Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/iCZiSSUvei8o6nXyl-KbY-KU428.roa
File: iCZiSSUvei8o6nXyl-KbY-KU428.roa (raw, json)
Hash identifier: RjgdBBxtqqZoXnJPBQz8os+VXCXs5fUdwG12jN9hVB4=
Subject key identifier: 88:26:62:49:25:2F:7A:2F:28:EA:75:F2:97:E2:9B:63:E2:94:E3:6F
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 0759
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/iCZiSSUvei8o6nXyl-KbY-KU428.roa
Signing time: Thu 14 Apr 2022 06:48:17 +0000
ROA not before: Thu 14 Apr 2022 06:48:17 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 135377
IP address blocks: 106.75.192.0/24 maxlen: 24
106.75.193.0/24 maxlen: 24
106.75.194.0/24 maxlen: 24
106.75.195.0/24 maxlen: 24
106.75.196.0/24 maxlen: 24
106.75.197.0/24 maxlen: 24
106.75.198.0/24 maxlen: 24
106.75.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: Apr 14 06:48:17 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=88266249252F7A2F28EA75F297E29B63E294E36F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:79:05:28:e6:46:f5:52:d7:2a:7d:bf:c6:
7e:49:53:b6:23:cb:cb:56:8a:5e:a3:31:b6:3e:76:
e9:dd:7d:52:dd:75:2a:c0:62:e9:78:11:2e:dd:f2:
e2:6d:73:d5:91:77:26:96:6a:46:51:29:f0:94:45:
68:7b:ad:02:58:75:65:d5:a3:59:ab:b1:66:9e:6f:
e2:00:19:29:f6:2b:b4:0c:be:be:fc:97:99:4e:2a:
5a:86:fe:4b:51:72:56:69:7a:af:95:a8:0f:54:33:
2f:7d:a3:02:ce:fd:3a:91:c2:98:16:07:e5:76:ca:
51:89:6f:2c:7f:0f:b5:a1:49:91:58:2a:24:b8:2d:
7b:63:16:50:e9:e3:6c:cf:84:0e:47:69:59:83:30:
41:f3:78:ee:73:65:7d:d0:8d:dd:65:3e:b9:da:cb:
70:b2:6d:61:10:d7:cd:8c:4b:3f:1e:82:ce:13:71:
f7:e7:de:f5:78:54:64:15:fd:31:2f:16:f8:b6:80:
f2:b0:38:f2:8a:25:e0:ca:cf:44:74:2e:de:b0:44:
33:2b:9e:93:76:97:12:c8:08:6e:e5:08:55:04:ee:
f6:5f:a7:93:eb:ec:d9:b2:0d:e1:ed:c2:a4:fe:08:
c3:95:bb:ee:7b:ce:42:93:de:b3:55:c6:87:97:15:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:26:62:49:25:2F:7A:2F:28:EA:75:F2:97:E2:9B:63:E2:94:E3:6F
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/iCZiSSUvei8o6nXyl-KbY-KU428.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.192.0/21
Signature Algorithm: sha256WithRSAEncryption
d4:0b:15:e1:f5:0b:62:45:3a:d9:49:a2:c0:8e:65:ba:d8:bd:
c3:48:d4:eb:d8:80:3e:13:81:b8:9c:1b:32:b2:83:c0:37:81:
7d:88:c5:f5:06:25:9c:ab:5f:10:2f:d1:06:c5:cf:d1:f6:ea:
19:e3:6a:7f:16:b2:85:b7:04:0f:0f:23:12:22:b8:db:d7:3f:
4f:5f:6a:9a:38:7d:52:e1:fe:e4:4b:69:64:5e:9c:f7:ad:26:
8d:4e:be:90:80:ca:7d:46:f4:0d:9e:ce:b0:01:8c:50:fe:31:
ab:37:b4:41:c6:6e:08:8c:ec:39:8f:b3:34:1e:76:62:bf:48:
21:59:27:67:42:22:f0:5c:00:b7:eb:17:0f:59:c4:9b:e8:ab:
4d:c8:98:8a:f6:eb:b1:ff:a5:5f:94:a7:cf:4b:32:3f:6f:b4:
f7:ae:a1:25:d2:59:b9:21:6f:b6:33:45:25:34:60:c3:8e:67:
a0:f4:97:1d:04:bb:6b:fb:a3:c9:8d:e5:f2:dc:7c:7d:f1:b9:
e1:22:c6:f9:c7:d6:49:3c:d7:e2:ba:e3:9b:10:e7:f3:37:b2:
e4:57:79:0b:93:92:fd:8b:43:69:1a:6e:54:39:37:2b:17:39:
d3:44:d0:a7:b6:74:00:be:1b:41:4d:4f:85:b5:b8:a9:b2:2b:
ab:95:a6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org