Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/Z8NaGd-E28CRNMRn--tE1NeGhAM.roa
File: Z8NaGd-E28CRNMRn--tE1NeGhAM.roa (raw, json)
Hash identifier: Q9qtxrX/GHeoJhZzgimrD7s8/VQFH0lhj8wUvL/jnI0=
Subject key identifier: 67:C3:5A:19:DF:84:DB:C0:91:34:C4:67:FB:EB:44:D4:D7:86:84:03
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 0759
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Z8NaGd-E28CRNMRn--tE1NeGhAM.roa
Signing time: Thu 14 Apr 2022 06:48:18 +0000
ROA not before: Thu 14 Apr 2022 06:48:18 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 4811
IP address blocks: 106.75.208.0/20 maxlen: 20
113.31.96.0/20 maxlen: 20
113.31.112.0/20 maxlen: 20
113.31.144.0/20 maxlen: 20
113.31.160.0/20 maxlen: 20
113.31.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: Apr 14 06:48:18 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=67C35A19DF84DBC09134C467FBEB44D4D7868403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:ef:18:61:7a:3e:d3:4a:b1:73:71:30:0e:
cf:36:ec:36:fc:dc:26:b8:02:5a:85:58:ee:82:b9:
53:ac:97:37:b3:a2:a8:37:a3:c5:db:57:27:61:dc:
f8:51:46:bc:68:34:4f:d4:3d:02:67:82:69:9d:7a:
1c:fc:89:c4:f8:fe:7a:a4:db:5f:70:5e:35:85:d7:
95:a0:d8:d0:7c:0b:6b:a8:8b:c9:a1:2a:69:8f:85:
55:e0:fd:0e:c3:ee:65:b9:21:90:b2:13:c0:32:1e:
a2:4e:4f:24:de:e5:7d:0a:76:b0:fb:c3:43:93:2a:
70:6c:d2:95:a6:47:2f:dc:10:75:2e:cb:dc:2f:32:
58:8a:88:02:f2:49:84:27:f8:a2:8d:a9:54:6b:a3:
51:06:60:71:7c:7c:1b:8a:08:64:91:5c:64:2b:2b:
9a:3c:90:6d:33:c0:ce:88:4f:5d:91:25:56:c4:33:
66:a0:f1:e6:36:e8:b0:66:c0:87:1b:9e:a5:f6:3e:
1f:6e:2e:e5:12:89:99:d9:af:41:90:b1:98:c3:33:
79:8b:1f:2d:f2:5a:8a:2a:18:0e:74:f6:10:e7:cb:
55:6f:11:5b:25:b1:13:68:a2:22:ce:3e:60:bd:06:
c1:24:e5:6a:a4:46:f1:d6:18:fe:4d:ef:b3:15:1b:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C3:5A:19:DF:84:DB:C0:91:34:C4:67:FB:EB:44:D4:D7:86:84:03
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Z8NaGd-E28CRNMRn--tE1NeGhAM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.208.0/20
113.31.96.0/19
113.31.144.0-113.31.191.255
Signature Algorithm: sha256WithRSAEncryption
d6:20:2a:32:0e:26:49:ed:e6:57:75:d3:4e:c0:3d:56:7b:cb:
71:49:95:8b:5a:ca:ee:d1:f2:00:05:25:51:12:4f:a2:0c:49:
92:f1:9e:75:29:4f:25:48:16:60:02:79:8b:d9:27:2d:20:14:
15:6a:1f:5c:b9:a1:d0:39:20:4d:8c:be:42:41:29:2d:a8:e4:
c5:de:c1:4f:32:d1:8e:20:8a:b0:76:77:d4:dc:b4:85:c2:10:
c9:2f:d2:b3:6b:cf:5a:65:fa:ea:e1:ec:ed:f3:10:69:b0:8a:
ec:eb:82:df:57:56:fa:8d:28:10:72:2c:07:32:a8:38:32:94:
b7:ea:53:b0:35:b8:5d:eb:dd:32:e2:41:bf:3e:3b:4b:b7:8f:
ed:21:3b:55:fa:0f:04:cc:f1:f2:57:b5:6a:58:26:31:12:8a:
40:9c:d4:4b:9f:45:36:bc:3f:89:7d:31:c7:9e:cc:a8:cb:20:
6f:a6:61:1c:39:32:7f:38:e9:af:8a:33:c0:3e:bb:c9:7a:55:
c6:ae:26:00:ec:f2:fe:15:ae:e2:54:08:45:5c:de:ed:77:93:
06:69:b6:43:1d:82:97:81:d2:cf:6f:4b:e9:68:a0:27:df:f0:
6e:81:51:6a:31:57:25:d9:75:fe:84:63:8f:f7:fd:c5:80:68:
01:67:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org