Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/U-bDE_yv0RtofimDgZW7A3N8dwE.roa
File: U-bDE_yv0RtofimDgZW7A3N8dwE.roa (raw, json)
Hash identifier: g+U7z3hrEzS2Ur7Y06w1SdTfPp9j4OWONfSBbAFPS1U=
Subject key identifier: 53:E6:C3:13:FC:AF:D1:1B:68:7E:29:83:81:95:BB:03:73:7C:77:01
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 0759
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/U-bDE_yv0RtofimDgZW7A3N8dwE.roa
Signing time: Thu 14 Apr 2022 06:48:16 +0000
ROA not before: Thu 14 Apr 2022 06:48:16 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 23724
IP address blocks: 106.75.0.0/19 maxlen: 19
106.75.32.0/19 maxlen: 19
106.75.64.0/19 maxlen: 19
106.75.96.0/19 maxlen: 19
117.50.0.0/19 maxlen: 19
117.50.32.0/19 maxlen: 19
117.50.64.0/19 maxlen: 19
117.50.96.0/19 maxlen: 19
117.50.128.0/19 maxlen: 19
117.50.160.0/19 maxlen: 19
117.50.192.0/19 maxlen: 19
117.50.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: Apr 14 06:48:16 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=53E6C313FCAFD11B687E29838195BB03737C7701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:cd:7d:85:89:61:2d:34:0f:71:b6:26:b2:
29:f1:3d:4c:68:54:26:45:38:70:d8:45:e3:8b:35:
a8:e4:8b:41:8b:2d:5e:28:8f:15:69:3f:a6:7a:c4:
26:d6:d4:57:32:84:0b:8b:67:8f:9d:9f:35:d4:57:
12:8c:c5:1b:3e:c2:a7:06:79:4e:e1:e5:68:73:7a:
ea:36:bb:d7:6a:e6:62:16:72:b1:00:ee:e0:96:fa:
c3:48:f4:95:6e:c7:e0:21:5b:13:59:84:86:0e:9e:
b0:15:df:d1:31:8f:e7:95:b7:f3:00:d3:bf:29:a6:
e3:99:b9:ee:83:c6:04:c4:9f:25:07:bc:ec:59:7f:
77:77:9b:18:6b:db:d8:01:1b:ca:05:59:13:b8:93:
95:68:2e:a2:cf:eb:04:9b:78:99:9b:94:20:7c:64:
fd:32:d6:df:0f:d9:6b:86:e5:e5:c7:f4:35:9b:3f:
30:cf:c7:d6:1b:95:1f:e8:63:89:6c:cd:58:f8:92:
a3:ff:7b:bd:7c:ee:cf:80:c0:7c:f4:fc:22:c1:d8:
26:a8:a7:dd:07:49:43:54:d4:54:b7:2d:e0:5c:5b:
4c:2c:05:8a:49:10:01:3c:95:17:a3:19:b7:b1:5f:
c3:11:e3:4b:3e:a5:18:08:0d:f3:6d:fc:8b:de:a0:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:C3:13:FC:AF:D1:1B:68:7E:29:83:81:95:BB:03:73:7C:77:01
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/U-bDE_yv0RtofimDgZW7A3N8dwE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.0.0/17
117.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:9a:fd:91:73:06:ce:91:19:8b:28:75:4e:35:74:7b:8e:80:
af:44:d5:d2:e8:3d:1a:ea:8b:c2:27:9e:3a:62:b3:70:d9:7d:
34:41:ce:2e:55:4d:04:88:58:22:63:11:9c:b3:8c:ea:6d:ac:
cb:18:c6:1d:92:a6:86:48:34:c1:65:4a:6c:00:28:60:c8:a9:
88:2d:e0:f2:dd:32:c0:ac:5d:ab:e4:84:33:14:16:69:f8:c0:
5c:f3:08:1d:64:06:28:23:04:45:d3:5f:3e:af:1d:ff:ad:93:
bb:e3:76:ed:2b:16:a8:12:0e:06:13:60:be:6d:c3:1f:58:d2:
4c:79:cf:34:35:9f:d0:d0:73:ac:bb:a2:f2:61:e7:f5:75:68:
98:f2:63:38:a3:89:73:b0:8a:03:e3:1c:85:14:27:91:a4:90:
1f:72:2f:5d:8c:c6:b0:8a:c4:a2:a8:52:7d:05:24:ee:08:91:
d8:18:06:8f:09:33:21:d7:b7:63:6a:dc:61:25:7f:4a:72:f3:
9c:fa:09:07:c6:8c:c7:39:8c:15:46:e6:b5:23:65:fe:5a:20:
b9:92:f9:ab:e2:ef:39:73:3c:5b:ae:f0:3d:99:c7:ec:31:75:
70:e7:77:fb:c1:b0:5c:a8:db:a8:64:1a:0b:2d:e3:2b:92:95:
9a:e4:45:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org