Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/w1KF-AVJc7ox5uhlBvSJHi0MNvk.roa
File: w1KF-AVJc7ox5uhlBvSJHi0MNvk.roa (raw, json)
Hash identifier: B6rpw3051s4NNZiiMWtZ+w2Zmu+sIA3nFnfY1evsc6I=
Subject key identifier: C3:52:85:F8:05:49:73:BA:31:E6:E8:65:06:F4:89:1E:2D:0C:36:F9
Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Certificate serial: 076D
Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/w1KF-AVJc7ox5uhlBvSJHi0MNvk.roa
Signing time: Tue 07 Jun 2022 02:16:41 +0000
ROA not before: Tue 07 Jun 2022 02:16:41 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 56040
IP address blocks: 43.255.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901 (0x76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Validity
Not Before: Jun 7 02:16:41 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=C35285F8054973BA31E6E86506F4891E2D0C36F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:cc:f7:07:fb:0d:1d:1f:d7:08:af:92:ac:
fe:06:49:d4:e7:21:32:65:b5:64:63:8b:a6:54:89:
05:c8:ff:f9:bd:ac:05:3f:65:4d:ff:27:4d:d5:5d:
54:2c:60:63:8f:8d:c4:5b:bf:06:06:14:87:17:a5:
dc:72:7f:90:3d:55:46:86:00:89:bc:b8:0c:59:c2:
58:8d:a2:ca:5f:e6:8a:ec:54:b0:aa:33:30:a2:5f:
f7:cf:64:17:fd:07:ee:70:ad:2d:b0:25:02:9a:05:
62:85:c8:16:76:9c:8b:84:c0:0c:be:2e:c0:bb:76:
31:d0:2d:d3:cd:88:2a:5f:d6:fd:3a:98:3c:e8:e5:
b7:28:66:07:a4:2c:ce:e0:0d:4f:21:de:15:3e:87:
ba:bd:7f:46:8e:be:f1:08:2d:c2:44:ec:d4:af:8b:
86:6d:8d:82:35:4c:d5:ce:cb:b1:02:4a:f1:b6:39:
0d:f6:db:04:7d:4b:fb:ca:b8:53:68:2e:4a:56:ab:
6d:38:0e:60:8d:b6:e7:4e:f0:5d:ff:e1:3e:4d:00:
af:51:8b:4e:25:c4:93:7c:37:ae:42:1d:3e:3b:c4:
8d:9e:c6:5c:b0:3f:bd:17:17:06:31:9b:4d:90:04:
f9:17:4b:67:cf:df:79:27:ec:5f:95:5d:2c:00:16:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:52:85:F8:05:49:73:BA:31:E6:E8:65:06:F4:89:1E:2D:0C:36:F9
X509v3 Authority Key Identifier:
keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/w1KF-AVJc7ox5uhlBvSJHi0MNvk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:1b:d7:9e:af:eb:3b:1b:d3:10:e4:61:ef:ef:c7:a6:5a:c4:
bc:c1:1b:be:ad:a0:df:98:0d:36:e5:5e:5f:19:a4:99:e9:8e:
c5:66:1c:4d:18:c4:20:82:b5:30:46:d4:7b:74:f1:83:7e:15:
e3:f0:51:bf:8a:98:94:cd:d5:f8:e2:ed:dd:a6:4a:47:d2:49:
0c:68:fa:41:df:d6:f1:4c:50:34:c6:b1:bf:3d:42:0c:62:5c:
2f:4e:38:d1:08:9f:4e:cf:4a:08:2f:cc:a7:ad:8d:32:e2:24:
99:6b:7a:30:33:3c:15:ab:94:7a:d1:a0:4f:90:fc:85:95:3f:
7f:cf:1b:e9:75:dc:18:2d:af:a5:4a:60:98:5b:c4:5e:69:e9:
41:57:d4:23:38:83:2b:c6:98:6b:ca:75:cb:2f:ec:13:2f:31:
ef:36:9c:c6:fd:56:b3:97:47:0f:1c:69:aa:d5:f1:c3:78:ad:
cc:67:f2:e2:76:84:76:86:95:d0:d6:6c:76:1a:71:9f:40:5b:
6f:ba:97:a5:6b:62:a8:47:9f:44:9d:2d:50:21:1b:e0:41:24:
be:88:f0:0f:bd:57:88:4f:87:2f:e7:56:a0:84:6d:90:8c:c4:
79:de:a5:82:88:19:36:d2:ef:f7:a8:64:a0:13:7a:44:3f:54:
b1:51:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org