Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/jCYgNeCZx4yFph3EqV1SQn-nvfM.roa
File: jCYgNeCZx4yFph3EqV1SQn-nvfM.roa (raw, json)
Hash identifier: dE/LcPiv/6zVhNmTC8W46zR+B+rgUlyKRxM/Gjoa8SI=
Subject key identifier: 8C:26:20:35:E0:99:C7:8C:85:A6:1D:C4:A9:5D:52:42:7F:A7:BD:F3
Certificate issuer: /CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Certificate serial: 04
Authority key identifier: 7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/jCYgNeCZx4yFph3EqV1SQn-nvfM.roa
Signing time: Wed 01 Jun 2022 07:09:22 +0000
ROA not before: Wed 01 Jun 2022 07:09:22 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 131482
IP address blocks: 103.43.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Validity
Not Before: Jun 1 07:09:22 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=8C262035E099C78C85A61DC4A95D52427FA7BDF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:e5:4d:7a:7e:e5:53:ed:5f:e4:52:6e:c1:
9b:c9:f3:19:8b:63:da:b3:af:66:45:5f:66:b6:fd:
f1:5b:a6:e9:b0:9d:99:08:f9:1b:e8:2d:af:ce:5e:
23:88:6d:c5:f9:2e:b0:5b:7b:2c:b1:52:7f:88:f8:
b9:9d:c7:40:88:dd:01:e7:0b:8a:eb:3d:e2:23:f4:
9e:41:a7:31:6a:7a:c8:aa:96:3b:bc:5f:a9:f2:c7:
a6:83:ae:01:1f:93:fd:80:31:b6:c7:26:e0:7d:87:
e2:87:34:75:26:d0:68:e5:7f:ac:fa:c0:c4:98:2d:
c1:df:94:85:49:e9:5d:92:f5:2e:e6:38:93:c8:9b:
f3:7f:86:d3:1f:8c:e3:a9:3b:b5:d3:60:e5:3e:e9:
03:02:1f:1b:cb:e0:6d:62:92:c7:7a:a5:20:62:68:
cf:2c:bc:2f:dd:56:86:d1:16:7d:f1:43:4b:bb:e9:
3a:06:6c:08:67:ec:53:cd:6c:d7:b9:b9:74:5f:10:
c3:84:eb:49:57:94:6f:f0:1c:4b:3e:cf:ca:89:cc:
25:00:15:d0:e3:f9:f7:fd:9c:15:cb:73:fa:15:83:
7b:f7:27:8d:3b:8d:aa:a3:33:cd:8b:e0:7d:e5:ec:
8c:cf:00:84:2b:b5:5d:49:e5:bf:a1:87:7f:c1:dc:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:26:20:35:E0:99:C7:8C:85:A6:1D:C4:A9:5D:52:42:7F:A7:BD:F3
X509v3 Authority Key Identifier:
keyid:7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/jCYgNeCZx4yFph3EqV1SQn-nvfM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:03:3a:46:b3:53:60:50:ac:59:d6:a6:a7:3e:ae:98:05:a4:
d4:f6:35:bb:33:50:d3:71:b1:97:45:e3:98:a6:9d:47:f3:42:
62:a6:27:8a:54:4a:9e:84:f0:80:26:5e:04:bf:1b:3f:54:c2:
9a:9b:20:f0:68:5b:6c:85:81:b9:b3:8d:78:f0:61:9b:16:1f:
e0:2b:57:e5:ae:48:1f:3a:36:f3:2e:e9:7f:d3:bf:58:21:0e:
4c:d4:9c:8c:f8:6e:f2:90:55:43:ba:a2:d2:8e:38:df:de:17:
cf:59:c2:d9:2c:91:a5:df:8d:8b:d6:29:a5:02:05:41:02:a9:
ae:55:81:95:74:f7:37:61:72:dd:79:a8:7c:99:4b:ca:f6:00:
a0:45:b2:a0:95:0f:ce:d7:8f:60:40:37:8d:75:6c:b4:4e:48:
eb:2f:8d:75:8b:7c:4f:e2:41:c1:ed:28:30:f1:47:5d:80:52:
a4:81:5f:f7:96:ef:dd:da:33:be:d8:df:2f:19:40:19:ed:d0:
68:19:92:99:31:ce:33:7e:c4:58:b0:1c:ba:ff:06:ad:2a:9d:
fc:5d:d3:06:b0:8d:46:b6:85:09:39:f6:b5:fd:be:50:01:91:
88:39:ce:c7:84:bf:42:94:9d:74:88:3f:db:b0:9a:aa:ab:63:
5c:d3:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org