Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/bgPvH3LQ47yAtCS5FkQxsLMN_zk.roa
File: bgPvH3LQ47yAtCS5FkQxsLMN_zk.roa (raw, json)
Hash identifier: twJ5+N8rY6pFvOI8xBJcM2Hh2sEVxHk/4pnyo8IeCiU=
Subject key identifier: 6E:03:EF:1F:72:D0:E3:BC:80:B4:24:B9:16:44:31:B0:B3:0D:FF:39
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 093E
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/bgPvH3LQ47yAtCS5FkQxsLMN_zk.roa
Signing time: Tue 07 Jun 2022 02:15:50 +0000
ROA not before: Tue 07 Jun 2022 02:15:50 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 23724
IP address blocks: 211.155.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366 (0x93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Jun 7 02:15:50 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=6E03EF1F72D0E3BC80B424B9164431B0B30DFF39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:30:0f:73:f6:b5:bf:b0:d1:ca:8d:2e:0d:
44:ca:ad:57:bd:af:9a:1d:4f:4f:60:97:7f:b6:9f:
03:f8:ed:b2:dd:52:71:0e:94:b2:20:db:12:da:da:
79:60:db:77:84:f5:33:4e:61:3b:61:d7:57:06:18:
2b:50:bc:d9:58:68:7f:d2:51:dc:9e:33:46:ea:aa:
1f:13:87:5a:d1:61:71:85:d0:fd:09:69:cd:92:42:
3f:a9:c5:fa:b2:8f:8d:93:0a:af:f5:c3:65:60:56:
4a:e7:9e:ed:c9:b2:2c:cc:c6:9a:8d:56:e2:bf:a6:
d9:06:38:66:2b:d1:19:84:e7:a3:2c:ea:72:5a:4b:
e6:18:99:84:08:e5:5d:18:4c:a4:b9:1c:2c:5f:70:
d4:7e:d3:a2:5c:a3:85:9f:7c:cd:a3:f3:ba:9d:a3:
d8:87:a9:1d:6a:70:a1:1a:9b:ba:6c:16:c4:30:0d:
1f:72:d4:bd:60:0a:dc:3a:cb:55:38:40:b8:37:f0:
cc:ce:35:3e:43:9c:7f:d8:b1:ab:43:80:50:b1:5b:
fe:8e:0c:a2:95:3f:40:7c:0d:af:95:a1:a1:a6:50:
b6:11:a3:d5:40:e8:37:00:9d:ff:d1:5b:33:61:60:
c7:cf:55:c1:66:92:2e:e4:24:d9:f8:95:34:2f:fd:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:03:EF:1F:72:D0:E3:BC:80:B4:24:B9:16:44:31:B0:B3:0D:FF:39
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/bgPvH3LQ47yAtCS5FkQxsLMN_zk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.155.88.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:9d:b9:15:17:3b:dc:ad:38:fe:cd:92:ee:a3:e0:76:1f:bc:
60:da:c1:32:24:75:3d:ab:a3:9d:4e:2e:be:d5:2d:a2:e6:6c:
ee:e4:ad:ee:50:61:fc:29:55:63:4b:98:65:d7:0c:88:29:2b:
24:6e:bd:af:5e:ae:b5:22:bd:5f:a9:44:38:0e:a9:68:2f:84:
cb:b1:db:43:9d:14:80:eb:b8:a8:dd:78:c0:15:19:fe:0a:2d:
c8:22:09:5a:f8:e4:6b:cd:84:ab:27:a3:26:4b:76:8d:73:49:
ca:c4:97:ac:19:4c:73:e8:82:d2:d0:55:be:68:42:6e:29:8d:
43:23:1d:3a:65:ff:ff:95:6d:f1:45:c2:c1:68:06:a3:5a:eb:
8c:b1:65:ce:6b:9b:95:ea:83:cf:87:84:13:44:b2:c9:73:16:
1f:21:f5:34:4e:80:91:26:d3:b3:0d:0f:3e:99:b0:01:27:56:
6e:a6:67:44:e0:e9:4d:c8:4a:fb:89:43:1d:f1:b7:31:e6:61:
08:21:ac:86:0b:50:e3:0c:9c:d7:ec:31:5f:d6:0c:21:93:59:
11:f0:49:05:ab:9a:15:0d:06:4b:5e:19:52:55:eb:58:47:74:
f2:e8:59:5b:fc:c3:6a:7b:d1:1b:8d:54:ea:6c:e9:bb:9e:d2:
72:18:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org