Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/MitPiZbW1rBIqPJpwRSx9A-N7GY.roa
File: MitPiZbW1rBIqPJpwRSx9A-N7GY.roa (raw, json)
Hash identifier: 5oO6Ze74Nyl9EypS7+JJ2ae7ozjhNQKKVHcwlpMdc+E=
Subject key identifier: 32:2B:4F:89:96:D6:D6:B0:48:A8:F2:69:C1:14:B1:F4:0F:8D:EC:66
Certificate issuer: /CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Certificate serial: 03
Authority key identifier: 7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/MitPiZbW1rBIqPJpwRSx9A-N7GY.roa
Signing time: Wed 01 Jun 2022 07:09:22 +0000
ROA not before: Wed 01 Jun 2022 07:09:22 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 59066
IP address blocks: 103.43.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Validity
Not Before: Jun 1 07:09:22 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=322B4F8996D6D6B048A8F269C114B1F40F8DEC66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:60:06:ee:60:36:8c:e9:90:15:d0:b4:d3:
6a:8c:ce:0b:ce:b8:67:e9:bb:4f:41:b7:8b:5e:30:
94:7c:c9:d0:d2:dc:86:d4:f2:90:ac:02:12:7a:cb:
d9:3f:4b:d4:2e:82:c5:00:d9:c4:9b:96:c6:28:29:
cb:4f:ca:84:c8:fa:e6:f0:fb:fc:1d:10:8a:df:93:
9f:00:71:5d:c9:fa:87:a6:c6:dd:bb:b0:83:5c:52:
51:b8:65:e4:dc:ed:29:c8:b1:a8:44:9c:d3:20:b9:
1a:60:7e:fc:d0:50:e5:dd:78:65:cc:39:50:a4:47:
17:9e:60:40:f3:07:5d:fa:c0:fa:6c:bb:2c:58:f8:
91:93:8d:07:f6:6c:c4:68:cb:59:df:c0:1c:7f:8d:
3d:9b:c3:c7:33:f6:9a:17:1f:81:bc:ed:1d:33:77:
5a:36:f4:35:a7:11:25:54:b1:a4:5e:7e:94:3b:8a:
94:5a:93:68:6b:bf:28:ec:53:a8:1c:6e:4a:21:7b:
7e:bc:4d:37:98:86:56:8b:27:67:9f:90:99:1f:66:
2d:c6:1a:40:13:b7:86:f2:96:9a:98:70:69:59:82:
c6:33:7c:a2:8f:67:5b:8a:f6:6d:c9:1b:3a:5a:b1:
f9:47:dc:b9:a2:b8:db:03:09:8d:da:6b:c7:fe:0c:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:4F:89:96:D6:D6:B0:48:A8:F2:69:C1:14:B1:F4:0F:8D:EC:66
X509v3 Authority Key Identifier:
keyid:7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/MitPiZbW1rBIqPJpwRSx9A-N7GY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
13:a9:a4:81:b9:ca:62:47:36:d6:ba:e4:fe:b5:90:81:b8:32:
71:43:76:52:23:bb:19:6f:f5:c8:43:7a:96:77:e8:78:4d:4e:
6b:d5:bf:39:51:94:b8:7e:41:5f:64:60:9e:43:dd:4a:0d:80:
f2:ef:14:e9:f0:d9:59:c6:ba:3d:e1:17:de:2b:b9:47:70:8a:
83:11:ba:e6:0a:9b:0a:40:54:2e:2a:9a:61:42:75:0e:9d:da:
2a:51:62:90:af:19:58:4c:5b:21:43:e4:5a:34:e4:8e:a8:70:
b8:3b:e6:08:6c:32:0b:24:66:a4:2b:45:b6:ca:e8:52:c6:c0:
a5:22:24:0e:1d:ac:86:3d:e4:1c:0d:d4:5c:d1:e3:b7:bf:c1:
12:5e:5a:1d:e1:b1:26:39:c3:00:dd:6e:7a:9a:cc:70:9c:29:
83:b5:30:d0:51:54:76:94:be:61:7e:7e:53:cd:6f:f5:f1:9f:
66:ad:70:91:b4:af:89:9c:12:a5:1f:52:7f:93:26:ef:b7:84:
c0:ef:20:0d:0a:c0:11:42:b9:80:f4:09:4e:39:ed:40:30:9d:
05:6e:e2:1f:6a:73:7f:69:c3:e7:f0:7a:17:ec:5b:76:fe:26:
23:2c:28:87:c4:2a:d7:64:4a:be:24:54:cd:b0:2a:01:f0:c6:
0b:78:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org