Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/yP1KvjkNkwD4kKfrUDXhIIhhcnA.roa
File: yP1KvjkNkwD4kKfrUDXhIIhhcnA.roa (raw, json)
Hash identifier: NJUTMOCNmpTWCDmWfqvvV3hAKp44vh6a84Yx4dH2SeI=
Subject key identifier: C8:FD:4A:BE:39:0D:93:00:F8:90:A7:EB:50:35:E1:20:88:61:72:70
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 45
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/yP1KvjkNkwD4kKfrUDXhIIhhcnA.roa
Signing time: Sat 08 May 2021 05:42:30 +0000
ROA not before: Sat 08 May 2021 05:42:30 +0000
ROA not after: Thu 28 Apr 2022 06:28:58 +0000
asID: 4812
IP address blocks: 106.75.224.0/20 maxlen: 20
106.75.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: May 8 05:42:30 2021 GMT
Not After : Apr 28 06:28:58 2022 GMT
Subject: CN=C8FD4ABE390D9300F890A7EB5035E12088617270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:ab:ae:f3:30:8b:78:60:18:c9:1c:49:f6:
92:e6:23:52:0d:44:0d:57:0d:f8:19:fd:e9:37:f6:
bc:c2:f7:db:19:7f:88:ec:01:7d:3b:32:bd:c3:bf:
e0:ba:09:c4:75:ee:66:c5:01:3c:0b:5c:80:c3:db:
b6:3f:dd:02:04:55:08:be:11:09:fe:25:97:17:ad:
53:f6:f4:ea:b4:50:bf:57:4a:af:40:66:ee:e8:96:
d1:ad:0b:d5:fc:f8:49:7e:33:0d:17:52:2b:25:ba:
a8:dc:b7:d9:05:82:45:cf:90:52:80:1c:85:8a:95:
62:60:ac:c1:36:d4:b3:97:c9:d4:43:25:8f:64:6e:
8e:68:dd:30:8d:3f:86:eb:7f:20:61:a5:da:16:78:
b2:3c:74:45:ed:aa:1a:97:15:8e:25:11:97:d7:f2:
76:39:78:a6:20:e1:a1:1f:6a:6a:52:2d:46:07:b2:
26:d2:3b:18:79:14:30:40:a1:0b:3f:fd:ec:e9:e1:
2e:30:e6:df:97:05:a1:4a:59:7c:8c:ea:37:af:10:
46:c6:9e:fc:80:b4:d5:fd:7b:e4:f1:55:18:18:f5:
64:fc:a3:ea:3b:9a:8e:1e:a9:55:03:71:8e:ba:01:
ea:e8:d2:c3:c6:d6:36:83:b8:5f:5c:23:4d:ff:b9:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:4A:BE:39:0D:93:00:F8:90:A7:EB:50:35:E1:20:88:61:72:70
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/yP1KvjkNkwD4kKfrUDXhIIhhcnA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.224.0/19
Signature Algorithm: sha256WithRSAEncryption
72:02:30:61:f0:57:65:eb:f2:c8:a8:50:b2:13:73:97:05:b9:
b4:d4:41:a8:b9:e2:52:41:cd:1b:24:98:e4:68:bc:e2:fa:2f:
cb:f5:13:89:23:56:30:f9:3d:9c:ee:71:d8:d0:c4:77:e8:1b:
d5:0f:3f:ff:da:81:fc:6a:5a:4a:6c:92:d4:eb:ed:28:4b:46:
a8:36:ac:ae:de:c0:2b:af:74:50:5f:ca:d5:d0:59:6b:b9:30:
e8:da:36:c2:d2:05:cd:80:b5:05:03:9a:34:70:b9:7a:e9:87:
1c:8b:14:fd:00:af:c6:6b:ff:ea:ff:35:a2:a0:b2:9f:54:43:
a5:e9:4a:13:83:b5:66:0d:58:38:a0:60:1e:d3:be:ed:32:38:
70:9e:d4:91:3c:cd:e3:49:9b:2b:6f:e2:1c:0e:ba:a6:f6:50:
dd:40:4b:44:95:54:06:f3:09:da:0a:8b:fa:ce:05:ee:5f:ab:
97:c7:b4:b0:96:e6:12:f9:7b:be:cb:8a:c8:41:b8:56:d4:8e:
e4:27:53:b5:38:a7:f1:82:7c:2c:dc:4b:0a:c6:15:7f:97:99:
76:ec:af:6c:5f:5a:8a:cc:e5:ac:da:71:c2:dd:e8:d0:87:88:
b8:04:13:23:31:db:37:e9:88:5b:ff:bb:5f:19:0f:ce:2c:68:
d2:d1:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org