Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/eEvF9T6q-yICGhdT_0NNjd1qW7c.roa
File: eEvF9T6q-yICGhdT_0NNjd1qW7c.roa (raw, json)
Hash identifier: vwGHivugHrIAqq7KUAmSbntGc6fKm88QrtNxc7Kl040=
Subject key identifier: 78:4B:C5:F5:3E:AA:FB:22:02:1A:17:53:FF:43:4D:8D:DD:6A:5B:B7
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 0A53
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/eEvF9T6q-yICGhdT_0NNjd1qW7c.roa
Signing time: Tue 07 Jun 2022 10:05:36 +0000
ROA not before: Tue 07 Jun 2022 10:05:36 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 23724
IP address blocks: 106.75.0.0/19 maxlen: 19
106.75.32.0/19 maxlen: 19
106.75.64.0/19 maxlen: 19
106.75.96.0/19 maxlen: 19
117.50.0.0/19 maxlen: 19
117.50.32.0/19 maxlen: 19
117.50.64.0/19 maxlen: 19
117.50.96.0/19 maxlen: 19
117.50.128.0/19 maxlen: 19
117.50.160.0/19 maxlen: 19
117.50.192.0/19 maxlen: 19
117.50.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2643 (0xa53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jun 7 10:05:36 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=784BC5F53EAAFB22021A1753FF434D8DDD6A5BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:af:6f:35:b2:3d:19:de:bf:ad:23:50:8c:c9:
4b:94:25:5b:f5:3f:5a:fc:c7:2f:45:73:2b:c4:80:
72:6f:3c:87:30:3e:29:75:1f:7f:70:0c:6d:05:01:
75:1f:68:9e:13:d5:3a:b5:62:d8:f8:25:b0:98:11:
6f:44:4d:6a:ab:dc:ff:97:95:8a:8c:5b:f5:f8:7b:
85:26:33:4b:e1:19:8d:29:b9:73:67:2a:c9:5d:e5:
23:d6:bf:77:db:84:d8:6d:7b:ae:1b:98:35:81:7f:
63:18:fe:59:14:27:3d:ec:72:14:12:ca:20:cd:33:
15:ab:5d:38:89:7f:2a:82:ef:7f:c9:06:2e:66:04:
0d:b3:ee:18:c3:e0:9b:4f:9e:34:55:ad:df:e8:6c:
26:08:6d:77:35:38:69:c1:ff:b8:6b:f4:96:e7:07:
20:1e:14:55:5d:a1:8d:fa:47:15:cb:79:64:ab:31:
be:94:a8:ae:1d:44:0d:31:27:90:ab:9e:00:ce:de:
14:58:85:d4:bc:71:c3:f7:a2:7e:01:84:db:7b:10:
19:48:e7:23:b5:9f:90:d6:92:94:1f:98:c3:c0:31:
85:e3:57:ff:39:9b:a3:d9:5f:6b:e0:36:85:ae:f7:
a7:9a:a9:a7:86:ed:ba:06:a2:11:77:c9:59:ce:6f:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:C5:F5:3E:AA:FB:22:02:1A:17:53:FF:43:4D:8D:DD:6A:5B:B7
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/eEvF9T6q-yICGhdT_0NNjd1qW7c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.0.0/17
117.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:9a:a3:05:df:ad:74:e2:cb:a8:e1:78:09:b2:75:94:c7:18:
b1:4f:84:20:3c:45:5d:44:c1:f9:bc:18:9f:33:b1:de:d8:a4:
81:08:28:9d:23:c2:ab:a9:72:a0:65:a0:85:2e:f3:f4:0d:58:
84:15:d6:0c:ae:ba:a4:eb:4e:d9:9c:d7:a4:24:6d:79:a7:26:
54:36:80:6d:71:07:70:33:a3:8b:8a:32:4d:78:7a:54:3f:ca:
43:d6:99:cf:da:ac:1b:d1:6d:6b:27:23:22:75:5c:55:ac:3f:
24:2e:99:84:26:9b:dc:e0:e1:49:f3:16:85:34:ae:a5:ca:21:
a6:bb:c6:71:89:7d:1b:d1:05:33:6c:bf:25:d6:7c:4b:e9:77:
c1:a1:9d:52:e7:b1:04:80:95:c8:b2:28:20:04:a2:59:d6:84:
cc:d6:91:fa:70:61:57:76:eb:88:7d:86:14:b6:1b:4e:ee:b4:
73:71:49:f8:b2:89:04:73:b2:94:91:d2:bb:6a:c3:25:cb:01:
c2:15:4f:2b:9b:ed:0e:2e:84:e4:26:0b:36:fa:a5:07:69:97:
5f:6c:18:1e:01:68:2b:0a:22:71:fc:92:e3:74:c3:9b:c3:d8:
f9:28:6d:98:06:41:cd:90:d2:ea:65:1e:41:dc:1b:b4:8e:a1:
24:a6:8a:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org