Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/mis0LDqf64FrmJiJCDaSPwe2_BE.roa
File: mis0LDqf64FrmJiJCDaSPwe2_BE.roa (raw, json)
Hash identifier: WlN6ugtv+2MQSNWbc0m62YbGq/nOk6gk3UBmFhm8DNE=
Subject key identifier: 9A:2B:34:2C:3A:9F:EB:81:6B:98:98:89:08:36:92:3F:07:B6:FC:11
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 0A57
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/mis0LDqf64FrmJiJCDaSPwe2_BE.roa
Signing time: Tue 07 Jun 2022 10:05:39 +0000
ROA not before: Tue 07 Jun 2022 10:05:39 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 58466
IP address blocks: 42.240.128.0/20 maxlen: 20
42.240.144.0/20 maxlen: 20
42.240.160.0/20 maxlen: 20
106.75.128.0/20 maxlen: 20
106.75.144.0/20 maxlen: 20
106.75.160.0/20 maxlen: 20
106.75.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2647 (0xa57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jun 7 10:05:39 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=9A2B342C3A9FEB816B9898890836923F07B6FC11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6c:bc:2b:07:d9:bb:3f:e5:c9:15:c8:7e:c5:
c0:68:89:47:f2:4b:34:31:b3:33:e7:0d:1d:1b:7a:
fa:07:22:ed:56:ad:bc:f3:5e:29:e5:71:7c:ef:75:
66:44:a5:ba:65:74:0d:0f:14:85:a0:42:bf:4c:23:
bc:51:34:e5:c2:3b:24:93:4f:fa:f6:59:94:d6:56:
e8:52:a0:06:9a:dc:08:c3:1f:80:07:a8:8e:74:13:
0d:3c:df:4f:fc:44:8d:77:29:6e:d8:6c:15:7e:a2:
8b:b0:82:45:ad:93:4f:30:c2:1d:7b:4b:1b:6a:ae:
f0:bc:f1:1e:1d:1e:2e:7f:57:30:58:c6:29:89:cf:
3c:f7:9b:e5:f8:6d:b2:68:d8:b2:96:3d:05:cb:91:
af:92:5b:eb:ca:47:1a:91:9b:92:7e:53:86:04:1e:
57:1f:c7:08:33:f4:bf:96:80:03:3f:ab:95:ac:ab:
c9:2b:db:35:14:12:28:ae:c1:50:12:f4:2b:72:ae:
de:fc:20:8d:4f:d1:8f:17:c3:65:68:64:a1:ee:7a:
99:c2:60:7c:70:df:7b:59:e0:32:2c:dd:4d:79:9f:
b2:e8:15:35:58:95:7d:71:60:4e:05:87:c5:15:3e:
be:36:e5:c1:72:9c:d5:47:27:66:44:92:65:de:00:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2B:34:2C:3A:9F:EB:81:6B:98:98:89:08:36:92:3F:07:B6:FC:11
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/mis0LDqf64FrmJiJCDaSPwe2_BE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.240.128.0-42.240.175.255
106.75.128.0/18
Signature Algorithm: sha256WithRSAEncryption
53:d4:a3:4d:18:a3:33:a2:d7:ac:3a:ab:d3:56:c3:13:4a:5c:
2b:58:84:3c:5f:eb:bd:68:06:8e:8f:a0:48:75:38:63:a1:37:
76:7b:2f:45:a6:04:10:fb:97:79:67:d4:9c:33:21:7f:7b:f0:
67:c6:fb:0a:00:ff:2a:dc:e0:ac:1b:3c:da:20:80:45:f7:3d:
d8:7b:ed:95:5a:2f:91:a2:14:66:5d:be:e4:ab:21:0e:d4:8a:
68:53:70:30:ec:7b:4f:7f:e6:b3:f1:f7:97:d6:ce:3a:88:d5:
69:46:c9:cd:a0:59:96:ab:08:2a:99:ac:42:45:50:6e:90:23:
9c:90:76:f5:5d:b9:c1:0f:88:cd:0f:42:d6:f4:3a:6b:33:2b:
e5:ae:42:ee:03:cd:84:a5:e9:d0:0c:d5:14:3c:8f:60:a1:31:
78:60:9a:64:ac:c5:5d:d1:4c:62:f0:3e:8d:e3:0f:de:3e:c2:
6b:a9:19:95:26:c3:1b:21:3c:2f:65:2c:d7:31:94:e2:57:31:
d4:45:2e:cf:ae:3d:e2:c8:e9:8a:52:b3:ca:9c:05:0f:ba:44:
da:ee:d4:07:40:65:81:3a:1e:3a:4e:61:2f:ba:bb:06:57:4b:
ac:01:18:ba:81:0a:bc:04:fa:ed:cf:28:40:ab:a5:8f:dc:d1:
8c:c9:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org