Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/ikr2oGS0x7J4E3dqcsANuDV_mDA.roa
File: ikr2oGS0x7J4E3dqcsANuDV_mDA.roa (raw, json)
Hash identifier: zwy5jFlvsVAvMFNW/jqysx+xm8cTkamdypH4xq5bQyg=
Subject key identifier: 8A:4A:F6:A0:64:B4:C7:B2:78:13:77:6A:72:C0:0D:B8:35:7F:98:30
Certificate issuer: /CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Certificate serial: 06E3
Authority key identifier: 7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/ikr2oGS0x7J4E3dqcsANuDV_mDA.roa
Signing time: Thu 18 May 2023 07:25:31 +0000
ROA not before: Thu 18 May 2023 07:25:31 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 131482
IP address blocks: 103.43.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Validity
Not Before: May 18 07:25:31 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=8A4AF6A064B4C7B27813776A72C00DB8357F9830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:04:26:be:49:24:ca:8c:39:f9:23:25:9e:c9:
f3:d2:ab:fb:e7:08:13:1e:03:02:5e:2a:4e:4e:2c:
f5:6d:6a:9b:d2:94:ec:1c:06:fc:4e:5a:e5:16:ef:
c9:99:b4:61:a2:41:5e:51:6d:2a:6e:14:4f:01:7c:
ce:94:f9:f3:09:61:8f:12:4b:ba:64:77:b6:e3:7b:
43:27:6f:69:81:98:45:04:22:0b:a5:a8:49:fe:03:
d1:4b:6c:32:7a:0a:46:6e:42:6f:d8:17:43:35:f0:
62:97:a1:ed:fd:50:81:67:ec:9a:af:15:55:4d:1e:
14:a5:98:2c:f3:ed:9a:a8:4d:25:28:c4:aa:26:b8:
57:78:a8:36:28:30:f3:97:90:96:6c:85:b3:07:e4:
68:34:c0:a2:29:39:64:7c:27:bd:90:7e:d6:40:03:
49:ca:f6:0c:1e:1d:a0:49:c2:69:9c:72:f7:86:80:
11:5c:9e:2e:0c:eb:d9:c5:77:9f:ea:a0:ab:ef:6c:
8c:bd:9a:58:92:8b:aa:68:63:e7:4d:c4:eb:3f:7e:
5f:eb:da:e8:4b:a7:e5:3d:b4:5a:49:18:fc:79:61:
d5:a1:3f:43:5d:53:20:e0:22:a9:fe:e6:4c:dd:30:
84:2f:9b:c7:ca:5d:fe:37:8a:c7:e6:0a:d9:a4:fb:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4A:F6:A0:64:B4:C7:B2:78:13:77:6A:72:C0:0D:B8:35:7F:98:30
X509v3 Authority Key Identifier:
keyid:7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/ikr2oGS0x7J4E3dqcsANuDV_mDA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
00:3f:c5:29:2e:cf:8f:cc:28:43:28:7e:6c:bd:ff:f3:93:1b:
3a:64:4f:ba:69:4c:70:37:30:cc:86:2b:fe:29:f9:e4:9b:12:
c8:10:04:18:cd:ca:4c:75:d5:04:1c:0a:ba:a6:5b:6a:b3:02:
26:2c:27:91:68:5d:07:e1:96:39:85:18:d3:a7:44:16:cc:0e:
61:2d:f4:0b:81:5e:4d:79:c1:9d:2a:0f:f7:9f:17:b1:07:f3:
2f:30:1a:ab:ca:67:d0:68:04:81:3c:43:b6:90:a3:65:e6:f6:
53:69:7e:cf:6f:7e:85:bc:8a:f3:be:cb:bd:1d:c9:d8:86:97:
59:7c:0e:75:e3:46:21:d1:d5:17:c7:d6:b6:44:0f:97:f1:07:
2a:71:22:ce:62:2b:0c:25:8f:24:16:7c:e5:92:13:79:d6:b1:
7c:7c:d0:ea:ea:31:51:46:77:1d:4a:f2:54:89:fb:a9:fe:39:
bf:b8:aa:10:e6:d2:58:0c:d6:c6:8b:15:44:c9:4a:4f:0a:ee:
fd:a0:74:3c:43:d4:7b:a7:52:31:66:c5:02:7f:47:e6:59:5c:
ad:9a:a1:b8:76:04:29:03:9e:67:45:4f:26:43:23:e5:16:1a:
27:a7:9c:62:92:29:a3:21:de:81:08:d3:fe:25:fd:b9:b6:dd:
b1:f3:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org