Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/DgsB-McNTSUlKsYScKcl6a62klw.roa
File: DgsB-McNTSUlKsYScKcl6a62klw.roa (raw, json)
Hash identifier: ejTi+Cv93B6sEvoM4sLohve5zcCFIvewEB0ic2QvBic=
Subject key identifier: 0E:0B:01:F8:C7:0D:4D:25:25:2A:C6:12:70:A7:25:E9:AE:B6:92:5C
Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Certificate serial: 0952
Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/DgsB-McNTSUlKsYScKcl6a62klw.roa
Signing time: Tue 07 Jun 2022 02:13:15 +0000
ROA not before: Tue 07 Jun 2022 02:13:15 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 31972
IP address blocks: 45.115.228.0/22 maxlen: 24
103.56.8.0/22 maxlen: 24
103.196.204.0/22 maxlen: 24
103.207.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Validity
Not Before: Jun 7 02:13:15 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=0E0B01F8C70D4D25252AC61270A725E9AEB6925C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:2a:2b:8c:12:f3:df:12:ae:9f:5d:4a:8c:
23:e5:87:f4:2c:79:1a:cb:ad:7e:85:ba:8a:dc:2f:
85:e6:3c:5e:48:2e:d3:a5:9d:eb:89:24:18:bf:38:
e0:68:63:c0:63:39:c8:c8:d8:66:ce:2b:54:a8:14:
1f:8a:95:59:c1:5e:e6:cb:c0:82:a0:7e:26:61:ef:
32:8f:db:a9:13:d9:0a:0e:aa:25:d0:b8:00:95:ca:
3c:e3:8a:5b:ab:2d:ef:81:0e:30:0b:de:d7:1e:c5:
71:a2:20:4c:e0:5c:66:0a:ee:2d:a1:cd:42:e5:cd:
fd:73:43:63:13:b7:14:ca:dd:99:81:44:63:38:3f:
16:42:34:a1:b1:f2:e6:39:6a:ac:cb:3a:27:c8:e8:
18:96:45:7c:d9:3f:aa:18:e0:72:44:f4:20:87:0b:
2c:65:92:08:7d:25:1e:0a:9b:98:34:f6:39:2d:93:
ac:50:28:1c:f5:77:d6:8c:40:31:82:ff:28:46:de:
a6:1d:69:22:da:dc:fe:c3:36:ce:fa:15:c3:97:9d:
cd:58:cb:4e:b3:6c:8c:57:19:b8:99:f8:b6:0d:cf:
fd:c4:ce:a9:54:be:db:0d:e8:cc:05:46:4c:e6:62:
07:8b:fd:24:8b:27:22:a8:1a:b7:47:0b:0f:34:93:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0B:01:F8:C7:0D:4D:25:25:2A:C6:12:70:A7:25:E9:AE:B6:92:5C
X509v3 Authority Key Identifier:
keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/DgsB-McNTSUlKsYScKcl6a62klw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.228.0/22
103.56.8.0/22
103.196.204.0/22
103.207.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:f8:c2:e7:c9:2f:ad:4e:da:05:6c:6f:05:79:3a:3d:06:21:
74:78:81:04:b7:89:79:10:df:0e:0e:4c:a8:1c:3a:1d:31:b4:
42:0d:fd:be:f5:ef:8a:e8:d7:87:17:ae:bf:0a:74:8d:e8:76:
d5:9d:19:ef:0a:0e:8b:21:d2:c9:48:15:13:cd:5d:09:a6:07:
d8:86:84:e2:4f:86:c2:71:a4:14:dd:fa:75:20:73:b7:ee:d0:
c9:10:85:69:eb:5c:00:d7:e5:92:e6:90:af:2e:38:6d:9f:d7:
39:fa:ed:2c:63:d3:ac:49:af:c1:ed:19:13:d1:3b:a3:dc:90:
7c:4b:a5:b5:7f:0b:4f:48:08:61:10:3a:ea:b9:95:f5:a5:80:
cc:f8:a9:a6:e1:4f:90:6d:5f:c7:a9:5c:0c:76:bf:17:af:29:
04:fb:7f:c6:31:6f:c4:01:c9:72:11:bc:c5:3d:07:bd:31:55:
32:59:ca:cf:01:d5:80:07:30:f5:9b:ad:2c:aa:0f:57:4e:4e:
0e:5e:2d:83:4a:03:e5:78:16:0a:e2:b4:71:6c:12:6f:a3:42:
b2:6e:47:37:03:13:85:2e:b7:c3:e3:07:c3:c3:27:1e:c0:e3:
34:ff:9b:11:6a:b9:9f:b2:a4:05:31:7a:50:5d:d9:62:7c:08:
f4:89:00:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org