Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/OSyF-Iv1O1plkjMPOU4Dx4TNHUY.roa
File: OSyF-Iv1O1plkjMPOU4Dx4TNHUY.roa (raw, json)
Hash identifier: L46ULwPIuBVUvCvSEOsA5i7o+l8jC155sGSJ+N6pFf0=
Subject key identifier: 39:2C:85:F8:8B:F5:3B:5A:65:92:33:0F:39:4E:03:C7:84:CD:1D:46
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 7B
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/OSyF-Iv1O1plkjMPOU4Dx4TNHUY.roa
Signing time: Mon 10 May 2021 04:34:05 +0000
ROA not before: Mon 10 May 2021 04:34:05 +0000
ROA not after: Thu 28 Apr 2022 06:28:58 +0000
asID: 4808
IP address blocks: 106.75.0.0/19 maxlen: 19
106.75.32.0/19 maxlen: 19
106.75.64.0/19 maxlen: 19
106.75.96.0/19 maxlen: 19
117.50.0.0/19 maxlen: 19
117.50.32.0/19 maxlen: 19
117.50.64.0/19 maxlen: 19
117.50.96.0/19 maxlen: 19
117.50.128.0/19 maxlen: 19
117.50.160.0/19 maxlen: 19
117.50.192.0/19 maxlen: 19
117.50.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: May 10 04:34:05 2021 GMT
Not After : Apr 28 06:28:58 2022 GMT
Subject: CN=392C85F88BF53B5A6592330F394E03C784CD1D46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:28:e5:e6:7e:3f:db:f1:5c:a8:11:eb:58:
bc:e2:01:29:a5:34:ae:e3:da:4d:35:4c:36:f5:fc:
a4:24:41:db:9f:6c:34:3c:b9:aa:90:82:84:f5:a9:
c7:68:7d:e7:07:f6:f3:dd:8f:e9:7a:be:83:60:b5:
ee:8b:94:6d:e0:8d:50:b5:8c:0c:9b:06:ed:40:1a:
2c:75:61:9c:f1:f5:fc:60:61:91:3d:37:70:1a:d4:
c0:ce:24:91:33:f0:f0:4c:ef:79:95:a5:dc:25:34:
9e:bc:1d:4e:6d:df:87:48:f6:3d:1e:20:ec:53:9c:
5a:d7:d5:4e:af:94:34:22:92:7b:51:69:ef:dd:02:
eb:d6:ce:8f:74:b1:26:b2:a6:e3:ea:6e:27:70:09:
cd:25:75:2d:58:e2:ad:4d:f9:80:99:82:70:0d:0e:
cf:af:cc:39:aa:f7:d7:c7:5d:f6:93:21:be:ef:ae:
ee:88:55:4f:37:fa:96:a4:30:93:dd:d3:e5:36:25:
7e:04:5e:c6:8e:36:8f:7c:7c:09:8b:b8:f7:60:63:
53:c6:c5:06:e2:fb:ce:2f:d8:3d:f3:d1:03:9b:13:
09:1a:81:6c:f7:8a:8b:3f:f9:6f:5c:6e:ac:fb:50:
e8:fe:6f:95:6d:d8:46:73:3a:29:a0:82:3b:8c:be:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:85:F8:8B:F5:3B:5A:65:92:33:0F:39:4E:03:C7:84:CD:1D:46
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/OSyF-Iv1O1plkjMPOU4Dx4TNHUY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.0.0/17
117.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:0b:75:f4:6c:0a:d6:2c:5c:b0:e3:33:bd:c7:e4:36:a7:53:
72:da:76:3e:8b:07:a9:f2:74:15:0d:c3:4f:b1:16:cf:4c:ab:
b6:f9:4f:ec:e2:45:ed:d4:71:4a:87:4f:7f:2a:59:00:3d:bc:
7c:01:51:93:d1:0a:6c:0d:6e:e7:d5:63:38:91:bd:83:bf:3b:
f7:0f:38:07:11:5b:c2:50:df:61:39:df:db:72:56:86:d2:fa:
d6:5f:5f:77:21:33:2b:52:e4:f1:17:d3:63:86:e2:96:a3:d9:
9a:35:d2:b1:96:cb:c0:0e:d9:06:dd:51:10:b1:56:15:be:37:
30:7e:d2:18:be:c2:18:7f:f7:b7:9a:b1:f3:9b:0e:ab:a8:54:
60:80:24:c5:ae:f2:60:e9:04:83:54:fb:b3:eb:a1:2b:d6:24:
8d:4d:61:9e:d8:6e:42:40:e8:9e:4c:a3:70:45:b8:40:9a:e2:
3c:ee:3b:9e:7e:ed:21:48:f2:1e:91:09:8e:63:28:b9:63:d8:
47:69:12:88:86:e2:6a:7f:14:1c:c2:8e:0d:09:e7:f3:1c:f9:
b8:16:2d:0f:97:3f:18:c8:66:8c:17:b4:9d:43:f3:0f:5d:60:
33:b2:4b:ca:f5:ab:67:00:c9:92:53:6c:87:b1:6a:de:a2:6f:
b6:ba:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org