Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/Sk5QMVLBCfVVP6OrOo4I5Y_2EI4.roa
File: Sk5QMVLBCfVVP6OrOo4I5Y_2EI4.roa (raw, json)
Hash identifier: aShaWmmQ5FifGzgID7kNoOeYKroCrgOe/15dTIzmksg=
Subject key identifier: 4A:4E:50:31:52:C1:09:F5:55:3F:A3:AB:3A:8E:08:E5:8F:F6:10:8E
Certificate issuer: /CN=E3992C73E3EE4E1C7524E79BAA22CF954879AF97
Certificate serial: 1958
Authority key identifier: E3:99:2C:73:E3:EE:4E:1C:75:24:E7:9B:AA:22:CF:95:48:79:AF:97
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/45ksc-PuThx1JOebqiLPlUh5r5c.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/Sk5QMVLBCfVVP6OrOo4I5Y_2EI4.roa
Signing time: Mon 07 Jun 2021 20:28:53 +0000
ROA not before: Mon 07 Jun 2021 20:28:53 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 59022
IP address blocks: 45.115.244.0/22 maxlen: 22
103.56.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6488 (0x1958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3992C73E3EE4E1C7524E79BAA22CF954879AF97
Validity
Not Before: Jun 7 20:28:53 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=4A4E503152C109F5553FA3AB3A8E08E58FF6108E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:b7:cd:26:23:4f:ab:9c:66:a4:12:64:52:
bd:4e:e8:57:1a:21:e6:ae:11:8e:ba:d2:55:69:cf:
d0:85:90:4d:b1:11:88:d8:4e:57:3e:19:26:f1:48:
64:4e:62:4e:b6:2a:dc:0d:8f:ef:0e:eb:c2:5f:13:
27:50:e8:5c:0b:29:71:e1:62:3a:9a:f7:ba:ba:af:
bc:4e:60:4d:20:f7:ea:91:0c:3c:e0:3b:11:a9:10:
15:b5:4f:04:c0:97:3c:81:3d:e4:cc:ed:b0:be:9c:
23:ad:5b:d0:07:b6:2f:81:56:0d:cd:e7:e8:dd:74:
fe:90:1c:a1:2e:ca:ef:eb:57:47:38:5c:93:08:5c:
46:d1:fc:26:56:1c:83:cc:06:d3:33:a3:98:d5:04:
da:d3:b6:52:e6:a6:32:0a:99:78:3c:84:7d:c8:a3:
df:26:3e:60:e4:cd:97:c9:b8:71:a3:56:59:be:57:
8a:93:a6:aa:ef:a4:a2:f0:3f:fa:47:e0:8c:f2:00:
ae:8f:dd:ef:4d:07:d9:b0:72:a2:f8:de:fb:b2:c7:
cd:18:62:30:a0:1e:b8:88:75:73:d2:54:f0:14:0d:
ba:9f:c9:e8:ac:ec:f7:7c:43:5a:eb:b0:04:b3:70:
65:4b:3e:ad:12:11:e2:1c:51:51:ea:92:aa:d5:9f:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4E:50:31:52:C1:09:F5:55:3F:A3:AB:3A:8E:08:E5:8F:F6:10:8E
X509v3 Authority Key Identifier:
keyid:E3:99:2C:73:E3:EE:4E:1C:75:24:E7:9B:AA:22:CF:95:48:79:AF:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/45ksc-PuThx1JOebqiLPlUh5r5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/45ksc-PuThx1JOebqiLPlUh5r5c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/Sk5QMVLBCfVVP6OrOo4I5Y_2EI4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.244.0/22
103.56.20.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:0a:ba:22:8e:81:be:da:4b:c8:c3:6c:ee:2f:9e:45:a0:d5:
13:b9:76:9b:13:0f:b2:0e:3d:ed:f4:63:30:20:1d:cc:25:29:
09:5b:d8:d2:d1:fb:62:69:31:46:66:44:b9:75:63:e2:4d:34:
69:1e:c4:9d:f9:a0:8b:aa:0a:39:a4:aa:e2:94:66:2b:b3:2d:
f4:e0:3f:e3:e4:41:df:78:a4:d0:53:3e:de:70:c5:03:c5:f6:
fe:16:87:25:f0:a3:b9:09:2a:ba:b4:4b:6b:28:95:a1:1d:0a:
59:4d:85:35:cc:df:e0:57:35:44:49:39:81:00:2d:5b:ae:a9:
e2:71:e9:0a:d9:46:de:11:0b:08:dd:72:48:66:ea:5c:30:3f:
8f:a7:28:02:82:3e:d0:b4:39:e3:f1:c6:90:0d:5e:22:04:8e:
f4:ab:7c:6b:2e:dc:40:d6:4a:1a:73:97:61:05:67:03:15:eb:
fd:8e:fb:67:53:02:a9:8f:d6:1a:33:9d:25:55:80:03:ef:29:
97:88:99:35:e7:e6:45:23:88:34:f5:a6:53:db:52:a4:b9:d8:
59:a7:07:38:a7:ea:e1:cb:50:01:92:e6:84:8c:75:ed:5d:c5:
cb:83:bf:19:e4:37:e1:06:5e:0d:f1:3a:f0:8d:52:11:76:a9:
50:c0:da:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org