Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/xBSDfuSlZEJ5Wn5yL6mg0amGfuc.roa
File: xBSDfuSlZEJ5Wn5yL6mg0amGfuc.roa (raw, json)
Hash identifier: xd1m1LNGcJ1hSwE2MoVNJ8tr4Mu5RMFEZDDIyoLrApI=
Subject key identifier: C4:14:83:7E:E4:A5:64:42:79:5A:7E:72:2F:A9:A0:D1:A9:86:7E:E7
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 03A3
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/xBSDfuSlZEJ5Wn5yL6mg0amGfuc.roa
Signing time: Mon 11 Oct 2021 08:48:04 +0000
ROA not before: Mon 11 Oct 2021 08:48:04 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 58466
IP address blocks: 42.240.128.0/20 maxlen: 20
42.240.144.0/20 maxlen: 20
42.240.160.0/20 maxlen: 20
106.75.128.0/20 maxlen: 20
106.75.144.0/20 maxlen: 20
106.75.160.0/20 maxlen: 20
106.75.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931 (0x3a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: Oct 11 08:48:04 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=C414837EE4A56442795A7E722FA9A0D1A9867EE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:00:82:cb:c4:f3:44:86:36:f3:3c:66:e7:
40:b2:7b:9e:3d:f6:9a:eb:16:be:c4:20:33:48:11:
ed:7e:3d:6b:fb:b3:18:40:08:43:8d:fb:6d:88:8b:
a3:bc:8e:2c:c9:a0:42:ff:c1:0d:8d:ff:f1:aa:41:
ae:c6:02:da:43:e4:95:28:69:f0:84:4c:17:d1:9a:
fa:4b:d6:d0:a9:bb:6d:8b:22:05:c1:32:18:bf:7d:
01:bb:b0:3f:88:f3:63:b9:85:d9:fe:58:c9:0e:6b:
b4:c6:c5:21:a9:f6:c5:9b:37:5e:ee:a3:8c:66:3e:
be:12:50:6c:65:8a:3f:58:fb:c6:d7:e2:bf:e3:75:
1c:db:0b:8d:19:f3:18:93:a3:dd:19:e5:3c:c4:57:
2f:b5:50:9f:df:21:ba:0f:0d:0b:2e:a0:a9:fc:66:
1a:fe:0a:e7:09:d0:13:5a:e7:09:32:20:76:19:91:
b8:70:da:5a:ad:a9:40:6f:fc:0e:e8:56:76:da:db:
ef:66:88:02:3a:3e:38:f2:de:c7:1f:e1:1a:62:14:
ab:17:ea:a7:8c:d0:d9:e5:6f:ec:e7:5c:19:71:90:
83:43:19:97:de:e3:d9:9e:7e:e0:70:02:6c:58:1f:
e4:bd:7c:1d:97:2b:87:33:ed:ed:87:ed:ee:5e:86:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:83:7E:E4:A5:64:42:79:5A:7E:72:2F:A9:A0:D1:A9:86:7E:E7
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/xBSDfuSlZEJ5Wn5yL6mg0amGfuc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.240.128.0-42.240.175.255
106.75.128.0/18
Signature Algorithm: sha256WithRSAEncryption
d1:8e:8a:29:8d:a5:9a:2c:58:2c:d6:0a:01:1f:20:a4:e8:74:
ae:bf:2d:aa:f8:b0:65:71:57:ee:0b:6b:90:d2:12:20:f5:ba:
a8:98:8b:da:1c:34:75:0f:a8:1f:7a:e5:d4:45:e2:55:25:be:
17:4b:d7:f0:84:3e:2c:f4:f1:17:38:78:f4:e5:4e:5c:a2:01:
76:eb:07:52:d7:58:cd:d8:f0:47:90:ca:80:ed:36:cb:d1:2a:
7f:b0:7e:83:1d:2a:b3:39:a7:6a:af:1c:d9:8e:d8:ec:a8:bb:
1a:f5:90:01:ee:fe:16:e6:db:eb:f9:d7:8f:4d:e5:10:9f:8c:
73:2d:a9:48:7e:c8:34:d5:53:20:8e:f0:f7:76:82:fd:17:72:
e8:91:ff:73:6a:bc:fa:3c:b3:22:fa:d3:a2:07:f5:00:89:f6:
79:43:18:84:df:92:76:53:a9:56:7a:bf:ba:0e:e6:56:f7:41:
d3:3b:bf:53:fb:66:a9:bd:6a:7d:88:6d:91:83:0e:b0:09:38:
e1:c3:de:0e:1a:83:94:64:04:d1:cc:eb:e0:34:52:75:40:51:
3c:18:4d:07:07:68:29:83:b1:85:19:fa:43:60:de:4d:95:25:
2d:c1:c6:5a:b7:34:88:0e:46:75:be:c3:36:ef:07:8f:f4:56:
a4:a5:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org