Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/KlLJus8x-efzCRQo-_T0WxG7KNA.roa
File: KlLJus8x-efzCRQo-_T0WxG7KNA.roa (raw, json)
Hash identifier: aId5ypKyma9kwpHzG1N7qF4kmNMmJAaNszD46pi2AEE=
Subject key identifier: 2A:52:C9:BA:CF:31:F9:E7:F3:09:14:28:FB:F4:F4:5B:11:BB:28:D0
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0CFF
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/KlLJus8x-efzCRQo-_T0WxG7KNA.roa
Signing time: Wed 16 Nov 2022 11:13:40 +0000
ROA not before: Wed 16 Nov 2022 11:13:40 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 996
IP address blocks: 43.254.128.0/22 maxlen: 24
103.203.100.0/22 maxlen: 24
103.236.232.0/22 maxlen: 24
115.31.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3327 (0xcff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Nov 16 11:13:40 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=2A52C9BACF31F9E7F3091428FBF4F45B11BB28D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:23:97:e2:b7:d1:49:97:bd:1a:0d:42:46:
ae:fb:20:a7:f3:cd:4e:9d:9f:a1:87:51:03:ad:fd:
42:2e:55:f4:c0:e6:2e:08:3d:ad:3e:cd:48:9a:c7:
83:bd:6e:49:4b:d5:42:34:8f:4f:52:5f:4a:18:88:
03:8c:3b:8c:d6:18:4c:d7:69:f9:30:9e:7d:eb:0a:
37:85:8f:94:b2:c9:59:98:10:5a:c2:82:51:6a:5f:
32:7a:ee:2d:4e:66:33:b7:08:e4:03:18:de:1d:4d:
3c:06:cf:54:54:1f:46:c4:1a:47:9d:c0:cb:45:63:
99:22:ba:d1:9e:4c:e2:ad:5e:19:cd:23:11:bd:bf:
a4:df:d3:c4:c6:2c:24:24:73:64:d1:cb:0d:cd:b2:
14:47:72:6e:94:99:b2:ef:4c:87:91:f1:41:e5:f3:
8a:dd:50:0f:3b:6b:b8:cd:b4:d3:f1:45:09:2e:91:
78:1b:6a:98:1f:8f:62:46:36:39:fe:b6:76:8c:a5:
89:78:d8:1a:16:bd:e6:90:da:38:7d:4b:86:f0:d5:
8d:d2:3d:3b:44:68:cc:82:42:23:ed:44:3f:d0:39:
d7:dc:3c:99:4a:46:dc:bc:1c:77:e5:fc:a7:8f:44:
7f:e9:9d:2e:fa:f5:29:85:95:80:c2:ce:ad:76:2a:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:52:C9:BA:CF:31:F9:E7:F3:09:14:28:FB:F4:F4:5B:11:BB:28:D0
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/KlLJus8x-efzCRQo-_T0WxG7KNA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.128.0/22
103.203.100.0/22
103.236.232.0/22
115.31.68.0/22
Signature Algorithm: sha256WithRSAEncryption
dd:95:b1:ff:e4:96:53:98:03:68:ab:60:d0:7b:0c:8e:eb:be:
81:87:55:cc:bd:ae:11:9a:5c:70:e5:d8:69:f8:6e:55:4c:1a:
a1:57:48:cc:ff:39:1c:66:af:17:19:60:95:4c:46:fa:d1:d2:
04:5b:7f:dd:7b:27:11:bf:76:84:b6:38:e9:9d:60:89:84:07:
fe:c2:f5:1d:50:be:73:a8:79:cb:79:6f:34:39:8a:57:99:40:
db:5b:d0:cf:d9:68:87:db:04:f6:4f:e0:6c:b8:0d:12:a1:53:
93:25:a9:86:db:fa:cd:4f:3e:a8:bc:90:27:f4:97:38:3e:86:
73:4b:cf:e2:9e:59:ea:fe:8d:16:d9:f3:5c:98:e5:62:c8:f0:
63:82:55:11:d1:bb:95:47:b9:63:75:f8:68:67:62:f3:60:54:
55:23:9d:f2:86:45:2f:37:ee:ca:c5:60:9e:81:ff:37:74:07:
91:2f:b7:0f:fd:61:5e:fc:e7:23:ba:90:d4:fd:e1:d0:52:15:
63:e0:3c:df:77:47:14:66:42:5e:c1:88:45:a4:e1:f2:c4:58:
33:99:0d:24:cf:4c:ea:d4:3a:b7:8b:b2:5c:fd:b3:9c:f7:b5:
53:74:bf:33:30:3e:6e:7a:54:9c:aa:9b:ac:a6:f2:fb:f3:1f:
25:8c:65:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org