Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/dT-1EHFApdgr41sOeNEYW4CE9qQ.roa
File: dT-1EHFApdgr41sOeNEYW4CE9qQ.roa (raw, json)
Hash identifier: BTjpFF06NETLrowJQhem3YdLX+pKz57p+0JIvngE5b4=
Subject key identifier: 75:3F:B5:10:71:40:A5:D8:2B:E3:5B:0E:78:D1:18:5B:80:84:F6:A4
Certificate issuer: /CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Certificate serial: 0940
Authority key identifier: 83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/dT-1EHFApdgr41sOeNEYW4CE9qQ.roa
Signing time: Tue 07 Jun 2022 02:15:51 +0000
ROA not before: Tue 07 Jun 2022 02:15:51 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 56282
IP address blocks: 211.155.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83E77F37B3B93850835BAA30EE8FC12D55F87054
Validity
Not Before: Jun 7 02:15:51 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=753FB5107140A5D82BE35B0E78D1185B8084F6A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:a2:52:ec:54:bf:b6:de:ca:56:9f:a5:58:
be:b9:fc:b6:64:28:ad:39:57:49:e8:d9:2d:be:e6:
04:76:76:59:a4:0c:1e:2b:9b:d2:21:bd:a8:32:4a:
e3:85:41:43:f7:f9:9c:03:62:55:8a:85:7c:ef:5f:
1b:20:30:c4:a2:52:1a:99:45:0a:25:cc:bf:36:1a:
38:d2:6e:6a:70:0a:ab:ba:83:01:da:ba:f3:3f:be:
10:23:09:24:01:4a:13:a7:c1:e8:a6:fb:f6:88:02:
d2:b9:c1:52:c9:8f:2f:78:05:7b:05:b0:89:6c:94:
3e:b0:e7:0a:eb:57:74:e3:7f:3f:3b:1b:91:8a:18:
03:06:19:97:1e:f3:78:06:21:29:58:a6:8f:77:de:
0c:12:8d:fd:92:14:2c:d8:c0:ea:a7:66:c7:b8:e9:
ad:ef:3f:a3:e3:3b:f5:f7:ec:be:83:a7:34:a6:e8:
9a:fc:ff:5b:1a:90:11:15:ec:dc:7a:ad:ee:63:e2:
cc:57:85:a2:21:0f:24:6a:77:4e:50:49:d1:a7:e1:
ca:58:b1:e0:f5:ef:d5:c3:77:37:39:a0:b9:d2:60:
ae:48:c9:6a:4f:02:59:af:9b:c7:e8:08:3a:56:c6:
82:c3:0d:55:b8:a5:32:74:0b:e3:6f:0a:2e:1c:11:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:B5:10:71:40:A5:D8:2B:E3:5B:0E:78:D1:18:5B:80:84:F6:A4
X509v3 Authority Key Identifier:
keyid:83:E7:7F:37:B3:B9:38:50:83:5B:AA:30:EE:8F:C1:2D:55:F8:70:54
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g-d_N7O5OFCDW6ow7o_BLVX4cFQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/dT-1EHFApdgr41sOeNEYW4CE9qQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.155.88.0/21
Signature Algorithm: sha256WithRSAEncryption
06:8f:82:95:e1:a1:87:f0:57:2e:e7:7e:8c:c7:4e:6c:1b:75:
18:44:fe:61:95:84:1c:8c:1f:80:9b:b0:06:48:a6:41:c2:22:
11:90:50:31:e5:85:0a:a1:5c:8e:90:29:45:3b:ce:61:3a:0b:
88:81:06:46:59:a4:d5:c3:fb:92:b1:ba:ae:8a:2f:e2:fc:f1:
5d:b6:15:c8:cc:03:19:60:ea:a9:38:df:54:07:5d:42:1c:8d:
62:95:84:89:58:68:8c:3e:de:55:f4:f0:27:63:5c:57:09:ea:
d6:25:4a:ca:bd:97:27:45:c6:ce:dc:52:54:20:7c:a9:81:f8:
d2:e8:66:95:31:49:b1:9b:3b:41:77:35:8a:5f:e8:d7:a6:ae:
aa:6d:67:42:2f:6e:6d:70:ae:fb:15:2a:a9:bf:8c:26:06:66:
e2:fb:00:b2:ad:ee:81:e5:1f:96:3e:69:f7:a6:bb:17:57:18:
f3:d7:97:df:a4:b5:c0:e2:db:7c:8f:74:6f:bb:61:bd:2c:e8:
b8:d1:53:8e:7e:26:04:6c:19:03:18:9e:e2:09:5e:78:9a:aa:
b2:77:da:65:5d:a0:8e:6a:23:4d:60:8b:cd:f8:06:4c:f7:4c:
c8:7e:2a:b3:6c:23:df:00:ee:9b:ed:6e:f9:27:7c:a0:84:4b:
48:5f:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org