Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/P9IcEFxx8rbS2gm13GeV2psTmEs.roa
File: P9IcEFxx8rbS2gm13GeV2psTmEs.roa (raw, json)
Hash identifier: nL1k1lZ8DOcTXOOUkB3yME1uMWuXNOQAvsmlTx8X0Qk=
Subject key identifier: 3F:D2:1C:10:5C:71:F2:B6:D2:DA:09:B5:DC:67:95:DA:9B:13:98:4B
Certificate issuer: /CN=EB99479D36FDF26A88696045970E50154123586C
Certificate serial: 06F8
Authority key identifier: EB:99:47:9D:36:FD:F2:6A:88:69:60:45:97:0E:50:15:41:23:58:6C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65lHnTb98mqIaWBFlw5QFUEjWGw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/P9IcEFxx8rbS2gm13GeV2psTmEs.roa
Signing time: Fri 09 Jul 2021 07:07:06 +0000
ROA not before: Fri 09 Jul 2021 07:07:06 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 131530
IP address blocks: 103.43.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB99479D36FDF26A88696045970E50154123586C
Validity
Not Before: Jul 9 07:07:06 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=3FD21C105C71F2B6D2DA09B5DC6795DA9B13984B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:2c:28:b5:ee:c3:42:ef:ca:ad:4e:d9:db:
f1:c6:43:01:4a:e0:16:a9:90:bd:d4:64:ab:3d:01:
bd:96:5a:4c:c2:01:0c:aa:00:71:7e:c8:7f:f6:8f:
be:f3:13:76:4a:b2:98:b1:27:18:fe:b4:bc:29:0c:
c3:21:76:9b:ca:71:ce:af:b8:0f:1f:81:4c:af:06:
a2:a9:2a:26:39:3f:fa:93:e2:9c:7a:ee:2b:e6:3c:
21:04:f7:01:dd:83:58:a3:26:74:e2:4d:53:37:25:
b6:b9:5a:e3:dc:b1:1b:b3:eb:a3:1e:2b:58:e7:48:
d8:4f:ac:a6:6b:b9:74:6f:74:de:fc:b9:f1:5b:0e:
e2:29:ca:58:8c:de:6a:bd:37:39:8c:11:66:83:3d:
68:85:b8:f0:3e:46:71:39:8e:7d:99:97:42:29:66:
9a:bc:ef:d9:88:54:e8:b2:84:ad:98:fd:59:76:de:
8c:6a:5d:64:a8:f2:a9:9e:7e:c6:01:e5:f4:2c:33:
f4:eb:01:83:b9:78:62:a8:39:c3:0a:88:55:0e:cb:
ee:87:a5:ce:22:a2:c0:cd:d1:02:67:a6:96:6e:df:
fe:a2:34:aa:62:14:b9:30:a0:d4:c7:c3:1f:09:16:
4b:93:e1:8b:07:8d:b2:0b:7c:3f:26:d3:30:4e:6d:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:1C:10:5C:71:F2:B6:D2:DA:09:B5:DC:67:95:DA:9B:13:98:4B
X509v3 Authority Key Identifier:
keyid:EB:99:47:9D:36:FD:F2:6A:88:69:60:45:97:0E:50:15:41:23:58:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/65lHnTb98mqIaWBFlw5QFUEjWGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65lHnTb98mqIaWBFlw5QFUEjWGw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/P9IcEFxx8rbS2gm13GeV2psTmEs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
26:d2:ee:dc:12:15:5f:9c:1e:51:b3:08:1e:1a:04:a3:dc:bb:
32:e1:c0:e5:1b:2a:f5:ea:22:56:68:fa:a5:dc:77:b3:18:07:
d5:6d:17:f6:90:e5:87:aa:88:c8:1a:75:d9:1e:9a:c5:92:dc:
12:d4:b4:cf:bb:e1:4a:20:3e:66:a4:17:e9:13:b3:f4:9d:24:
03:f9:1c:70:6f:bc:da:0d:ff:8b:f0:78:aa:64:9a:80:c0:d9:
d0:ae:72:c5:55:02:5f:0a:fc:4f:34:a8:ae:45:cc:b3:b4:8e:
9d:8c:4d:fe:25:3c:cf:e2:13:67:fa:19:59:3d:c0:0a:77:2b:
b5:cb:ba:92:a4:44:dc:a7:75:f2:7e:be:87:ad:0d:d1:2c:a9:
02:71:40:21:38:18:fd:56:b8:6b:fc:63:b1:0f:1a:99:e2:e9:
5c:44:0a:fc:a7:be:99:76:94:04:45:99:19:1a:5d:8f:02:ea:
7a:3a:cf:f5:f6:cf:37:8a:00:cd:0e:b8:1b:32:ac:4f:b6:8e:
91:d6:6d:30:c0:48:97:a5:3a:67:f9:39:6a:01:82:b1:2c:4a:
23:e0:3a:6e:c4:83:d8:53:52:5a:90:2f:08:20:fa:0b:60:8e:
2d:99:2b:88:86:28:0a:ee:be:5b:4f:51:44:96:63:7c:1f:c4:
d2:fd:20:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org