGrzUpa_agmEpC3ksqPEpPnyEo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.155.88.0/21
Signature Algorithm: sha256WithRSAEncryption
73:d8:bc:aa:a4:36:14:87:bd:03:51:94:b6:1e:84:a6:f7:10:
f1:97:2f:97:06:27:f3:01:30:2b:d9:1f:dd:90:b2:78:f1:81:
22:5f:82:a0:6e:d7:e0:df:e7:20:11:d4:e8:f4:e0:3b:11:e8:
f8:65:e0:f2:88:63:18:d2:52:55:f7:f6:41:ad:51:36:8d:a3:
25:33:48:8a:87:8e:70:0d:a7:f4:5a:ea:03:fb:83:4a:11:46:
b6:22:4a:4e:ce:e4:6a:41:7e:bb:a4:51:d2:9b:15:b3:c9:98:
28:dc:ad:52:db:71:f2:4b:1f:aa:45:c5:b6:4e:c6:29:0e:ef:
1a:54:b5:d2:ff:fe:95:1f:03:c3:73:55:7e:7c:25:96:63:8e:
b5:a9:61:64:d8:8f:94:8f:ec:39:95:96:cd:07:6c:85:4a:e3:
72:3f:8b:7c:36:3c:48:e2:0e:fd:c7:3f:a9:e8:22:88:fd:ee:
95:ee:63:5e:0f:e3:00:42:12:85:11:34:1e:4c:7f:91:54:46:
d5:37:e6:4a:5d:3b:99:60:f3:ac:76:50:02:57:59:07:71:68:
49:0e:1c:1c:ec:8e:d3:f1:98:89:e6:3b:d3:bd:47:12:4d:97:
6b:4e:c8:df:e0:7b:3b:a2:9f:e8:fa:e3:c4:6c:94:ae:6b:96:
bf:62:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org