Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/L6XEn4f6nUNtPxpLFkRxmViWFXQ.roa
File: L6XEn4f6nUNtPxpLFkRxmViWFXQ.roa (raw, json)
Hash identifier: O116m1dEVGvDH5DKRIyGQFiYm/d59i7dxAsMD7qi2xc=
Subject key identifier: 2F:A5:C4:9F:87:FA:9D:43:6D:3F:1A:4B:16:44:71:99:58:96:15:74
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0C5B
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/L6XEn4f6nUNtPxpLFkRxmViWFXQ.roa
Signing time: Sun 16 Oct 2022 06:51:06 +0000
ROA not before: Sun 16 Oct 2022 06:51:06 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 996
IP address blocks: 43.254.128.0/22 maxlen: 24
101.49.128.0/19 maxlen: 24
101.49.160.0/19 maxlen: 24
101.49.240.0/20 maxlen: 24
103.203.100.0/22 maxlen: 24
103.236.232.0/22 maxlen: 24
115.31.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3163 (0xc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Oct 16 06:51:06 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=2FA5C49F87FA9D436D3F1A4B1644719958961574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:cc:a2:2e:f6:4f:61:5a:b8:9b:61:d8:05:
97:e3:86:f0:c0:20:a6:11:39:5a:ec:7c:6c:9c:27:
76:9a:9c:b8:1f:a3:cb:43:fb:d2:a4:2b:69:5d:77:
5e:e6:f4:74:b0:71:fa:43:61:78:a4:b1:28:4b:e9:
59:5f:3a:92:e4:04:f0:04:ee:2c:0f:b9:24:6d:70:
42:53:3c:97:5d:53:ce:b6:96:71:7f:af:60:a8:83:
6f:62:fe:ae:d3:1e:43:5f:5b:44:cc:4c:2f:23:24:
78:a9:8c:8c:3c:ab:89:5d:6c:28:5d:5f:6e:8e:1a:
4c:d8:a0:c0:c3:51:82:62:f0:a4:c4:48:6a:2d:f8:
92:0d:fd:35:e9:da:09:bb:07:f7:bc:7b:75:ac:7b:
b9:f8:d5:4d:62:1a:ce:97:52:5e:78:8e:78:9c:37:
3b:6a:da:37:bd:06:91:ae:02:de:29:b5:6b:a3:8c:
c0:fc:2d:8e:05:f5:da:ec:56:bc:08:44:be:88:45:
11:b2:09:cf:55:18:3b:4e:99:1f:ab:4a:ee:7d:d8:
cb:42:a9:b2:3f:d6:05:56:56:ab:3f:f6:1f:b8:88:
71:19:d8:fb:bd:22:f2:43:29:40:cd:99:12:da:42:
b9:ef:39:e7:14:61:a3:94:d2:28:12:ad:f6:46:a1:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A5:C4:9F:87:FA:9D:43:6D:3F:1A:4B:16:44:71:99:58:96:15:74
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/L6XEn4f6nUNtPxpLFkRxmViWFXQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.128.0/22
101.49.128.0/18
101.49.240.0/20
103.203.100.0/22
103.236.232.0/22
115.31.68.0/22
Signature Algorithm: sha256WithRSAEncryption
dd:7a:7f:e8:d0:a4:d0:e2:e8:16:b8:ad:4a:b6:65:0a:0f:59:
6b:98:48:4d:5a:09:87:0c:d6:f5:74:d9:05:40:03:bb:ee:d5:
a2:19:27:c4:dc:d3:36:cb:fa:43:5a:27:1e:e3:21:9b:eb:cf:
bf:56:07:49:3e:ec:c7:79:ab:82:31:4b:1e:f4:07:12:76:4d:
09:11:b2:cf:cb:cb:d6:a6:1e:c4:13:b4:36:47:a6:27:0c:cf:
1b:62:5a:52:ea:05:5b:2b:a8:d9:bc:87:4d:f0:02:b9:a2:e0:
db:bb:df:45:a4:e5:dc:14:bf:d3:75:d8:39:d9:2c:dc:bf:64:
8e:bb:03:f4:4b:b6:3f:c0:d1:8e:9d:24:8e:64:06:80:19:58:
91:11:82:e1:1c:81:66:79:e8:55:91:06:0f:67:7e:82:01:e0:
f2:b6:b5:9d:23:41:c6:2c:23:8f:42:94:b5:a5:43:22:1e:f0:
3b:68:31:6c:25:7e:0f:19:61:c8:45:da:13:f5:ab:7a:5a:c0:
49:7c:73:aa:6e:95:f7:68:f3:90:c1:b4:d2:98:45:7b:d0:82:
65:20:cf:70:91:d4:7f:55:96:0c:cd:d7:8b:a7:57:5c:6b:45:
dc:67:b4:c9:c3:1f:62:e6:02:e7:9a:85:75:3f:fc:f1:ba:75:
7d:a9:19:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org