Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/pUeztTPUbqxBd8SxKEyh366LcsM.roa
File: pUeztTPUbqxBd8SxKEyh366LcsM.roa (raw, json)
Hash identifier: XkGoR9k3Bc2pxn2zZ9O40sXlYTFs8BYilG3crs6Atqw=
Subject key identifier: A5:47:B3:B5:33:D4:6E:AC:41:77:C4:B1:28:4C:A1:DF:AE:8B:72:C3
Certificate issuer: /CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
Certificate serial: 20DB
Authority key identifier: 51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pUeztTPUbqxBd8SxKEyh366LcsM.roa
Signing time: Fri 21 Jan 2022 02:14:09 +0000
ROA not before: Fri 21 Jan 2022 02:14:09 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 24426
IP address blocks: 43.239.32.0/20 maxlen: 20
103.35.32.0/20 maxlen: 20
110.44.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8411 (0x20db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510BFE032E8DF5FDEF3BA81C9F09B7D785B9A3A6
Validity
Not Before: Jan 21 02:14:09 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A547B3B533D46EAC4177C4B1284CA1DFAE8B72C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:22:83:85:48:4f:99:0f:c9:f7:53:b4:b2:
5f:fd:36:8f:86:5a:61:8d:58:07:84:29:d0:ed:83:
3c:e8:d9:6f:cc:83:ca:64:8a:c2:ff:d3:3d:0a:b0:
4d:30:80:9c:d6:f5:33:9a:42:00:16:69:f3:94:95:
6c:5f:0e:66:d1:86:cd:59:f4:30:c0:58:9e:8b:5a:
fb:93:a5:52:17:59:81:94:64:c7:3f:8a:f3:7c:7b:
61:5d:f9:4f:25:58:0c:04:ed:b0:29:46:f1:6d:ad:
d3:f3:a4:eb:6e:b2:5f:46:6c:97:62:08:ec:e5:71:
2d:5c:02:fc:49:ae:92:29:70:89:0f:03:a0:7c:fb:
81:a7:07:d1:ea:4f:22:cf:fa:92:1f:ee:5a:a3:d6:
f8:0c:b6:0a:52:11:7c:8c:67:bf:e9:de:2f:73:65:
86:cb:0d:c6:96:ae:69:ac:1f:df:57:3f:ac:ca:b4:
a5:0f:96:fe:2c:c7:00:cf:b0:6d:ed:b4:57:be:81:
c8:9e:3b:a6:24:49:dc:7a:f8:2b:0e:b3:3a:55:41:
1c:f3:13:d8:06:c7:2d:c3:b4:66:00:93:0e:ac:fa:
14:83:06:d1:10:80:9c:50:7d:58:d1:b3:4b:71:54:
9b:8c:e1:a3:ec:d0:19:8d:dc:84:2f:76:79:67:a1:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:47:B3:B5:33:D4:6E:AC:41:77:C4:B1:28:4C:A1:DF:AE:8B:72:C3
X509v3 Authority Key Identifier:
keyid:51:0B:FE:03:2E:8D:F5:FD:EF:3B:A8:1C:9F:09:B7:D7:85:B9:A3:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/UQv-Ay6N9f3vO6gcnwm314W5o6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UQv-Ay6N9f3vO6gcnwm314W5o6Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/pUeztTPUbqxBd8SxKEyh366LcsM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.32.0/20
103.35.32.0/20
110.44.144.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:8e:12:e2:7d:04:cb:f4:ee:7d:e4:fc:d8:20:50:37:7c:e4:
15:fa:b1:96:ac:86:f7:98:f1:26:33:bb:b5:f8:04:26:68:e7:
9e:f5:43:57:4f:06:96:0c:8f:85:ae:02:5e:78:dd:8a:f7:24:
52:cf:cf:58:f5:3d:73:08:0f:d7:d3:ad:0f:19:96:55:92:59:
00:19:25:1d:4a:f4:d7:94:ea:f4:a8:b7:11:cd:f8:fc:f5:43:
2a:61:d0:77:0a:1e:ab:e4:8d:8c:74:80:ff:39:1b:8a:0f:53:
99:e0:92:7a:f2:a8:71:82:7f:2b:e6:78:7d:c3:9f:33:40:0d:
43:82:99:78:60:54:b0:2f:8d:43:4c:cb:0d:1a:4f:37:ea:48:
23:29:96:e2:be:5d:9e:29:f7:82:6f:f9:71:6a:ed:06:09:6d:
8a:e1:a3:6c:d8:62:5a:dd:14:62:9d:f4:37:e9:12:f7:ae:83:
28:71:9e:55:51:07:1e:5b:7b:56:a0:ee:e9:f6:82:9e:0d:2a:
1e:6f:ff:f0:6b:2e:86:53:e5:81:ac:2c:a9:67:a1:bc:45:c1:
76:7b:49:97:8c:91:20:5c:77:db:24:08:dc:4d:9d:25:cc:a5:
b5:9d:39:e7:d5:17:7e:c8:60:f4:84:0f:c9:fd:07:6e:0b:4b:
f8:67:5f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:11 2024 by rpki-client on console-ams.rpki-client.org