Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/nA9BIoG9NTqI_TxjqiouPs7pu3c.roa
File: nA9BIoG9NTqI_TxjqiouPs7pu3c.roa (raw, json)
Hash identifier: 4b0dk5fTRR0AVG1Fn5ruPBqyYbeJEG+btrqnj2uL/S0=
Subject key identifier: 9C:0F:41:22:81:BD:35:3A:88:FD:3C:63:AA:2A:2E:3E:CE:E9:BB:77
Certificate issuer: /CN=43772D55C3AA9DCB45A00FA266BFA7CE888D83FC
Certificate serial: 0827
Authority key identifier: 43:77:2D:55:C3:AA:9D:CB:45:A0:0F:A2:66:BF:A7:CE:88:8D:83:FC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3ctVcOqnctFoA-iZr-nzoiNg_w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/nA9BIoG9NTqI_TxjqiouPs7pu3c.roa
Signing time: Wed 10 Nov 2021 11:43:09 +0000
ROA not before: Wed 10 Nov 2021 11:43:09 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 140212
IP address blocks: 110.173.96.0/20 maxlen: 24
110.173.96.0/22 maxlen: 24
110.173.96.0/24 maxlen: 24
110.173.97.0/24 maxlen: 24
110.173.98.0/24 maxlen: 24
110.173.99.0/24 maxlen: 24
110.173.112.0/20 maxlen: 24
110.173.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772D55C3AA9DCB45A00FA266BFA7CE888D83FC
Validity
Not Before: Nov 10 11:43:09 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=9C0F412281BD353A88FD3C63AA2A2E3ECEE9BB77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:14:29:ed:7d:f2:4b:0d:aa:36:8e:91:f1:
3f:1b:71:70:59:46:82:43:28:6c:c0:25:36:91:dd:
e7:04:bb:69:c9:34:fb:b7:f3:99:f4:b9:6a:71:d7:
c6:45:fd:54:bb:66:df:03:5f:86:93:dd:c4:34:e7:
7c:d8:71:28:0c:71:34:3e:99:03:d9:30:a4:4d:51:
c4:c3:10:4a:80:98:17:18:3d:2b:a6:6c:0e:b9:f8:
91:91:98:3f:dc:52:be:6e:22:6d:7f:b6:91:a2:11:
bf:2d:df:70:ea:b3:c8:a3:7f:1d:bf:bc:3a:80:e1:
d9:73:12:6f:21:3e:24:dd:d3:6b:6c:c3:8e:62:60:
73:80:bb:b0:46:2f:63:21:f5:f2:a5:3a:23:b2:58:
15:bc:a4:69:f7:7b:bb:ae:18:fc:7e:bf:50:4b:1f:
7e:53:f3:3b:2e:e6:95:93:e8:87:59:09:8b:8c:00:
70:af:be:14:56:bd:1c:4a:2b:92:6f:b0:41:a6:6b:
20:28:08:ae:0a:7d:e4:be:09:fa:cc:b3:79:5e:99:
c6:57:3e:94:e5:a1:e6:24:8f:7a:6e:d3:6a:82:c8:
c9:70:cb:65:a9:e3:56:82:63:16:4a:26:ee:ff:48:
42:61:a2:ff:9b:a3:fa:95:6b:f5:39:75:2a:e9:13:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0F:41:22:81:BD:35:3A:88:FD:3C:63:AA:2A:2E:3E:CE:E9:BB:77
X509v3 Authority Key Identifier:
keyid:43:77:2D:55:C3:AA:9D:CB:45:A0:0F:A2:66:BF:A7:CE:88:8D:83:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/Q3ctVcOqnctFoA-iZr-nzoiNg_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3ctVcOqnctFoA-iZr-nzoiNg_w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/nA9BIoG9NTqI_TxjqiouPs7pu3c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.173.96.0/19
Signature Algorithm: sha256WithRSAEncryption
03:0b:77:79:96:43:cc:a6:f1:11:58:04:d7:d7:c6:72:08:54:
a1:0b:0a:8f:bc:84:bb:11:68:1d:82:1f:ee:7c:2d:e1:37:7e:
a8:d3:c3:4f:e8:3c:e0:c0:99:ca:02:75:99:2d:05:c7:9b:01:
53:6f:35:44:c9:91:bc:b0:0f:18:fa:dd:2c:3d:cc:5e:a9:d4:
e0:69:d9:5a:c7:a7:27:68:25:d9:51:e5:de:1f:20:d0:1d:c5:
25:6a:3e:12:08:f6:58:d6:12:95:71:ce:25:17:18:95:a7:80:
6b:af:24:6e:c4:f4:40:a3:f6:e0:08:20:94:13:eb:00:fe:4e:
1d:89:05:6b:ec:10:79:0b:fa:32:9b:31:f1:26:cc:24:57:76:
34:36:d9:18:57:c8:d0:1f:88:d9:1c:62:48:3b:33:4d:7b:6f:
c1:83:16:41:c6:17:5b:1f:c0:3e:1a:17:2c:54:22:5e:a9:a7:
42:d9:da:c5:24:ee:5f:78:f6:70:4c:c4:ef:bd:d7:3a:96:ff:
ef:8c:6e:84:59:09:95:e2:6c:df:ac:b1:cb:57:b0:4b:41:00:
fb:ee:8c:60:48:7b:d6:5a:ac:5b:3f:a8:c1:37:ac:75:ad:a3:
2f:3b:de:68:48:b0:71:d2:34:ca:e2:28:09:84:b1:7e:62:2f:
a6:e7:e7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org