Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/yu-slTWKs5Co_4ecgdaMP0M0m5U.roa
File: yu-slTWKs5Co_4ecgdaMP0M0m5U.roa (raw, json)
Hash identifier: A0PwEvaVxg9/iBplfRHkIsAGoVoaS4UVl7k8KSesjNU=
Subject key identifier: CA:EF:AC:95:35:8A:B3:90:A8:FF:87:9C:81:D6:8C:3F:43:34:9B:95
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 0350
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/yu-slTWKs5Co_4ecgdaMP0M0m5U.roa
Signing time: Mon 01 Nov 2021 01:21:39 +0000
ROA not before: Mon 01 Nov 2021 01:21:39 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 138527
IP address blocks: 45.252.100.0/22 maxlen: 24
103.6.228.0/22 maxlen: 24
103.198.224.0/22 maxlen: 24
103.198.232.0/22 maxlen: 24
103.198.236.0/22 maxlen: 24
103.198.240.0/22 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.48.0/24 maxlen: 24
103.221.49.0/24 maxlen: 24
103.221.50.0/24 maxlen: 24
103.221.51.0/24 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848 (0x350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: Nov 1 01:21:39 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=CAEFAC95358AB390A8FF879C81D68C3F43349B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:2d:8c:c4:74:28:85:8a:8a:34:e7:62:a0:
11:5f:73:94:76:ce:73:bd:32:58:c7:47:35:20:b6:
95:a6:e0:52:72:63:47:c8:61:20:c3:25:ae:74:3e:
ed:38:c5:48:00:4a:b7:f0:9f:c6:33:2f:ed:ca:86:
6b:84:fa:3e:23:bb:ef:01:78:a5:a7:af:fa:89:31:
8d:fc:70:f5:00:c3:2b:4d:b0:f7:7e:cd:97:a0:f7:
26:fc:28:55:33:bd:1f:2a:0b:e4:94:fc:b6:69:45:
a0:7f:e9:97:65:2c:55:bd:77:f5:28:b0:f2:ad:5c:
59:ba:82:39:8c:6a:ed:3b:43:7b:c7:21:2d:53:8f:
ce:a0:0b:d1:05:51:41:0c:c3:33:7f:e0:2f:74:98:
fb:7b:f5:2b:e2:9b:e3:2c:7f:4e:f1:7a:2f:b8:32:
8f:31:8e:6c:fc:22:1c:11:0e:7d:0f:3f:b0:c8:7a:
c5:8e:37:1b:82:ac:e0:53:e1:36:48:fa:4c:32:91:
17:25:84:1b:e7:0a:ff:a6:9c:31:e3:d6:c7:f2:99:
e8:7e:1f:de:1b:d5:42:72:c4:a7:3e:5e:85:00:c4:
ba:3d:77:22:b8:e5:2e:f1:d8:5c:1b:58:35:2c:5d:
0b:c8:de:cc:ce:d9:e8:0e:8b:e7:ff:e8:2d:79:fa:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EF:AC:95:35:8A:B3:90:A8:FF:87:9C:81:D6:8C:3F:43:34:9B:95
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/yu-slTWKs5Co_4ecgdaMP0M0m5U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.100.0/22
103.6.228.0/22
103.198.224.0/22
103.198.232.0-103.198.243.255
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:31:df:ef:d6:ad:63:d2:df:0b:26:e1:92:1c:a2:7d:a5:a0:
55:09:a0:7e:6f:bf:0f:28:7c:01:1f:71:a5:41:24:88:f9:97:
49:bd:7d:97:bb:9a:e7:7b:bc:4e:4e:bd:f1:3b:3a:a7:f8:dd:
04:5c:b2:98:14:dd:63:e5:c4:4e:d4:a9:d0:44:6b:8a:6c:65:
fd:e4:bc:35:f1:41:3d:c8:86:e2:98:00:e1:a4:f6:d5:05:77:
a5:44:6b:ca:45:b6:0b:f1:87:d9:2f:38:bc:f7:a9:aa:7b:51:
75:2b:51:2d:cf:a8:06:8a:54:d7:9b:de:9a:06:1d:c5:e2:97:
b2:07:86:2b:6d:32:7b:d8:45:0a:4b:25:60:d5:97:47:aa:8d:
b3:64:76:d0:c2:15:19:da:95:20:43:f5:8f:26:a6:37:6a:9b:
d7:37:83:6b:5d:1c:84:46:1d:82:ab:21:cc:26:71:86:40:4a:
55:14:73:fb:75:59:48:10:8d:90:c8:7e:55:50:e2:a0:72:f6:
d6:ac:6e:a6:5b:ef:4b:f0:50:b3:4e:2a:90:04:29:87:6c:28:
d1:57:7b:54:ac:19:4b:42:ad:28:71:b2:bb:9a:64:74:2a:8c:
ee:44:1a:1e:44:e8:35:11:cc:f3:42:95:44:4a:f1:db:72:1e:
5a:6d:5a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org