Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/GkcMPB8HwTPITormRZY2T39iJUc.roa
File: GkcMPB8HwTPITormRZY2T39iJUc.roa (raw, json)
Hash identifier: gvIpxsmFCXwFQewoiGLgbJreo7gkhMbkgqm3zO4rBYU=
Subject key identifier: 1A:47:0C:3C:1F:07:C1:33:C8:4E:8A:E6:45:96:36:4F:7F:62:25:47
Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Certificate serial: 076C
Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/GkcMPB8HwTPITormRZY2T39iJUc.roa
Signing time: Tue 07 Jun 2022 02:16:41 +0000
ROA not before: Tue 07 Jun 2022 02:16:41 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 136958
IP address blocks: 43.255.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1900 (0x76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Validity
Not Before: Jun 7 02:16:41 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=1A470C3C1F07C133C84E8AE64596364F7F622547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:98:e3:fc:cc:d4:c4:71:18:88:75:12:ad:
30:b5:62:5d:24:6d:71:f7:bf:0e:a5:bf:0c:ba:10:
19:16:b5:90:50:1e:f0:75:4d:8b:f4:7e:d9:17:22:
57:07:79:85:b5:40:8b:fb:28:4b:e2:b8:86:64:52:
88:4f:ee:7c:d3:17:94:c1:70:95:9d:13:41:ba:81:
c4:41:69:39:a4:98:ce:06:f4:27:f6:99:cd:f1:c6:
e1:c6:2a:b7:89:af:83:1f:b5:59:3e:20:48:a3:37:
5a:22:d8:7e:22:55:14:62:db:38:6c:a7:f0:9b:c6:
a2:90:71:92:d3:35:6f:10:b7:cf:f1:5d:1c:b6:7f:
2f:6b:97:40:be:d7:ed:96:03:c0:cf:f8:92:c4:bf:
7e:98:ea:49:b2:7e:db:89:9c:0c:40:fc:c9:fd:87:
25:ee:35:c1:df:8e:67:7d:44:29:ca:44:f4:18:b9:
b4:2a:ea:3e:84:59:3a:f6:0a:fc:a0:ee:a3:c8:92:
90:93:55:26:88:b6:70:30:db:1d:a7:c6:e0:44:3b:
48:b3:34:c7:01:4b:24:ec:44:e4:19:9a:dc:14:5e:
77:5f:9b:2e:bf:2e:b7:df:bf:70:a5:ea:01:40:e2:
2c:ab:8d:d2:04:36:ce:93:18:2c:36:cb:81:61:6a:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:47:0C:3C:1F:07:C1:33:C8:4E:8A:E6:45:96:36:4F:7F:62:25:47
X509v3 Authority Key Identifier:
keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/GkcMPB8HwTPITormRZY2T39iJUc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
18:cc:23:91:a4:d3:25:62:99:f5:6f:d6:d2:b9:32:4b:f7:14:
75:43:dd:11:33:e6:98:cf:24:f4:f6:a7:48:42:de:05:df:84:
b7:a4:ea:46:e7:0a:6e:1f:11:2f:14:b1:11:07:a3:94:90:69:
c1:2f:2d:e4:bd:53:08:6e:87:a1:a2:a8:58:50:46:8d:f3:61:
78:e5:14:46:cc:09:7a:cb:d4:a9:be:ca:a2:49:d2:95:a3:78:
87:8b:ed:be:c1:4a:7c:88:60:87:4d:db:9c:3f:4c:aa:b5:b7:
0e:70:93:c1:e5:14:a3:1a:ed:8e:cf:24:26:ad:71:5e:f2:b5:
7d:ac:9b:07:33:2f:0e:85:61:67:85:77:07:dd:9a:23:ea:97:
cd:91:db:ad:4a:63:2e:1e:ba:96:11:12:78:43:38:b7:16:cc:
04:9a:62:07:dc:0d:16:e0:10:c0:cd:e1:a8:4d:86:ec:41:a0:
86:3e:aa:9f:fc:3e:92:96:61:8f:cf:00:71:d9:07:04:39:51:
43:b5:2b:82:f9:06:49:3d:af:07:14:92:92:5d:df:c0:3e:21:
aa:0a:d5:ca:ae:8d:e0:9f:5d:70:e7:d6:3c:b3:7a:6b:72:00:
5e:e6:e6:86:2c:30:86:9c:a7:9f:ca:99:a0:5d:02:3a:d9:ce:
92:74:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org