Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/tQfjT4deDjIvNtHI69KP7Lps5Q8.roa
File: tQfjT4deDjIvNtHI69KP7Lps5Q8.roa (raw, json)
Hash identifier: rRKUzKzbA+LQQwNAWaroIjSnkuRNiYYDmVnhv6k8vAA=
Subject key identifier: B5:07:E3:4F:87:5E:0E:32:2F:36:D1:C8:EB:D2:8F:EC:BA:6C:E5:0F
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 7A
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/tQfjT4deDjIvNtHI69KP7Lps5Q8.roa
Signing time: Mon 10 May 2021 04:34:05 +0000
ROA not before: Mon 10 May 2021 04:34:05 +0000
ROA not after: Thu 28 Apr 2022 06:28:58 +0000
asID: 23724
IP address blocks: 106.75.0.0/19 maxlen: 19
106.75.32.0/19 maxlen: 19
106.75.64.0/19 maxlen: 19
106.75.96.0/19 maxlen: 19
117.50.0.0/19 maxlen: 19
117.50.32.0/19 maxlen: 19
117.50.64.0/19 maxlen: 19
117.50.96.0/19 maxlen: 19
117.50.128.0/19 maxlen: 19
117.50.160.0/19 maxlen: 19
117.50.192.0/19 maxlen: 19
117.50.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: May 10 04:34:05 2021 GMT
Not After : Apr 28 06:28:58 2022 GMT
Subject: CN=B507E34F875E0E322F36D1C8EBD28FECBA6CE50F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:d3:23:a4:f0:f2:19:83:e3:5a:0d:9a:17:
15:cd:2c:6a:27:57:4d:0e:09:3b:8f:39:33:87:8c:
13:4f:46:9d:fa:88:33:26:21:cd:b2:89:34:80:30:
6f:62:24:09:60:e1:74:53:68:f0:36:83:73:8a:d4:
12:62:b6:92:97:d4:ab:2b:95:51:f7:9c:a1:a0:f3:
79:8e:1d:ea:d3:b6:72:d5:09:49:94:67:64:28:88:
b8:8c:85:f1:77:44:b4:fa:c4:ca:bd:4a:78:62:78:
e9:76:3c:e2:63:f2:2a:f2:ba:d6:a8:a8:51:14:38:
aa:61:96:15:65:bb:b1:1d:82:28:e5:90:6c:d1:cb:
50:23:da:20:bb:a8:c3:76:c5:75:98:7d:36:49:4c:
57:7b:dd:a7:89:4d:53:8f:3c:b3:89:b0:8c:36:25:
38:bc:e5:f4:f5:2f:99:f2:fd:b1:f9:53:7b:e7:39:
b5:e5:8e:41:ae:57:62:ca:d1:2c:db:9c:6c:b4:5b:
3b:17:eb:2f:b3:47:18:eb:fb:df:2a:5b:6c:25:d1:
f7:52:04:58:9a:12:eb:48:00:0e:44:69:75:30:94:
60:ab:e6:24:33:1f:a6:06:79:28:a1:7a:10:41:ca:
a6:2e:6a:23:f9:ac:e9:56:93:ba:b0:57:99:cc:27:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:07:E3:4F:87:5E:0E:32:2F:36:D1:C8:EB:D2:8F:EC:BA:6C:E5:0F
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/tQfjT4deDjIvNtHI69KP7Lps5Q8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.0.0/17
117.50.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:39:33:ab:fa:1e:5d:91:6e:4a:3e:d0:09:fe:9c:a4:58:ed:
67:70:34:7e:81:1a:eb:da:33:46:10:ca:54:db:86:eb:43:4d:
79:ca:ff:d8:64:8c:50:b3:7c:cb:be:86:bc:96:3f:68:f6:ca:
cc:24:0b:69:44:fe:ff:78:64:a7:2c:87:42:05:65:75:cb:dd:
15:4c:11:2a:67:10:c0:0a:68:0e:c7:27:53:21:28:2b:23:94:
29:38:39:9b:53:b0:70:3f:aa:5d:35:1c:f7:2a:2e:68:e6:fb:
da:7e:ca:2e:a4:c0:12:41:ca:ab:49:6b:53:05:56:68:89:9d:
91:d1:94:e2:b5:82:c5:05:48:95:01:0d:48:a5:fc:68:42:1d:
2d:21:d4:f5:e6:80:30:f2:46:ab:f7:d2:4e:72:9c:cf:38:63:
1b:b5:15:70:3f:2d:2d:0d:13:f8:12:e9:b7:b6:a9:8c:e7:36:
b1:96:0f:45:95:09:65:38:52:45:e8:cd:17:52:e2:3f:03:be:
fe:de:66:9e:33:08:6f:2d:79:60:f6:2c:78:16:0b:7a:04:c8:
54:5c:63:d2:3d:2c:ce:f6:3e:ba:46:65:ee:79:83:46:a7:d3:
ec:8d:43:89:e3:17:55:aa:f2:4e:d3:f2:a9:67:a6:aa:84:3b:
fd:c1:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org