Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/c3aQoDB8EcvEBaWFDWoS6Ffa1II.roa
File: c3aQoDB8EcvEBaWFDWoS6Ffa1II.roa (raw, json)
Hash identifier: MBQqtWhKWtNeEEEZyciRnq6v0i7xaELTtUjw1trcsFg=
Subject key identifier: 73:76:90:A0:30:7C:11:CB:C4:05:A5:85:0D:6A:12:E8:57:DA:D4:82
Certificate issuer: /CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
Certificate serial: 20DC
Authority key identifier: 51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c3aQoDB8EcvEBaWFDWoS6Ffa1II.roa
Signing time: Fri 21 Jan 2022 02:14:09 +0000
ROA not before: Fri 21 Jan 2022 02:14:09 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8412 (0x20dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
Validity
Not Before: Jan 21 02:14:09 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=737690A0307C11CBC405A5850D6A12E857DAD482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:d9:84:fa:60:89:57:c5:8c:89:bd:4d:85:
c5:a6:75:00:6a:1a:6d:76:83:c7:cb:a2:5e:63:42:
ba:e6:05:d7:de:d2:1a:73:f7:0c:5e:98:d9:8a:c2:
fc:7c:6c:7a:0d:b5:3c:e7:4a:f3:3d:8b:47:54:de:
30:63:e9:a1:02:90:da:7c:a7:86:cc:e7:98:81:76:
36:91:3a:da:0c:98:f1:23:be:40:8c:a0:ca:94:26:
93:cf:03:bd:08:2e:0f:04:07:e5:ee:93:0a:d3:ca:
4c:6a:d5:52:45:2c:2f:55:49:95:12:60:dc:67:c5:
e5:93:14:2d:13:15:c7:17:3b:cc:24:53:ed:49:d6:
9d:c0:12:00:47:ee:81:a2:28:c9:2e:20:88:06:3f:
30:54:73:18:6a:cd:23:c1:03:63:a7:74:89:6e:91:
58:f7:04:c5:6f:d6:3f:e5:8d:3a:ac:38:d7:4a:17:
b0:e3:b9:e9:c2:78:d5:4d:d9:5c:9b:35:4a:b6:8f:
5e:fd:1b:69:b0:33:7f:17:0e:ce:ab:f2:11:87:87:
ae:c5:75:af:9d:d0:75:1f:e4:04:1e:01:02:f3:54:
31:80:b7:83:88:98:00:7c:6b:59:77:1c:a8:9c:40:
b4:7d:ff:ef:ae:51:10:70:6c:b4:93:b8:8c:e3:37:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:76:90:A0:30:7C:11:CB:C4:05:A5:85:0D:6A:12:E8:57:DA:D4:82
X509v3 Authority Key Identifier:
keyid:51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQv-Ay6N9f3vO6gcnwm314W5o6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/c3aQoDB8EcvEBaWFDWoS6Ffa1II.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
07:90:fb:21:cc:cc:76:f5:a2:a6:c7:39:7f:c1:71:91:2d:20:
85:28:81:35:98:1e:f1:04:7e:9d:6b:60:67:5b:24:3c:4b:fe:
da:ef:9b:f8:5c:51:cd:88:d0:f1:80:f2:9d:66:9a:f7:19:2b:
4d:c9:0b:80:94:e8:8e:a9:8b:50:61:0a:ec:62:c2:69:0c:35:
33:17:86:33:5d:be:6c:2a:16:dc:f8:e8:4c:a6:44:12:90:0c:
5f:40:f8:89:7f:0a:02:7a:e5:0f:78:a9:d6:11:b7:8d:d2:61:
77:56:ab:6b:8b:12:dd:c8:e0:72:1d:a6:4e:2b:ac:fd:93:42:
8b:79:d3:d2:60:d1:b1:f2:9e:35:61:86:de:7a:fe:32:8c:cc:
89:f8:81:e5:e6:77:1a:22:71:4d:56:da:9c:c9:21:2d:6c:f2:
44:19:4f:6c:37:2c:69:8c:d9:85:74:16:19:7c:27:0a:7a:4c:
9d:a3:41:fa:39:04:c5:25:bd:1d:fc:13:07:d4:91:c4:a1:53:
fa:69:83:e5:2c:c5:33:34:d9:4b:77:b6:56:17:fc:00:f1:15:
ce:69:0f:a9:80:4d:8e:77:20:a7:95:c9:77:c2:3a:dc:cb:7d:
56:43:51:64:a0:8c:8e:9f:90:30:f1:28:73:a4:3d:39:81:d3:
39:50:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:35 2024 by rpki-client on console-fra.rpki-client.org