Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/D4djtBSAb37NGTRZBrIUvsHrDsc.roa
File: D4djtBSAb37NGTRZBrIUvsHrDsc.roa (raw, json)
Hash identifier: /XA+hEPkg/HBBDQxJL110QgbKSvpWXiVE3nbg9svhFE=
Subject key identifier: 0F:87:63:B4:14:80:6F:7E:CD:19:34:59:06:B2:14:BE:C1:EB:0E:C7
Certificate issuer: /CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Certificate serial: 05
Authority key identifier: 7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/D4djtBSAb37NGTRZBrIUvsHrDsc.roa
Signing time: Wed 01 Jun 2022 07:09:23 +0000
ROA not before: Wed 01 Jun 2022 07:09:23 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 131530
IP address blocks: 103.43.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Validity
Not Before: Jun 1 07:09:23 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=0F8763B414806F7ECD19345906B214BEC1EB0EC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:3a:cd:70:b2:19:13:b8:c9:ae:fd:54:dd:
43:28:7c:13:73:cc:c0:95:30:d2:9c:8d:14:ed:d7:
90:fd:eb:3e:9e:3e:66:9d:d9:74:4c:81:62:b8:63:
82:d1:4a:ae:29:04:25:79:22:f7:9d:a0:03:04:21:
19:7e:e4:44:8d:50:ae:df:1f:c0:7a:4b:79:2d:c3:
d6:d3:79:90:89:7b:06:d1:47:24:25:a2:d0:ac:ff:
cf:58:93:db:21:3b:2a:48:ce:3d:38:7b:9f:a1:1f:
92:79:fc:99:37:cb:54:c7:42:bd:b3:8f:84:ce:1f:
63:1d:89:79:24:a7:62:c2:36:83:3c:5a:9d:98:21:
0b:60:40:69:91:a5:21:f7:37:aa:1d:3c:52:a6:4e:
26:de:2a:b5:e3:26:21:94:71:92:ba:3b:b0:ad:bc:
9a:57:14:d7:aa:f6:39:75:1e:86:f3:f2:a4:01:07:
22:6c:22:39:44:d7:b9:cc:de:a4:ea:73:ce:eb:df:
f9:e8:fe:1a:6d:30:cb:a1:96:54:52:d0:3f:45:34:
3f:81:75:2d:7f:a5:30:0d:2f:af:a1:e1:50:a6:98:
d9:06:45:5e:10:0b:6a:59:aa:16:8f:3f:cd:a8:e4:
e6:f4:c5:41:94:d9:6a:b2:3d:85:83:dd:82:fe:82:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:87:63:B4:14:80:6F:7E:CD:19:34:59:06:B2:14:BE:C1:EB:0E:C7
X509v3 Authority Key Identifier:
keyid:7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/D4djtBSAb37NGTRZBrIUvsHrDsc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
28:10:4a:1e:5e:74:8d:cf:e8:6e:95:1a:b2:f7:a6:37:35:05:
94:9c:64:f6:65:95:82:f7:e9:33:54:fe:49:f1:bc:a3:a8:99:
c1:f6:55:c7:65:00:da:a1:7a:f7:6a:6d:19:ba:7f:67:ae:32:
06:e3:3b:8a:0a:96:f5:e7:e2:2f:cd:75:7e:3e:29:d8:61:04:
8b:59:10:fc:4e:b7:76:04:47:18:19:d0:41:4e:ac:ff:ee:a5:
48:40:49:48:58:7e:b5:33:3a:a4:f3:b9:7d:ff:b9:8c:5f:47:
d8:6d:89:a9:dd:e6:59:bb:40:ab:50:79:77:a4:bf:3e:3a:1d:
f0:59:17:e5:57:86:1d:51:a0:0e:63:52:c1:71:ee:7d:f7:ca:
bf:66:05:e6:9a:6d:8f:2d:75:51:a7:a4:94:a3:c1:b3:02:1e:
31:78:0e:ea:ff:66:5b:88:3b:d1:13:8a:a3:df:33:65:5a:0b:
4b:b7:33:98:c4:9e:ad:b3:c0:1a:af:c3:04:b9:57:8c:8d:ed:
95:d2:02:6c:86:b1:d7:61:79:85:e0:42:13:89:b8:38:e6:da:
e5:4f:73:b5:8b:ea:0d:a2:e7:1d:bf:85:24:39:97:6f:24:42:
30:bb:71:f7:87:63:29:f6:1e:a6:1e:84:bc:85:a3:22:d1:d1:
51:d2:d1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org