Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/xauykFq8hopgHwmKKCCLRzkAotc.roa
File: xauykFq8hopgHwmKKCCLRzkAotc.roa (raw, json)
Hash identifier: 6xmvXdL6n+ThNc7r0dPtG3OnwJwpBWDletrTnEuYJPE=
Subject key identifier: C5:AB:B2:90:5A:BC:86:8A:60:1F:09:8A:28:20:8B:47:39:00:A2:D7
Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Certificate serial: 15
Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/xauykFq8hopgHwmKKCCLRzkAotc.roa
Signing time: Fri 08 Oct 2021 03:10:34 +0000
ROA not before: Fri 08 Oct 2021 03:10:34 +0000
ROA not after: Thu 06 Oct 2022 05:53:12 +0000
asID: 132203
IP address blocks: 49.51.128.0/19 maxlen: 24
49.51.146.0/23 maxlen: 24
49.51.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Validity
Not Before: Oct 8 03:10:34 2021 GMT
Not After : Oct 6 05:53:12 2022 GMT
Subject: CN=C5ABB2905ABC868A601F098A28208B473900A2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:18:c3:33:ef:e3:ed:dc:b4:17:93:6a:54:
2b:9e:3f:45:f4:df:16:89:be:c8:be:1f:0b:16:13:
9d:69:8e:0d:b1:b7:d2:57:d2:18:3e:88:4b:2c:33:
f8:51:c3:74:cb:ef:d6:c9:1f:bf:a3:4d:d8:f7:3b:
9e:6f:09:0a:64:0d:07:1e:f6:92:00:f7:42:d2:43:
2e:68:20:29:19:b2:9c:51:16:ce:55:c4:d6:fa:bb:
c3:e3:23:36:00:39:44:20:a5:2f:0e:08:27:eb:47:
8d:d6:95:cd:f6:2e:7a:2d:84:9a:90:41:43:f2:5d:
1b:89:b7:7d:1b:f9:80:21:10:a7:57:f1:9f:b3:32:
ab:08:dd:28:d1:6d:86:e4:74:bc:f4:21:94:f0:4c:
ae:36:26:53:65:89:02:ac:70:00:14:a0:b7:27:83:
e6:9f:4b:a2:ff:54:02:18:dc:1a:ce:c0:ad:e7:64:
f2:82:36:98:8f:85:9c:88:a6:58:89:6c:fb:c5:21:
ff:13:ac:e6:cc:f8:78:12:99:c1:1d:c0:27:56:12:
4d:fc:85:fe:5c:e4:c5:db:2d:5c:a0:67:3c:9b:85:
3d:c2:e6:36:c4:50:dc:ea:6f:e9:80:b4:9a:19:7e:
b8:bf:c6:b0:c1:ed:8d:a1:4a:3d:9b:9e:0f:20:42:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AB:B2:90:5A:BC:86:8A:60:1F:09:8A:28:20:8B:47:39:00:A2:D7
X509v3 Authority Key Identifier:
keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/xauykFq8hopgHwmKKCCLRzkAotc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.51.128.0-49.51.175.255
Signature Algorithm: sha256WithRSAEncryption
2f:1e:5b:78:02:09:59:4d:00:4d:2d:ee:3c:df:eb:b3:8a:91:
a4:04:50:82:5a:41:3a:e0:49:23:7a:cc:6f:62:91:03:29:fa:
6d:ad:ba:2f:b5:a0:6f:9f:5f:ec:16:42:cd:00:88:e3:3a:db:
0e:42:ba:1d:62:1f:11:b2:1f:06:a4:41:39:13:c6:12:1b:ca:
d1:f0:81:7d:87:c4:64:fd:ad:d1:91:d8:45:e4:45:43:c9:c2:
55:ca:a9:a2:52:e6:81:cc:00:21:aa:b9:2f:e5:95:57:b9:4f:
77:4b:8b:35:3d:99:cd:58:8b:fb:42:10:b3:57:74:b8:4c:2c:
9f:f9:08:d8:61:21:38:39:d6:ac:05:80:14:05:30:b9:d1:e5:
d1:1c:15:1d:44:f1:19:c2:19:8a:15:c5:8b:42:6b:09:29:90:
33:3a:c4:e2:35:59:09:88:fa:a2:20:ff:93:01:c9:16:a2:7f:
07:bd:8a:1f:97:54:8f:f1:8f:b5:17:f1:13:cd:d4:c3:d7:76:
c2:a8:5d:ac:1e:76:8b:39:bd:06:2d:39:15:83:71:1e:97:ae:
78:0f:7c:ca:ab:47:72:37:cc:35:85:76:1b:e1:89:6f:2b:ca:
37:ad:bf:6f:25:21:4a:90:6c:3f:a5:09:6c:f2:88:6c:d4:bf:
1f:ad:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org