Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1212/BUzsVKcVYVLL3KA1O_f-9fHXt5c.roa
File: BUzsVKcVYVLL3KA1O_f-9fHXt5c.roa (raw, json)
Hash identifier: xo+iEeLanCMrzucznJUvq6bTAw3JgHj08ruHRwn6PwE=
Subject key identifier: 05:4C:EC:54:A7:15:61:52:CB:DC:A0:35:3B:F7:FE:F5:F1:D7:B7:97
Certificate issuer: /CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Certificate serial: 04
Authority key identifier: 28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/BUzsVKcVYVLL3KA1O_f-9fHXt5c.roa
Signing time: Mon 18 Jul 2022 08:00:44 +0000
ROA not before: Mon 18 Jul 2022 08:00:44 +0000
ROA not after: Tue 18 Jul 2023 06:55:15 +0000
asID: 149628
IP address blocks: 45.116.96.0/22 maxlen: 22
103.23.164.0/22 maxlen: 22
103.56.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2820258AB65FF61FD5D66D95964F48EFA35DCC86
Validity
Not Before: Jul 18 08:00:44 2022 GMT
Not After : Jul 18 06:55:15 2023 GMT
Subject: CN=054CEC54A7156152CBDCA0353BF7FEF5F1D7B797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:ab:36:2d:7f:97:eb:2d:49:b5:dc:20:8f:
c9:f0:b5:e0:54:61:40:a7:36:1c:ca:cc:f4:39:32:
16:24:aa:0e:57:e6:ae:e2:80:60:8f:8f:57:53:9f:
7b:7d:b6:7e:68:45:a7:e0:3e:80:83:7a:08:86:ab:
d1:89:d5:95:dd:f3:48:31:e1:04:6f:c9:66:e5:aa:
a2:57:31:ee:aa:28:f7:ef:d4:55:b9:a3:0f:54:c0:
37:c3:ad:a5:92:9b:42:c1:4d:77:89:bd:69:1a:78:
1f:81:c1:be:6b:60:c7:fb:44:91:5c:8f:df:84:75:
ba:29:33:06:15:da:a3:56:b3:33:38:0d:b9:d6:ae:
4e:03:38:f1:17:20:3b:ea:b4:8f:0a:b6:2f:ba:55:
17:05:c1:a9:2b:d7:b3:5a:a8:ab:b6:d9:f9:15:18:
82:0c:80:90:57:ed:3b:d0:c7:15:5e:c9:d9:ce:5b:
ca:c6:a1:cd:e6:c1:97:55:5c:72:b9:4d:07:6e:d3:
6b:4b:8d:82:00:20:01:92:47:78:7b:8e:72:84:de:
fb:df:35:22:d8:8e:a7:40:39:d1:6c:81:48:02:af:
c5:ae:4f:4f:2f:cb:b1:b3:04:5c:b4:23:2c:f0:4f:
96:a3:cd:cc:28:1b:83:7f:95:20:e3:52:65:02:70:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:EC:54:A7:15:61:52:CB:DC:A0:35:3B:F7:FE:F5:F1:D7:B7:97
X509v3 Authority Key Identifier:
keyid:28:20:25:8A:B6:5F:F6:1F:D5:D6:6D:95:96:4F:48:EF:A3:5D:CC:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/KCAlirZf9h_V1m2Vlk9I76NdzIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KCAlirZf9h_V1m2Vlk9I76NdzIY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1212/BUzsVKcVYVLL3KA1O_f-9fHXt5c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.96.0/22
103.23.164.0/22
103.56.140.0/22
Signature Algorithm: sha256WithRSAEncryption
38:04:b8:74:9e:c0:d9:01:9d:7b:9a:19:8c:3e:84:14:1a:9b:
eb:30:22:23:d8:17:55:60:b5:ad:43:77:57:66:12:46:1d:fd:
90:75:4f:00:f8:59:01:23:33:2d:9c:1d:8a:46:11:92:0d:ec:
ea:21:86:cc:ab:de:93:38:e0:2a:d0:7f:7d:82:12:6c:98:e7:
f3:30:3f:88:e2:98:86:8e:24:de:97:e4:56:4b:6c:b5:b7:44:
68:c8:a6:85:58:b8:60:1e:72:6e:22:a8:85:76:27:f8:28:51:
e0:ac:1a:7e:bc:ed:76:39:8d:0b:22:29:05:45:fe:ac:8c:02:
40:7b:02:a8:61:0f:fb:a0:10:a4:2e:6d:57:32:94:74:2c:50:
ba:21:93:d1:67:fc:1b:d7:e6:e4:f0:0c:87:a5:c7:41:f3:9f:
91:a1:25:d9:59:2e:39:7f:20:5d:50:22:8d:56:6e:6d:d8:13:
68:e9:96:66:27:7a:43:6d:7d:bb:88:b7:5b:05:22:36:06:b2:
a9:4e:65:ae:e0:0d:19:b1:3f:78:a1:34:1a:11:3c:fa:a2:b2:
74:d3:c4:37:10:ac:4d:10:04:81:43:50:6f:61:77:9a:7e:00:
4a:62:17:6b:0e:cf:30:49:01:c9:e0:e0:1b:7a:5f:02:30:4a:
26:1c:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org