Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/Mi69WsIly_pNHAOvCOz1gHhCUw4.roa
File: Mi69WsIly_pNHAOvCOz1gHhCUw4.roa (raw, json)
Hash identifier: bUUEZ5PlpSqNeQoso05zD8KfRVQ6FCMgCzj7RI9ZBKc=
Subject key identifier: 32:2E:BD:5A:C2:25:CB:FA:4D:1C:03:AF:08:EC:F5:80:78:42:53:0E
Certificate issuer: /CN=706580629A7148E4B22189E7B91F146791116370
Certificate serial: 04
Authority key identifier: 70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/Mi69WsIly_pNHAOvCOz1gHhCUw4.roa
Signing time: Tue 31 May 2022 12:57:16 +0000
ROA not before: Tue 31 May 2022 12:57:16 +0000
ROA not after: Wed 31 May 2023 12:39:05 +0000
asID: 140212
IP address blocks: 110.173.96.0/20 maxlen: 24
110.173.96.0/22 maxlen: 24
110.173.96.0/24 maxlen: 24
110.173.97.0/24 maxlen: 24
110.173.98.0/24 maxlen: 24
110.173.99.0/24 maxlen: 24
110.173.112.0/20 maxlen: 24
110.173.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706580629A7148E4B22189E7B91F146791116370
Validity
Not Before: May 31 12:57:16 2022 GMT
Not After : May 31 12:39:05 2023 GMT
Subject: CN=322EBD5AC225CBFA4D1C03AF08ECF5807842530E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:24:7d:9d:23:a9:be:9e:bc:62:a8:f5:62:
d0:71:a8:a1:90:ba:0b:f5:3f:08:2c:ba:58:a0:0f:
70:c9:2d:01:8d:9e:b0:d3:bf:c1:b7:88:fa:6e:a3:
56:5e:c8:39:c0:e4:74:e7:50:35:fa:de:53:36:56:
c4:75:52:af:a7:e1:23:d8:fd:5d:3d:8e:87:91:bb:
fe:a8:44:01:d4:37:fc:69:78:59:68:80:1f:d2:8c:
b6:b8:42:68:3f:de:5c:38:5e:ea:59:6c:f3:82:ae:
63:f0:36:9e:74:e4:a4:0f:96:f9:fe:44:a4:5c:82:
90:81:97:ab:f0:98:cd:ba:25:88:d9:35:10:8b:d0:
40:85:90:64:e0:ba:c5:4e:33:cb:91:42:da:c3:ea:
d0:57:d6:17:31:9b:9e:73:1d:05:12:b9:ae:22:30:
4d:a3:ad:6b:88:33:de:09:7e:2c:73:59:82:23:72:
ca:18:74:5d:dd:d6:f9:55:b8:88:1c:39:12:92:b6:
e5:61:26:04:10:30:c7:42:0f:55:50:62:35:0f:ba:
de:58:4a:56:0a:e4:fe:d3:f0:44:5f:83:a5:82:82:
b9:5a:04:96:8e:cd:44:48:48:57:cb:91:ec:91:bb:
e9:9a:e5:92:84:4e:da:cb:ce:c5:27:f0:bb:6b:de:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2E:BD:5A:C2:25:CB:FA:4D:1C:03:AF:08:EC:F5:80:78:42:53:0E
X509v3 Authority Key Identifier:
keyid:70:65:80:62:9A:71:48:E4:B2:21:89:E7:B9:1F:14:67:91:11:63:70
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/cGWAYppxSOSyIYnnuR8UZ5ERY3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/cGWAYppxSOSyIYnnuR8UZ5ERY3A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/Mi69WsIly_pNHAOvCOz1gHhCUw4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.173.96.0/19
Signature Algorithm: sha256WithRSAEncryption
79:2b:1a:22:29:eb:45:d5:d5:9b:c8:2e:f5:2f:0a:01:b3:10:
7d:a1:7a:d7:c3:ed:c4:e0:70:75:60:13:3e:eb:42:81:b4:fc:
f6:d1:81:34:4a:e2:95:64:ea:ef:08:cc:f6:3e:1d:9e:d1:fb:
e9:93:ab:40:38:f8:8f:d5:14:91:d3:9c:48:e3:33:0e:87:6b:
50:87:da:5e:82:84:fe:a0:36:fe:bc:71:9d:34:fc:42:5b:33:
2d:83:33:b1:2c:ce:53:e1:fa:4c:f6:e5:3e:8d:4a:98:92:74:
c8:22:0c:2b:8d:fb:80:09:dd:d4:97:55:07:86:10:61:9a:f6:
9d:1b:f9:31:34:82:52:53:0b:d0:55:ab:97:fa:46:e6:26:a1:
6e:ea:ca:9b:95:d3:1d:69:0a:0b:6f:a4:77:6c:3d:6c:e5:5c:
7d:87:48:52:4e:4b:31:98:1b:4b:d1:9a:1d:73:02:1b:e9:93:
33:65:02:ef:d7:20:95:39:56:d1:d2:7a:83:79:9e:c6:e7:88:
70:36:58:db:71:5f:33:dd:06:c8:e2:50:89:4d:41:99:ae:5f:
9a:9b:32:74:65:ba:d4:08:34:b6:ab:da:f8:08:dc:66:56:06:
f7:f1:88:04:16:ed:33:98:dc:6c:8a:3d:97:ca:31:e5:db:27:
59:96:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org