Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/oXcK8PpOvGwnObwz2SNMpnAlVzY.roa
File: oXcK8PpOvGwnObwz2SNMpnAlVzY.roa (raw, json)
Hash identifier: QnJ94iNDEBglbCK1haukEFYQuq+GsJi/e5MTTlPK4VE=
Subject key identifier: A1:77:0A:F0:FA:4E:BC:6C:27:39:BC:33:D9:23:4C:A6:70:25:57:36
Certificate issuer: /CN=F637C7CD2C4142456ABBC276AD8F00EC61500423
Certificate serial: B3
Authority key identifier: F6:37:C7:CD:2C:41:42:45:6A:BB:C2:76:AD:8F:00:EC:61:50:04:23
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9jfHzSxBQkVqu8J2rY8A7GFQBCM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/oXcK8PpOvGwnObwz2SNMpnAlVzY.roa
Signing time: Thu 01 Jul 2021 07:40:22 +0000
ROA not before: Thu 01 Jul 2021 07:40:21 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63199
IP address blocks: 139.159.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F637C7CD2C4142456ABBC276AD8F00EC61500423
Validity
Not Before: Jul 1 07:40:21 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A1770AF0FA4EBC6C2739BC33D9234CA670255736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:bd:78:64:ca:f2:c1:20:62:40:3d:09:e0:
96:e8:b3:c3:a1:15:62:7e:c0:ec:56:c8:af:70:ea:
13:78:bf:99:68:d4:bd:a1:00:3d:6a:9d:7f:27:d8:
0b:a3:05:79:07:b3:fa:16:cd:ee:65:22:a4:61:37:
f6:f2:d3:cc:11:19:13:30:59:d2:58:91:66:1d:ea:
fd:10:ad:40:ad:df:30:3b:50:85:b6:44:e7:0d:77:
f8:ff:63:ff:1c:19:c9:3a:0b:5d:73:bd:7a:42:78:
51:a1:42:71:2d:aa:41:94:3d:3b:e0:d7:5c:a3:3e:
22:cc:ef:77:e7:28:74:e0:07:d3:f5:97:df:07:32:
a5:76:4c:8c:ab:62:e3:f9:61:f1:f8:01:5e:18:22:
85:fb:46:61:68:32:b9:7b:a9:2e:e4:8a:ab:21:ad:
1c:fd:ed:f6:ce:10:25:78:6f:75:5f:11:41:73:91:
57:38:c5:90:7a:ca:b0:89:18:6a:10:ff:4a:2f:82:
14:93:a9:2d:7c:5b:9a:95:f8:19:37:3a:7e:e6:2e:
bd:5f:88:6e:cc:0a:ef:fd:a3:14:1f:14:3d:32:91:
e9:11:e7:74:81:8a:c8:9c:23:5c:f8:a6:2f:46:70:
21:4a:e0:ca:57:d4:fd:ef:ec:68:38:0c:9c:ab:47:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:0A:F0:FA:4E:BC:6C:27:39:BC:33:D9:23:4C:A6:70:25:57:36
X509v3 Authority Key Identifier:
keyid:F6:37:C7:CD:2C:41:42:45:6A:BB:C2:76:AD:8F:00:EC:61:50:04:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/9jfHzSxBQkVqu8J2rY8A7GFQBCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9jfHzSxBQkVqu8J2rY8A7GFQBCM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/oXcK8PpOvGwnObwz2SNMpnAlVzY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
139.159.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:c0:51:39:8f:16:a3:5d:0a:a2:dc:f5:f0:88:e4:75:3c:92:
af:24:d7:0b:8e:55:fc:db:7b:d9:6e:da:ee:5f:b1:6e:6c:39:
a7:12:7b:9a:20:86:00:e2:86:0c:19:f7:bf:78:d9:b7:62:e9:
12:15:fc:28:64:56:b7:81:79:ec:e2:56:67:67:72:49:f8:8c:
8e:0e:5e:22:1e:fe:e3:20:4d:73:f3:ed:81:d0:58:5f:cc:08:
a4:47:61:a3:17:bc:46:8c:71:dc:8f:a7:b7:6f:7c:1b:37:6b:
7a:f1:3b:8e:a8:83:6f:4c:fe:43:c0:d5:45:bf:ab:f7:68:67:
54:cd:1d:37:0e:b4:32:83:3b:56:63:d5:b3:9a:e0:8a:79:38:
f2:64:7b:7c:49:e9:05:20:f1:0d:07:9d:c5:a5:64:81:e1:bd:
91:2e:9f:f8:39:3d:73:91:7a:0b:87:c3:f8:95:f5:60:83:bf:
be:13:c6:cc:eb:a9:96:ca:8c:e0:1d:6f:d8:21:f6:bc:e9:93:
09:a8:a5:a9:95:7d:6c:a0:68:b4:1d:69:7d:f0:17:54:66:29:
9f:93:99:e3:b9:cf:12:6c:e6:90:83:74:42:2d:89:98:77:1e:
a4:4a:60:8b:a5:35:ed:6c:fb:9f:2a:c2:2d:ae:4e:72:05:49:
71:dc:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org