Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/78pdhMRfYRgYlf-ZuVyBlwoddf8.roa
File: 78pdhMRfYRgYlf-ZuVyBlwoddf8.roa (raw, json)
Hash identifier: n5sZSrBJblrjjN79xgDpUKGPaKGTAqRS6FSdmuNHviY=
Subject key identifier: EF:CA:5D:84:C4:5F:61:18:18:95:FF:99:B9:5C:81:97:0A:1D:75:FF
Certificate issuer: /CN=706580629A7148E4B22189E7B91F146791116370
Certificate serial: 03
Authority key identifier: 70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/78pdhMRfYRgYlf-ZuVyBlwoddf8.roa
Signing time: Tue 31 May 2022 12:57:15 +0000
ROA not before: Tue 31 May 2022 12:57:15 +0000
ROA not after: Wed 31 May 2023 12:39:05 +0000
asID: 63889
IP address blocks: 110.173.96.0/20 maxlen: 24
110.173.96.0/22 maxlen: 24
110.173.96.0/24 maxlen: 24
110.173.97.0/24 maxlen: 24
110.173.98.0/24 maxlen: 24
110.173.99.0/24 maxlen: 24
110.173.112.0/20 maxlen: 24
110.173.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706580629A7148E4B22189E7B91F146791116370
Validity
Not Before: May 31 12:57:15 2022 GMT
Not After : May 31 12:39:05 2023 GMT
Subject: CN=EFCA5D84C45F61181895FF99B95C81970A1D75FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:c0:d5:78:18:d1:fb:77:a8:4b:fc:8e:f9:
28:a8:41:74:01:2c:63:fa:3f:7f:dc:e4:fc:9b:cc:
76:4b:cb:77:e1:c2:1b:4a:cb:94:e1:4a:77:70:5f:
0d:e6:e7:d4:7a:3c:51:fe:d0:db:b2:40:65:db:4c:
c7:11:3f:f8:47:c5:99:9f:0d:51:45:24:b2:99:1f:
89:ba:9d:02:38:84:18:5f:bf:11:3e:0a:83:1f:15:
d5:4f:93:09:3a:95:0d:c5:b4:85:07:01:98:d0:7d:
df:f4:7b:df:00:1c:01:36:42:57:80:0f:20:ea:56:
58:9f:41:b2:81:3d:c6:9a:16:24:8f:86:f2:cb:e6:
bb:ca:cb:60:49:e3:a6:a8:70:2a:2a:d5:e1:d1:d1:
00:5b:92:04:7d:ab:92:ba:c2:36:49:86:7a:2c:fa:
14:5c:9b:83:a7:e8:3b:92:08:95:62:05:38:db:c6:
27:c2:57:c4:44:0b:86:20:eb:c7:09:74:25:db:1b:
01:e7:70:fc:ce:62:b1:15:23:24:65:4b:8d:d1:a9:
e6:af:f8:d2:0a:93:75:58:c3:34:c2:f0:51:22:f2:
49:4a:42:bc:e7:96:cf:e0:bc:6b:a4:8b:eb:5d:ed:
58:81:22:87:2a:7a:82:49:cd:d0:78:de:5f:57:14:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CA:5D:84:C4:5F:61:18:18:95:FF:99:B9:5C:81:97:0A:1D:75:FF
X509v3 Authority Key Identifier:
keyid:70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/78pdhMRfYRgYlf-ZuVyBlwoddf8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.173.96.0/19
Signature Algorithm: sha256WithRSAEncryption
51:a0:ce:ac:a0:7c:e3:23:16:97:54:dd:4c:03:72:1d:05:49:
cb:dd:ee:dd:35:8c:f6:66:9f:43:66:2a:2a:87:78:68:d5:90:
9b:37:7b:ce:08:af:90:66:d2:ff:a4:f5:b1:0c:f0:56:b3:b1:
20:ae:76:f3:4f:13:e3:2b:23:71:27:26:54:38:c7:e6:b7:33:
10:c9:c7:43:01:7d:b3:de:b5:49:ab:b6:a6:eb:bf:f9:59:0f:
26:76:d2:7b:e0:57:48:b2:4c:c6:45:85:59:1b:fa:03:fa:a7:
ed:f1:4d:f8:54:03:2f:ed:2e:71:5c:f0:dd:f8:2e:5b:a7:2c:
1f:c2:5c:38:6c:bf:70:26:ba:6e:4b:bb:b9:08:3f:08:77:da:
76:08:28:b5:fc:d6:85:8e:83:a9:66:8d:c9:a8:8b:24:9f:1f:
f8:3a:2d:e1:9b:1f:ed:a4:ab:09:25:7d:0c:da:12:8d:12:63:
b2:57:51:8b:00:fb:c9:b5:4a:93:5c:48:e1:b6:85:38:0d:86:
27:74:78:ff:73:96:3d:59:06:6f:fe:0a:ca:70:5d:a6:88:7d:
e7:8e:62:33:ab:81:9e:36:c9:5e:57:cc:4e:f0:d4:67:f6:eb:
7a:b2:fd:ab:0e:89:f3:53:c0:26:13:54:7f:f5:15:0f:4f:c5:
cf:79:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org