Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/CHAUDNxpx99o0TL7R_hwoxS4SP0.roa
File: CHAUDNxpx99o0TL7R_hwoxS4SP0.roa (raw, json)
Hash identifier: rYZHWtRW4LFSwMGx4ouRX60J5FqsqALVIQRs72kDZEM=
Subject key identifier: 08:70:14:0C:DC:69:C7:DF:68:D1:32:FB:47:F8:70:A3:14:B8:48:FD
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 0759
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/CHAUDNxpx99o0TL7R_hwoxS4SP0.roa
Signing time: Thu 14 Apr 2022 06:48:18 +0000
ROA not before: Thu 14 Apr 2022 06:48:18 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 4808
IP address blocks: 106.75.0.0/19 maxlen: 19
106.75.32.0/19 maxlen: 19
106.75.64.0/19 maxlen: 19
106.75.96.0/19 maxlen: 19
117.50.0.0/19 maxlen: 19
117.50.32.0/19 maxlen: 19
117.50.64.0/19 maxlen: 19
117.50.96.0/19 maxlen: 19
117.50.128.0/19 maxlen: 19
117.50.160.0/19 maxlen: 19
117.50.192.0/19 maxlen: 19
117.50.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: Apr 14 06:48:18 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=0870140CDC69C7DF68D132FB47F870A314B848FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:89:6a:de:c7:76:29:eb:78:85:02:c8:1d:
0e:b1:2c:49:f0:26:fe:6b:29:57:ac:b9:04:ae:75:
7d:cb:ba:7f:6f:dd:6b:a2:e0:16:26:23:57:e8:ce:
5b:d9:3e:af:d3:e4:94:c7:54:dd:60:3b:df:79:44:
4c:99:66:0f:9a:20:c2:1e:7a:7a:44:cf:fa:63:45:
41:e8:3c:bd:99:43:7c:c1:17:08:da:f5:bf:b0:a3:
ce:31:57:30:c2:d3:3a:4f:a0:f3:e2:d1:93:a5:93:
21:9c:1a:49:12:e7:81:52:87:f6:b5:a4:e7:c8:50:
96:21:78:07:4a:a9:cb:dd:bd:72:2d:43:38:9a:ed:
8c:7a:f8:d7:1d:e2:1d:09:a9:b3:08:f5:1f:0f:99:
1f:bb:70:87:41:bb:66:33:47:47:4c:f4:fb:a4:44:
f1:d5:c9:9c:c3:51:82:bd:93:10:ed:6b:6b:5d:22:
7c:79:91:18:8c:4a:12:0a:d0:a8:a0:a9:d1:26:af:
2e:02:33:0f:09:71:0b:a9:10:ce:70:e5:16:d5:01:
86:af:98:02:69:4c:a3:be:95:01:54:33:fc:96:f2:
59:e0:ad:ed:f5:bd:9a:57:a8:23:3d:8d:92:4d:24:
08:d9:cc:84:b3:99:df:d7:2d:ff:87:6d:29:e2:fa:
d1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:70:14:0C:DC:69:C7:DF:68:D1:32:FB:47:F8:70:A3:14:B8:48:FD
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/CHAUDNxpx99o0TL7R_hwoxS4SP0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.0.0/17
117.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:c2:82:83:e7:81:ba:9b:5a:8d:df:f9:38:db:a2:3e:1a:d5:
8f:5f:1e:f7:a7:85:00:fb:a2:da:b6:a3:3e:ab:66:2d:e5:88:
8a:18:ac:18:1d:1d:56:45:90:5d:ef:cf:52:bf:5b:7b:1a:c2:
4a:39:97:c9:a4:57:78:db:63:18:f2:2b:66:41:fb:df:06:b9:
89:3a:e1:b0:da:60:cd:64:52:d8:e9:60:50:00:b0:2f:f6:3a:
5e:f6:16:42:b0:5d:af:85:4d:88:10:9a:2d:ac:37:ab:f5:67:
61:7d:d1:d1:aa:7b:c6:50:97:3c:ab:59:81:0d:6e:9a:b9:34:
60:75:bb:f1:e1:4c:3e:21:bf:d2:a7:b1:f3:66:75:51:3f:e1:
81:47:d8:59:23:d1:99:d6:b8:ac:a2:d3:33:dc:6a:93:72:e8:
47:c9:2f:07:e2:de:7e:2a:c1:5b:c0:41:12:66:79:69:75:ca:
8a:aa:46:b9:e1:fc:06:fc:17:b9:f3:81:54:84:eb:6d:7d:56:
68:d2:d3:ea:70:a0:74:d3:01:51:84:f8:36:da:06:74:83:33:
60:9c:79:4d:ad:75:4b:6d:2e:90:2c:b0:f4:b2:a5:c4:ba:2d:
4b:3d:b9:32:fa:19:ba:93:4c:fe:38:1c:26:db:81:80:39:57:
c6:fb:47:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org