Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/xujJTe5TDA_3ibfJSaZbRp2ThX4.roa
File: xujJTe5TDA_3ibfJSaZbRp2ThX4.roa (raw, json)
Hash identifier: V4xqAKLqiBW1moMSdctif2A/yn8BGfd+toy79z4Og80=
Subject key identifier: C6:E8:C9:4D:EE:53:0C:0F:F7:89:B7:C9:49:A6:5B:46:9D:93:85:7E
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 0A59
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/xujJTe5TDA_3ibfJSaZbRp2ThX4.roa
Signing time: Tue 07 Jun 2022 10:05:39 +0000
ROA not before: Tue 07 Jun 2022 10:05:39 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 136958
IP address blocks: 42.240.128.0/20 maxlen: 20
42.240.144.0/20 maxlen: 20
42.240.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2649 (0xa59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jun 7 10:05:39 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=C6E8C94DEE530C0FF789B7C949A65B469D93857E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:6a:7c:80:82:6c:0b:a9:9e:21:06:fd:f0:
2b:93:17:20:e7:70:a1:33:9b:47:9a:77:67:60:d9:
19:f6:2a:55:0e:84:2f:14:40:c0:07:29:76:1c:89:
8a:68:9d:1c:31:d1:0b:9d:f6:6a:07:ac:d6:15:3a:
ad:ac:8c:53:59:df:2b:0d:ea:7f:3b:61:16:17:a2:
85:30:9c:0b:f4:57:79:74:38:64:65:69:8c:00:d4:
57:88:df:97:db:41:f1:cf:4d:0b:83:22:d6:d4:66:
6f:7e:9a:d7:d2:bc:dc:58:31:39:96:eb:95:73:9a:
50:02:f9:e8:73:3b:96:39:22:80:9b:c1:5a:a1:24:
9f:7e:33:1d:65:9e:3d:86:3a:01:f0:20:3b:35:ee:
9f:06:e2:cc:a2:bc:d8:e2:26:d2:83:fd:11:22:ac:
f1:aa:3a:75:1f:52:9c:41:35:80:0d:bc:38:07:51:
49:5c:76:fb:7b:12:97:0b:98:29:72:94:a6:a8:ee:
e4:e2:3d:45:c7:46:bb:75:1f:c7:4e:7c:52:0b:94:
b0:d0:b2:cc:4d:ae:92:b3:34:58:ce:fc:4a:15:36:
35:c7:4d:56:03:d6:63:98:be:6b:3b:b5:dd:20:84:
b8:3c:20:45:55:a4:28:f3:4f:f5:0e:0f:e5:3d:60:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:C9:4D:EE:53:0C:0F:F7:89:B7:C9:49:A6:5B:46:9D:93:85:7E
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/xujJTe5TDA_3ibfJSaZbRp2ThX4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.240.128.0-42.240.175.255
Signature Algorithm: sha256WithRSAEncryption
9e:43:6f:e2:3a:68:a0:fc:be:fc:c0:02:e7:39:fb:11:e9:a6:
57:d6:3d:54:f1:91:59:7e:4c:08:dc:a9:dd:e4:4e:ad:3f:d7:
9c:5e:a6:8d:aa:fa:44:2e:df:3c:d5:fd:45:15:90:d9:52:06:
a7:1d:6a:1d:10:d1:d1:74:6a:d7:e5:f8:9b:3a:b5:c9:aa:65:
d8:f4:83:0f:fd:5d:ff:2a:ad:9a:5b:6f:8c:67:af:2b:e7:44:
61:7f:85:48:48:f7:97:0a:da:5d:23:40:80:1e:f4:2a:6c:cd:
64:e0:25:a3:31:b5:8f:20:a7:31:e2:d2:35:c4:5f:38:ef:ec:
4a:6c:09:c4:b3:8e:9a:79:23:5c:53:6b:c3:f8:7e:db:93:06:
ea:03:08:b4:84:02:68:86:71:e6:42:0f:98:d6:d0:df:2d:7a:
c0:42:94:8a:8c:31:65:4f:ee:7c:c3:28:39:32:56:9e:a3:a4:
c0:db:a8:b9:4c:e4:85:f8:db:70:e5:19:ef:04:3a:5d:8a:2c:
65:8e:7c:49:d6:bc:9d:a2:11:19:10:9f:cd:32:1d:aa:9c:71:
4d:11:ab:c7:05:d2:1e:f2:f1:68:8e:3a:28:d4:08:82:04:4e:
f9:3a:0f:df:19:23:e2:12:c7:b2:cb:3c:a8:3c:23:9b:03:bd:
54:ef:cb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org