Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/71/s19xEQLf1LCJV6p7-Pi_M0QuKkg.roa
File: s19xEQLf1LCJV6p7-Pi_M0QuKkg.roa (raw, json)
Hash identifier: zhnboJz7y3OLAKavd6C73lZ8m0nOXrH1fqbPToBOva4=
Subject key identifier: B3:5F:71:11:02:DF:D4:B0:89:57:AA:7B:F8:F8:BF:33:44:2E:2A:48
Certificate issuer: /CN=43772D55C3AA9DCB45A00FA266BFA7CE888D83FC
Certificate serial: 0825
Authority key identifier: 43:77:2D:55:C3:AA:9D:CB:45:A0:0F:A2:66:BF:A7:CE:88:8D:83:FC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3ctVcOqnctFoA-iZr-nzoiNg_w.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/s19xEQLf1LCJV6p7-Pi_M0QuKkg.roa
Signing time: Wed 10 Nov 2021 11:42:14 +0000
ROA not before: Wed 10 Nov 2021 11:42:14 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63889
IP address blocks: 110.173.96.0/20 maxlen: 24
110.173.96.0/22 maxlen: 24
110.173.96.0/24 maxlen: 24
110.173.97.0/24 maxlen: 24
110.173.98.0/24 maxlen: 24
110.173.99.0/24 maxlen: 24
110.173.112.0/20 maxlen: 24
110.173.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772D55C3AA9DCB45A00FA266BFA7CE888D83FC
Validity
Not Before: Nov 10 11:42:14 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B35F711102DFD4B08957AA7BF8F8BF33442E2A48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:68:64:25:eb:99:e0:aa:e0:05:b7:ae:49:
5d:a0:67:b0:73:2c:d5:e5:56:90:c2:df:05:e0:66:
ca:95:95:f6:ce:0f:45:72:8c:3d:6c:b8:39:a3:f4:
09:c3:4f:fb:1d:31:f4:9b:e7:bb:09:b3:ab:3f:28:
eb:50:57:2c:48:26:a8:c9:3b:01:1a:5d:99:ac:4e:
a6:a3:f1:bf:2d:aa:13:0e:1d:05:d8:f9:8e:94:f5:
75:38:f7:8f:ee:b7:8d:4e:19:fc:d8:27:34:59:c1:
36:55:6b:ac:3b:97:d8:c1:38:4b:f8:74:24:94:19:
b2:a2:28:6a:cd:5c:35:ba:c5:4b:ec:1a:2a:74:5d:
fa:c6:9c:da:b0:19:f2:3a:1f:2a:70:c0:c0:ba:c5:
ae:97:61:29:99:05:95:e8:59:27:28:e1:20:52:7e:
57:b6:f8:f4:f3:79:cd:8e:a5:1f:6b:70:91:6b:0b:
1d:26:9b:60:17:5b:78:d3:18:28:81:3d:f6:0b:d3:
b9:9a:a5:20:a0:6d:4e:6f:4a:68:56:5d:45:89:fe:
17:47:21:ff:e9:db:8a:7f:f0:40:18:61:8e:00:2e:
63:03:05:82:f2:aa:5b:ca:5d:84:fb:3c:e4:ca:19:
fb:28:ee:74:37:50:76:b3:06:ec:c4:00:35:c9:ee:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5F:71:11:02:DF:D4:B0:89:57:AA:7B:F8:F8:BF:33:44:2E:2A:48
X509v3 Authority Key Identifier:
keyid:43:77:2D:55:C3:AA:9D:CB:45:A0:0F:A2:66:BF:A7:CE:88:8D:83:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/Q3ctVcOqnctFoA-iZr-nzoiNg_w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Q3ctVcOqnctFoA-iZr-nzoiNg_w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/71/s19xEQLf1LCJV6p7-Pi_M0QuKkg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.173.96.0/19
Signature Algorithm: sha256WithRSAEncryption
15:b0:6f:56:45:e3:77:47:ac:92:e0:42:30:0e:a3:15:1a:22:
cd:9c:0e:7e:9d:fe:d8:26:a1:64:80:9e:1d:08:c7:4d:bc:3a:
8f:eb:4c:9f:0a:ae:d5:8b:12:bd:8c:32:ba:10:d1:10:69:e5:
21:81:e3:6e:52:20:b9:2e:37:11:1b:77:f4:cd:16:b7:48:9b:
a1:28:58:8f:2a:fc:7e:7f:ec:08:e5:05:1b:d8:d2:7d:e0:f4:
82:41:fe:76:55:9a:24:3b:32:30:7d:2b:9e:c2:3c:a6:e3:ba:
33:e6:5b:1a:d9:55:4f:14:4c:83:96:4f:1f:84:49:26:3f:76:
6d:fa:5a:e5:f6:ce:5c:e1:b6:73:8b:ec:79:7c:83:fc:d9:f1:
28:cd:4d:a5:8b:fd:00:5f:ce:e3:23:55:e5:e7:6d:1f:41:0e:
06:c9:db:a3:f1:25:ba:1a:cd:b2:56:1a:af:23:51:2b:d3:02:
f9:e9:60:ff:75:25:70:3d:56:33:14:7d:6f:4f:8b:ae:e7:40:
0e:0a:77:a1:13:48:68:33:de:da:0f:88:8e:2d:21:dd:81:a5:
d2:83:41:72:70:f5:3f:c7:55:f3:ba:7b:80:d7:a5:7c:bd:45:
6c:47:6c:8d:dd:e4:94:6f:cd:fa:1e:74:01:3c:eb:4f:3e:6a:
74:a9:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org