Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/P5ml2BBva_EpmUfb5kNZYMnM-es.roa
File: P5ml2BBva_EpmUfb5kNZYMnM-es.roa (raw, json)
Hash identifier: Yuqd+7FeONjfU33O2/03FDPcK+tyA3rKDH1CaMTMC8g=
Subject key identifier: 3F:99:A5:D8:10:6F:6B:F1:29:99:47:DB:E6:43:59:60:C9:CC:F9:EB
Certificate issuer: /CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Certificate serial: 1017
Authority key identifier: 3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/P5ml2BBva_EpmUfb5kNZYMnM-es.roa
Signing time: Fri 19 May 2023 05:54:18 +0000
ROA not before: Fri 19 May 2023 05:54:18 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 31972
IP address blocks: 45.115.228.0/22 maxlen: 24
103.56.8.0/22 maxlen: 24
103.196.204.0/22 maxlen: 24
103.207.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4119 (0x1017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ABA8B425232BE58968396DE32A8EB5A05EEA658
Validity
Not Before: May 19 05:54:18 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=3F99A5D8106F6BF1299947DBE6435960C9CCF9EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:86:b3:ed:9c:b9:e9:dd:bb:b3:81:b3:1d:5f:
50:e9:25:4a:76:b3:de:f3:35:9f:68:90:cf:1d:6f:
87:df:e7:df:99:f7:70:ac:b4:db:9b:32:22:06:14:
07:7a:6e:88:a5:61:fb:26:df:cf:aa:47:65:20:34:
30:5c:fa:80:af:60:cc:e0:dc:c2:ee:dd:f2:49:51:
6b:da:9b:32:f8:c1:7f:af:48:1f:cd:1a:b9:65:9f:
f9:a8:cd:c4:92:2e:f0:87:e3:e0:83:cc:5f:98:f7:
79:85:17:f8:73:0b:31:15:11:43:e7:76:73:dc:85:
32:78:bf:f3:49:29:56:4a:05:14:c9:a8:64:5e:50:
85:c3:62:83:8c:1a:ad:ed:f0:fc:df:e5:e1:ee:b1:
84:75:77:ea:99:44:5e:40:e0:3e:a8:7d:7b:94:4b:
46:11:03:6d:73:75:eb:84:f5:5e:19:c3:ea:a6:dd:
74:51:53:ef:3a:3d:2f:bc:9b:95:db:07:e0:05:05:
a2:b4:ad:1a:8f:b4:e8:44:16:1c:7e:89:f6:9a:52:
bb:d0:90:66:97:65:27:cc:25:ac:9f:2c:a1:23:9e:
dd:5f:38:e8:fa:a7:45:89:a2:fc:f5:7b:53:fb:06:
0d:68:eb:12:1a:a3:e4:ab:9f:82:78:6e:ee:fe:dc:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:99:A5:D8:10:6F:6B:F1:29:99:47:DB:E6:43:59:60:C9:CC:F9:EB
X509v3 Authority Key Identifier:
keyid:3A:BA:8B:42:52:32:BE:58:96:83:96:DE:32:A8:EB:5A:05:EE:A6:58
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/OrqLQlIyvliWg5beMqjrWgXuplg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/OrqLQlIyvliWg5beMqjrWgXuplg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/P5ml2BBva_EpmUfb5kNZYMnM-es.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.228.0/22
103.56.8.0/22
103.196.204.0/22
103.207.48.0/22
Signature Algorithm: sha256WithRSAEncryption
67:33:0f:54:25:81:bb:6a:84:6c:50:ed:a4:22:31:50:f0:e7:
d4:78:d4:f6:88:db:82:7c:9b:4b:96:76:a5:8a:26:96:91:9a:
ad:f5:81:43:39:d1:61:5a:dd:21:ca:0a:85:2c:69:13:3d:a9:
59:d2:c7:c7:50:19:e4:37:c7:bf:26:f9:f2:6e:94:0f:ef:c3:
49:32:2b:53:4e:87:9f:47:99:93:04:a3:64:7c:51:4c:94:f7:
12:de:a4:f1:57:68:36:e2:9b:26:6f:60:8a:e5:4c:d4:38:e7:
59:1d:10:4d:3e:8a:4b:ea:dd:82:68:b5:2a:37:33:60:b4:89:
f5:ae:12:c7:06:3a:c0:1d:3e:1f:e6:ee:2e:31:43:15:e0:8c:
8a:9c:d0:08:5e:50:cd:59:db:f1:ff:b8:d8:5c:9b:72:79:80:
65:c8:ef:3b:a7:30:17:7d:62:4a:e5:be:a5:3e:57:58:f5:ec:
13:7c:98:f0:c9:3e:13:63:0e:18:0c:8c:3a:b7:83:db:25:b9:
08:81:59:44:91:3b:70:ff:88:3d:f1:4c:82:b3:8d:56:22:b1:
9b:59:12:85:38:2d:30:2e:d8:e0:34:fe:36:8c:99:4b:62:8d:
35:fd:ae:7f:ae:a6:cc:ae:08:df:6c:0f:39:09:c2:96:2d:1f:
4b:ff:f2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org