Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/rtWQWkNzdmM7X4cgcVVh0l6Nwcw.roa
File: rtWQWkNzdmM7X4cgcVVh0l6Nwcw.roa (raw, json)
Hash identifier: GH/OShse8GQ4IEPWkcEUIqoGm88NyQuvgij1K2K17yc=
Subject key identifier: AE:D5:90:5A:43:73:76:63:3B:5F:87:20:71:55:61:D2:5E:8D:C1:CC
Certificate issuer: /CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Certificate serial: 0CA7
Authority key identifier: 7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/rtWQWkNzdmM7X4cgcVVh0l6Nwcw.roa
Signing time: Wed 13 Mar 2024 01:23:30 +0000
ROA not before: Wed 13 Mar 2024 01:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 59066
IP address blocks: 103.43.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3239 (0xca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Validity
Not Before: Mar 13 01:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AED5905A437376633B5F8720715561D25E8DC1CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:e1:b7:94:2a:c5:1b:af:53:0f:36:93:c3:
5e:8b:df:c4:0c:97:09:b1:e6:34:9e:db:98:cb:2a:
fe:2a:1b:db:ec:fb:e4:c3:e8:cb:94:17:48:9e:2a:
5a:26:b9:a5:5b:27:c1:2d:1c:52:dd:bd:66:5f:51:
a0:d7:71:09:6a:18:c4:b0:99:ab:3a:78:f9:ea:4a:
30:39:8b:5e:8c:86:62:85:99:07:da:11:1d:bd:65:
06:37:dd:ca:e6:7a:d5:07:a7:67:15:97:91:25:1d:
11:b9:1f:f4:d8:fc:ce:c8:0d:28:43:32:b4:85:85:
bb:51:4d:e0:aa:2e:c5:97:01:00:87:82:90:12:78:
eb:29:02:19:b8:1b:04:aa:c3:32:1f:fc:c4:fc:bb:
1b:cc:c7:7d:35:f2:0f:2c:b0:5f:2a:32:85:32:39:
75:7b:b9:30:19:ba:e4:f0:a7:c2:a8:70:aa:60:b6:
c9:59:b6:d8:2d:f8:b1:d5:18:3f:f6:57:52:4d:a9:
14:ab:1b:4e:fa:55:73:3a:96:15:bc:ff:b9:3e:47:
6b:61:a4:80:29:f9:e1:86:18:5d:38:79:e9:5f:8e:
52:c5:aa:9b:21:cf:f3:38:33:ec:f2:ab:76:3e:7e:
35:d3:b5:13:15:a2:d1:9a:4e:87:09:d7:ad:20:72:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D5:90:5A:43:73:76:63:3B:5F:87:20:71:55:61:D2:5E:8D:C1:CC
X509v3 Authority Key Identifier:
keyid:7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/rtWQWkNzdmM7X4cgcVVh0l6Nwcw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
00:19:aa:5a:57:58:ce:6c:06:12:b4:a3:1c:6e:51:bb:b0:f3:
fd:97:45:d5:aa:57:2d:36:72:9f:40:85:2d:fa:15:4f:8d:4f:
8e:70:22:88:48:16:73:72:58:44:50:05:db:30:45:35:4e:9a:
aa:e9:c8:e9:89:a7:c7:c2:17:64:1d:4f:3b:c6:63:65:b0:59:
6b:17:96:18:b1:6b:e8:3f:f1:23:b6:78:ff:b0:ba:74:9a:81:
63:ef:1d:16:7d:dd:04:d0:43:ea:5e:5e:8d:11:49:ab:1d:30:
57:ba:64:9b:d4:9e:72:83:c8:59:9d:01:10:bb:b3:90:01:a6:
ea:95:33:38:8f:bc:c9:6b:0e:37:ca:6d:12:f3:a4:7e:95:04:
80:db:be:26:69:6d:a1:21:e7:ba:15:55:63:68:4c:54:1b:4a:
66:4b:2f:6c:fa:02:07:cd:11:03:71:c5:ea:e5:69:d2:b9:ab:
26:bb:9f:fe:92:8d:d4:b2:52:c1:7d:aa:69:27:e4:33:7f:28:
b5:75:37:e2:58:bf:a7:28:e2:af:fa:12:68:05:36:0c:2a:9a:
64:57:8b:a0:27:5b:cc:f7:96:35:ef:95:d5:12:07:b1:ba:f6:
4e:8e:48:a9:d1:ff:74:a8:37:ba:2a:8a:ec:a9:85:15:80:2b:
d3:42:70:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 05:26:13 2024 by rpki-client on console-fra.rpki-client.org