Route Origin Authorization
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131302e302f32332d3233203d3e2034353338.roa
File: 3130332e3136352e3131302e302f32332d3233203d3e2034353338.roa (raw, json)
Hash identifier: HAdLYVmVo7RrErCCZWCw0A6UZAcmCHHHNhAGB1kJo2o=
Subject key identifier: 7E:96:18:CD:1C:39:53:7C:98:06:C4:15:1C:82:FB:FB:8E:4B:04:DD
Certificate issuer: /CN=A91E5D610000/serialNumber=9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43
Certificate serial: 31D5E4769E9E7558BDD968014DF6E1E4F9318E8C
Authority key identifier: 9A:AF:2E:FC:0F:89:9F:EE:1E:C4:D9:9E:1C:42:C8:D4:41:64:DA:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mq8u_A-Jn-4exNmeHELI1EFk2kM.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131302e302f32332d3233203d3e2034353338.roa
Signing time: Wed 13 Mar 2024 01:29:31 +0000
ROA not before: Wed 13 Mar 2024 01:24:31 +0000
ROA not after: Wed 12 Mar 2025 01:29:31 +0000
asID: 4538
IP address blocks: 103.165.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d5:e4:76:9e:9e:75:58:bd:d9:68:01:4d:f6:e1:e4:f9:31:8e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000/serialNumber=9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43
Validity
Not Before: Mar 13 01:24:31 2024 GMT
Not After : Mar 12 01:29:31 2025 GMT
Subject: CN=7E9618CD1C39537C9806C4151C82FBFB8E4B04DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:5d:f3:8a:fe:f8:9e:66:94:b1:41:30:b2:
ba:a9:cd:6d:35:48:c0:29:90:f3:9b:54:94:b7:68:
d2:52:33:a9:79:12:ac:a9:77:c1:6c:a5:a9:1d:a1:
04:8f:31:52:7c:e9:20:cc:c7:5b:28:c0:40:00:0f:
68:ac:8c:e7:c3:00:6b:53:e7:7c:e8:24:42:39:4c:
44:80:bf:10:b3:e6:43:a2:18:f0:04:76:03:f7:92:
3e:e2:36:54:b8:8f:a1:fd:5c:3a:43:84:69:70:3c:
03:ab:47:25:cd:43:70:fc:8f:21:5c:e6:ff:03:62:
3d:d4:13:dc:2e:15:d6:03:93:92:3a:25:d8:70:2b:
f1:0c:b3:13:17:6d:e6:86:bb:ef:02:6b:0d:e9:ac:
51:60:b5:40:18:3b:e1:bd:c0:53:55:8c:a6:e6:0c:
da:28:c5:ea:2a:28:c3:17:0f:85:1d:7d:a7:e1:ee:
97:0f:bc:fc:d5:c8:bc:3f:5c:78:31:78:e6:fb:35:
b1:29:65:0e:f0:0f:88:7d:75:77:85:28:05:b6:29:
12:86:ca:96:25:b8:47:44:a4:21:76:4a:c7:a4:0e:
12:1c:f7:5a:5d:7d:0a:4d:6c:69:52:99:ea:96:3e:
12:e8:84:8e:03:13:de:41:15:a9:6c:a0:98:d7:54:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:18:CD:1C:39:53:7C:98:06:C4:15:1C:82:FB:FB:8E:4B:04:DD
X509v3 Authority Key Identifier:
keyid:9A:AF:2E:FC:0F:89:9F:EE:1E:C4:D9:9E:1C:42:C8:D4:41:64:DA:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/9AAF2EFC0F899FEE1EC4D99E1C42C8D44164DA43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mq8u_A-Jn-4exNmeHELI1EFk2kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/3130332e3136352e3131302e302f32332d3233203d3e2034353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.110.0/23
Signature Algorithm: sha256WithRSAEncryption
21:19:3d:c8:99:75:bd:5c:9a:6c:40:49:fb:92:8a:61:ce:0f:
e9:da:6d:40:c5:b3:4a:c3:c7:a1:e7:20:8c:b3:93:d6:45:f0:
7b:82:5d:ed:4f:bb:4e:c1:62:45:91:02:b0:57:f8:ad:e0:cd:
ed:d1:b7:5f:50:b1:61:50:05:8f:62:d2:53:dc:5c:35:a7:e5:
e5:2c:ea:09:9c:bc:ed:e2:dd:3a:a5:e9:8a:cf:39:2d:d0:5c:
16:1c:c4:11:86:96:5e:b7:45:49:6c:9d:db:22:55:e5:4b:41:
49:2e:3b:9e:43:e8:a3:ce:35:94:80:c8:d8:f5:0a:46:1b:a7:
28:81:ac:71:03:72:2e:b7:af:68:e8:7f:29:f8:1c:e3:fa:3f:
c5:3b:0f:e7:b4:48:d6:62:5e:24:16:97:26:88:78:51:55:15:
08:a6:a3:f5:e0:f8:f9:28:6b:ad:0d:0d:bd:d1:3f:a4:72:8e:
fc:3d:ae:e7:91:7c:66:4c:8c:47:19:7f:c6:9a:1f:19:17:fe:
80:b5:ed:23:8c:3d:34:56:0d:be:0d:f2:aa:2b:f2:90:c3:09:
23:1d:06:34:a1:3f:60:dc:cc:dc:b5:46:45:13:d0:90:96:f2:
5e:b7:07:e6:c2:95:6c:83:4f:c0:16:82:2f:64:0d:c5:25:c5:
b8:2b:c4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org