Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/CXkfwbizWK6O42UdaEFXwhFXcrk.roa
File: CXkfwbizWK6O42UdaEFXwhFXcrk.roa (raw, json)
Hash identifier: ZI7B0FuM+BicmOjB7hXKABiwZdSG1hiJf05RvNYFDEo=
Subject key identifier: 09:79:1F:C1:B8:B3:58:AE:8E:E3:65:1D:68:41:57:C2:11:57:72:B9
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 48
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/CXkfwbizWK6O42UdaEFXwhFXcrk.roa
Signing time: Sat 08 May 2021 06:07:23 +0000
ROA not before: Sat 08 May 2021 06:07:23 +0000
ROA not after: Thu 28 Apr 2022 06:28:58 +0000
asID: 135377
IP address blocks: 106.75.192.0/24 maxlen: 24
106.75.193.0/24 maxlen: 24
106.75.194.0/24 maxlen: 24
106.75.195.0/24 maxlen: 24
106.75.196.0/24 maxlen: 24
106.75.197.0/24 maxlen: 24
106.75.198.0/24 maxlen: 24
106.75.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: May 8 06:07:23 2021 GMT
Not After : Apr 28 06:28:58 2022 GMT
Subject: CN=09791FC1B8B358AE8EE3651D684157C2115772B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c8:c2:e5:82:78:a1:a3:01:1f:93:6a:4f:40:
2c:66:8e:b2:a5:a7:b2:6f:04:0d:79:e3:9a:a9:9f:
fd:8d:3b:62:62:45:e1:5c:a6:ac:9b:bb:3b:86:7f:
90:a9:c7:21:fd:c2:89:d7:ec:d2:9b:c0:90:03:d3:
b9:4b:77:7b:e7:25:6d:38:7b:05:54:b3:be:c1:cb:
7f:86:ea:68:1c:ab:16:81:20:00:61:4e:e4:d3:f1:
9e:d2:d5:1c:fe:da:cd:ec:57:09:c1:1c:be:7a:fb:
8a:fc:8d:b2:51:01:89:a4:02:1d:6c:9b:bc:51:a9:
1e:11:9f:2b:35:9d:4d:d4:b1:b9:a6:10:04:59:96:
cd:b3:5e:18:02:73:bc:26:42:8f:fe:7e:f2:d1:3f:
c7:ad:20:03:ef:0e:3e:fe:c2:0f:d9:1a:7c:58:f1:
b5:3e:8d:99:56:45:c1:c8:99:dc:c1:8b:e4:f1:cc:
83:09:43:92:a8:5f:31:e1:d6:3d:63:b3:29:c1:02:
92:cf:e6:08:80:23:f6:f2:cd:24:68:08:0e:90:ca:
54:f5:57:9d:e3:9b:37:7c:e7:bf:1b:98:16:c8:4a:
d1:da:df:0f:65:7d:20:47:e1:41:34:c9:d8:a3:1f:
b4:34:16:27:30:db:d7:21:7a:b6:62:ed:21:cf:6a:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:79:1F:C1:B8:B3:58:AE:8E:E3:65:1D:68:41:57:C2:11:57:72:B9
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/CXkfwbizWK6O42UdaEFXwhFXcrk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.192.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:21:8c:53:77:8e:65:cc:36:32:c8:3b:90:ac:de:be:99:e8:
90:24:53:26:bc:59:b6:e6:10:a8:9f:08:74:84:cd:2d:93:e4:
f5:95:a1:6e:77:8e:16:d8:86:69:2b:4b:8b:15:f5:32:19:ec:
cf:01:d7:25:74:d1:b3:c3:61:68:4c:d5:4f:8f:63:43:29:73:
41:90:33:29:ff:c6:33:61:22:cd:a6:01:56:02:ea:13:0a:32:
2e:76:0d:d8:36:d3:15:f0:18:2f:92:d8:a1:a2:82:24:bc:a6:
f3:bc:2c:4d:1a:37:a3:e0:bc:a1:d3:b2:99:d4:c7:f8:14:0b:
1c:27:ff:1e:95:cd:d5:7e:5a:ea:e0:1d:c8:f3:03:e4:0f:57:
9b:bd:2c:0b:a6:06:b6:e4:26:45:87:1a:db:10:44:d7:41:3e:
6c:72:be:85:38:3e:47:08:08:53:24:6a:6e:90:14:7b:18:56:
cf:00:fb:18:0d:23:87:c1:c8:9a:86:35:ff:be:ae:65:0e:fa:
5a:89:c2:5b:29:22:6c:6c:96:27:e5:35:2c:c3:49:29:31:a8:
a0:6e:b6:d6:5c:b5:92:cd:f1:d8:1f:ea:ed:d4:45:69:ce:13:
27:38:e8:4a:f5:1e:b5:25:79:c2:1f:07:06:c3:fe:0e:65:42:
fa:9f:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org