Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/YJAl8MGaakJFaIC1XG9EullmFtM.roa
File: YJAl8MGaakJFaIC1XG9EullmFtM.roa (raw, json)
Hash identifier: ZUqPodqfsKwb4Z/TPbQdjJW3NnAyScBCzOmVpdiV6Fg=
Subject key identifier: 60:90:25:F0:C1:9A:6A:42:45:68:80:B5:5C:6F:44:BA:59:66:16:D3
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 0A58
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/YJAl8MGaakJFaIC1XG9EullmFtM.roa
Signing time: Tue 07 Jun 2022 10:05:39 +0000
ROA not before: Tue 07 Jun 2022 10:05:39 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 59077
IP address blocks: 106.75.128.0/20 maxlen: 20
106.75.144.0/20 maxlen: 20
106.75.160.0/20 maxlen: 20
106.75.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2648 (0xa58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jun 7 10:05:39 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=609025F0C19A6A42456880B55C6F44BA596616D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:1f:9b:58:0b:e3:9b:1a:a9:41:a7:9d:60:
da:09:f6:1c:a2:dc:65:7b:83:f3:a1:10:77:ab:ff:
5b:ce:f4:33:9c:26:f9:c1:76:97:4d:b7:4b:32:6f:
79:58:b6:d5:78:e6:8c:94:83:6c:c9:09:5c:ee:c3:
1a:35:f4:5e:59:50:9d:7d:ad:5b:c1:2c:5b:94:1b:
96:e8:88:78:c0:05:5a:19:cc:d0:90:50:f2:1d:d4:
05:97:b0:ae:9b:aa:6c:72:0e:1d:96:4b:f4:12:9b:
ea:c0:37:fb:f2:a9:3f:5b:df:ba:3a:1b:4f:0a:63:
76:fd:99:f9:1a:58:80:7a:4b:68:02:40:89:05:50:
d1:e3:52:f9:a1:e7:3c:b9:57:e1:f6:d7:ae:88:3e:
c3:c0:c6:a3:d4:f6:c5:62:96:6a:ef:1a:32:a0:dc:
10:fd:48:3f:2f:02:24:6d:af:1c:49:eb:4c:1c:a5:
e8:90:b7:40:b3:fb:f0:64:47:68:8f:9c:6c:47:e1:
c6:06:e1:b8:ee:90:b8:2e:47:08:71:6b:24:9a:c9:
c7:84:16:20:34:51:f0:d3:d7:bd:8c:4e:5b:12:6b:
09:a5:a4:d2:15:1f:6f:93:47:6e:e6:d9:56:a9:6e:
d0:9a:68:50:1c:6f:5a:6c:09:3b:8d:bf:22:2a:53:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:25:F0:C1:9A:6A:42:45:68:80:B5:5C:6F:44:BA:59:66:16:D3
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/YJAl8MGaakJFaIC1XG9EullmFtM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.128.0/18
Signature Algorithm: sha256WithRSAEncryption
87:6b:0b:7f:0c:43:96:b5:80:a6:70:25:de:ff:8d:da:2f:40:
05:b2:14:48:b0:96:1c:c8:bf:70:23:94:15:56:59:32:03:29:
83:ce:22:09:af:8a:ba:f7:09:51:54:e8:76:d6:9e:eb:81:99:
7e:43:1d:ba:82:2d:25:a7:8b:1a:82:aa:81:3d:f3:63:13:a1:
d3:75:e5:55:4b:1d:02:ac:b4:f6:f4:d4:28:78:31:75:88:d2:
97:aa:0d:66:a9:27:68:a2:f4:0f:1a:f7:b2:8c:6d:56:0e:31:
76:40:63:05:aa:d5:21:a5:a9:73:4a:f0:0f:ec:74:56:59:46:
97:f5:5b:e2:f9:11:63:e1:3d:43:c5:d9:51:c6:4f:e5:c3:a5:
e9:f5:99:f9:54:f8:1e:e8:f2:8e:a7:8d:c4:54:a7:0c:05:f6:
50:70:f2:ad:ee:0a:2e:51:98:79:6a:80:10:32:95:77:a5:83:
99:3a:f2:c4:9f:25:28:2b:a6:db:90:10:e0:32:54:05:c3:f9:
23:b3:84:4c:ae:05:92:6b:6f:aa:50:c7:41:57:85:d8:53:b5:
1c:90:c9:ba:9a:f2:09:06:63:a7:fa:da:fc:55:24:8e:16:92:
40:32:8b:66:be:1d:16:8c:26:54:e4:35:f1:cd:0d:ab:f8:a9:
c4:fc:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org