Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/tBFJgjEuvTjhbP73W8VlaJOv2vU.roa
File: tBFJgjEuvTjhbP73W8VlaJOv2vU.roa (raw, json)
Hash identifier: WaTd7x/RIr93XhECoCkibyvPoI0i1XPm8IAzZ4QSsQ4=
Subject key identifier: B4:11:49:82:31:2E:BD:38:E1:6C:FE:F7:5B:C5:65:68:93:AF:DA:F5
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 0759
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/tBFJgjEuvTjhbP73W8VlaJOv2vU.roa
Signing time: Thu 14 Apr 2022 06:48:18 +0000
ROA not before: Thu 14 Apr 2022 06:48:18 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 17621
IP address blocks: 106.75.208.0/20 maxlen: 20
106.75.224.0/20 maxlen: 20
106.75.240.0/20 maxlen: 20
113.31.96.0/20 maxlen: 20
113.31.112.0/20 maxlen: 20
113.31.144.0/20 maxlen: 20
113.31.160.0/20 maxlen: 20
113.31.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: Apr 14 06:48:18 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B4114982312EBD38E16CFEF75BC5656893AFDAF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:c4:8b:43:40:99:24:84:31:5a:a5:42:69:
84:a1:85:73:fe:5c:e1:e0:86:0b:9b:9d:cb:55:9c:
f6:ff:7e:71:0e:33:15:38:5c:dc:38:66:9e:65:30:
31:1a:0d:af:0c:6c:81:f9:aa:15:66:bb:16:53:8a:
d1:da:0a:5a:40:f0:a0:fa:c7:88:a9:6d:fd:50:47:
69:8f:d9:e0:85:47:7c:0f:d6:c0:68:bc:fc:7e:5e:
53:ae:86:2c:8d:0c:21:d5:0c:62:f7:de:34:49:e8:
24:6d:35:ac:05:18:7a:67:9c:35:be:94:6a:3a:56:
ea:f5:1c:83:cc:f1:5c:b6:e1:4f:df:4b:d0:8b:a5:
46:f9:46:6c:4c:11:43:86:98:f5:10:5f:e6:b2:ce:
fb:52:cf:fd:48:7e:63:49:92:12:94:8a:b2:e6:da:
0b:6c:a4:39:aa:c0:31:b8:3f:c7:92:d8:79:57:37:
9b:ce:f9:79:d3:e3:58:d3:6d:5f:90:d9:3b:7b:c3:
8f:71:ad:c5:d6:2f:93:97:d1:e4:2f:ab:2a:ac:1b:
7a:25:94:be:2a:8a:68:2c:da:88:8f:fa:f7:72:b8:
22:f7:73:4c:a6:36:11:8e:60:c3:04:61:2b:21:03:
c6:8d:18:0a:36:a1:63:c5:40:94:df:16:5a:09:b9:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:49:82:31:2E:BD:38:E1:6C:FE:F7:5B:C5:65:68:93:AF:DA:F5
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/tBFJgjEuvTjhbP73W8VlaJOv2vU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.208.0-106.75.255.255
113.31.96.0/19
113.31.144.0-113.31.191.255
Signature Algorithm: sha256WithRSAEncryption
2e:2e:55:ea:c8:21:f1:31:47:6b:1a:56:a6:1b:a2:b9:d6:f2:
d6:ec:ef:4b:fb:f2:f0:e7:a0:30:02:34:8c:33:0c:d4:2b:48:
b2:1d:f4:d0:dd:c4:3a:7b:f3:df:8a:7e:e0:eb:1f:b3:34:95:
48:41:14:58:d5:84:ba:95:2d:ec:45:82:c5:e6:75:d5:3f:68:
2d:12:ba:56:7b:e6:9c:86:e6:b0:6a:5a:be:e5:f4:c9:76:c7:
a2:02:64:d4:36:3e:60:e1:e1:0e:06:80:e6:d5:33:06:2a:04:
5a:9f:ad:d8:a3:73:25:ed:9e:e3:7f:b7:e9:4a:7e:16:29:04:
05:39:bb:fe:b8:7c:d9:e5:5b:60:7c:9f:54:d6:9a:20:dc:2f:
10:a8:0b:31:19:0d:b0:6c:00:48:87:94:1b:32:2b:ad:f3:79:
5b:a8:b8:4f:0d:e6:de:f9:cb:8d:99:8a:91:7e:f1:ed:fd:36:
c4:97:a2:b3:f5:77:a0:b0:87:7e:ba:87:ab:fd:bc:c5:cd:f0:
5a:22:c8:ae:c9:54:43:b8:32:ff:53:c4:99:b6:b7:15:ad:c5:
d9:d8:0f:87:ba:41:5d:43:ab:f4:80:db:87:3b:a5:30:39:25:
9e:01:2f:38:ee:c6:28:d5:f3:c9:be:0c:7f:92:ac:58:18:39:
85:8b:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org