Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/lB6gMrrbQnnMwtA5lTslK5BpLUQ.roa
File: lB6gMrrbQnnMwtA5lTslK5BpLUQ.roa (raw, json)
Hash identifier: vXDdU8vOkBNxnHIQsRraO/8PTBpSmYZob2XvQ+myzZo=
Subject key identifier: 94:1E:A0:32:BA:DB:42:79:CC:C2:D0:39:95:3B:25:2B:90:69:2D:44
Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Certificate serial: 094E
Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/lB6gMrrbQnnMwtA5lTslK5BpLUQ.roa
Signing time: Tue 07 Jun 2022 10:09:28 +0000
ROA not before: Tue 07 Jun 2022 10:09:28 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 138915
IP address blocks: 27.0.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Validity
Not Before: Jun 7 10:09:28 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=941EA032BADB4279CCC2D039953B252B90692D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:71:56:06:1a:f9:28:3c:a5:fa:38:bc:37:
49:14:6c:0d:6c:0d:b0:0b:8e:1a:9a:02:f1:4b:ad:
9f:f2:68:0c:b1:0e:82:78:de:e6:bd:f7:5f:b6:40:
b4:88:61:ea:76:65:90:b4:85:8a:43:da:68:ee:74:
5c:77:f0:ae:93:c3:a9:f2:a8:d1:5f:a3:01:c8:44:
85:e8:77:d9:ae:f7:2c:b2:bb:ef:85:5a:71:e8:1f:
ce:e0:e1:fb:54:b0:7a:24:07:17:1d:63:e0:6c:c5:
fc:59:b8:74:b4:f2:c7:1c:55:2e:ca:c7:91:65:eb:
fd:91:bf:f3:db:5c:f2:63:96:c5:52:a6:7c:3b:0a:
08:57:e9:f9:10:6b:db:2f:91:be:5b:ab:af:8e:38:
23:2b:6c:c2:bf:ce:d1:15:7f:3d:3c:ae:df:02:d8:
d5:99:2b:f6:3f:9e:8c:f4:aa:25:c6:c4:37:56:84:
f1:ef:a1:e8:2c:26:c2:8f:37:da:cb:4f:0e:7b:97:
0c:ec:02:08:96:b8:96:6b:23:00:f2:5e:74:37:46:
45:0d:49:35:88:8b:77:83:e1:0b:c5:db:67:e5:78:
3d:4b:7b:b0:12:9a:30:8d:83:99:95:f8:e0:87:c0:
eb:83:05:5b:00:31:f7:4a:05:59:fc:52:1d:19:96:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:A0:32:BA:DB:42:79:CC:C2:D0:39:95:3B:25:2B:90:69:2D:44
X509v3 Authority Key Identifier:
keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/lB6gMrrbQnnMwtA5lTslK5BpLUQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:05:4d:d2:df:7e:41:d9:82:63:46:2d:38:15:2f:93:fe:43:
33:48:79:f6:15:72:74:f4:41:74:23:7d:5f:83:0b:e4:42:33:
36:01:c7:4b:1d:37:fa:82:3b:74:79:8e:dc:fc:10:d1:75:02:
6b:ff:7d:69:51:db:9d:b8:90:2b:38:2e:4e:2b:8a:5f:d3:3e:
8c:ea:c2:90:10:30:e0:15:2e:83:ec:5c:c9:44:a7:77:f2:f7:
ff:a4:98:f5:6c:c8:f3:92:78:5b:58:2e:81:4d:df:01:59:67:
7f:a2:1b:b5:b4:c5:15:bb:54:cc:8c:ca:60:4d:ad:de:4b:31:
40:5e:df:51:82:f4:61:ac:7f:17:e0:f4:e9:ca:9b:79:7c:1a:
9b:4e:e8:bb:fa:79:6b:75:67:41:0f:86:b2:7c:67:ed:35:c3:
15:ef:50:d9:2f:36:f1:cc:00:9b:37:86:07:9d:c9:4d:a8:8e:
32:fe:05:16:e3:86:57:9f:f3:12:3e:e4:7b:f7:fe:52:17:b7:
45:44:ec:a2:5a:a5:18:ed:7e:76:01:d4:5a:0e:de:74:21:18:
57:a8:d0:05:ae:38:60:34:4f:5f:d9:53:26:50:2e:dc:0d:db:
bf:4f:f1:b0:51:99:a3:9b:83:d4:82:f6:ee:84:5a:df:cd:61:
91:51:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org