Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1407/ORFEpp7plOUxleQE14TABLbVHYQ.roa
File: ORFEpp7plOUxleQE14TABLbVHYQ.roa (raw, json)
Hash identifier: E17ms/s4s3Te9/6Gr3blmjxIy782N5R6k+22m0RxrU8=
Subject key identifier: 39:11:44:A6:9E:E9:94:E5:31:95:E4:04:D7:84:C0:04:B6:D5:1D:84
Certificate issuer: /CN=391146A4B4B07D231183202CF701601D7B5ED705
Certificate serial: 04
Authority key identifier: 39:11:46:A4:B4:B0:7D:23:11:83:20:2C:F7:01:60:1D:7B:5E:D7:05
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORFGpLSwfSMRgyAs9wFgHXte1wU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/ORFEpp7plOUxleQE14TABLbVHYQ.roa
Signing time: Thu 27 May 2021 05:02:52 +0000
ROA not before: Thu 27 May 2021 05:02:52 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 17408
IP address blocks: 103.20.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391146A4B4B07D231183202CF701601D7B5ED705
Validity
Not Before: May 27 05:02:52 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=391144A69EE994E53195E404D784C004B6D51D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4d:1b:e5:6d:78:af:d7:54:6c:b2:df:2e:50:
c5:e5:fb:2d:ee:48:14:a4:ad:79:c9:63:59:f8:3b:
5d:fa:83:b8:78:cc:03:9a:57:78:b5:1b:41:2b:9c:
a0:1d:bb:bb:6c:97:96:bf:1e:75:35:44:d6:80:95:
1b:12:f6:26:5f:a9:70:7d:5d:0b:c2:ea:20:fe:45:
72:6b:36:d7:19:bc:c6:ca:1b:82:5f:19:ab:22:b7:
04:cc:c7:97:fd:74:11:63:fa:ca:b8:cc:f9:ae:49:
8b:8b:46:cc:04:a7:bc:0c:01:d5:06:31:4b:81:82:
db:b4:40:6c:2f:36:cd:17:ee:5a:9b:87:df:ae:1c:
31:db:e9:4d:a2:6e:18:f5:63:93:9a:99:a6:03:1e:
90:f0:14:af:eb:03:1e:67:64:0c:09:4a:75:46:8e:
70:3f:ac:dd:5c:59:9b:70:39:8f:33:64:0b:b2:07:
ec:a8:87:73:6c:c5:85:02:a9:8c:62:d1:86:c2:67:
0a:38:4b:3b:ac:3c:ed:bb:0e:dd:af:b2:72:fd:c7:
03:40:f4:69:46:23:a4:99:7e:5b:5f:f6:b3:d6:68:
be:e0:90:00:f2:44:41:d7:b3:be:45:9b:07:fe:03:
9d:aa:4a:46:cd:47:fd:b6:23:39:af:19:19:4e:4b:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:11:44:A6:9E:E9:94:E5:31:95:E4:04:D7:84:C0:04:B6:D5:1D:84
X509v3 Authority Key Identifier:
keyid:39:11:46:A4:B4:B0:7D:23:11:83:20:2C:F7:01:60:1D:7B:5E:D7:05
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/ORFGpLSwfSMRgyAs9wFgHXte1wU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ORFGpLSwfSMRgyAs9wFgHXte1wU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1407/ORFEpp7plOUxleQE14TABLbVHYQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.46.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d4:a6:8e:3c:08:dd:4f:01:20:8e:37:a7:58:31:24:66:40:
5c:e5:04:31:0c:f4:37:cc:c2:71:fd:53:78:68:37:fc:fd:06:
d9:81:a1:0b:27:6a:18:54:1b:5f:36:29:1e:c4:af:fd:6e:6e:
d6:49:b8:83:1b:32:99:df:bb:52:87:9e:be:c9:8f:49:b8:ab:
84:0b:cd:d2:75:f3:91:d8:cb:a0:dc:28:83:44:11:67:98:b6:
d0:af:f0:79:e4:2a:bb:32:a6:48:08:e2:90:1f:36:c1:09:a5:
58:a6:e5:63:5b:5f:89:a9:98:03:45:ad:eb:6e:bf:a6:31:2a:
e5:27:55:95:bc:0c:37:66:30:7f:4c:9a:54:ab:b1:a8:91:0d:
95:c8:67:50:c3:c2:4b:75:2d:28:1b:38:18:ce:1e:26:6e:23:
02:87:0d:eb:c2:24:62:c2:98:3f:3c:f4:df:58:db:e9:1a:4f:
ff:aa:05:bc:09:36:1b:a0:ff:4f:d0:53:43:d3:16:67:e8:d5:
7d:fe:ae:16:1f:44:d4:08:c8:3b:e1:23:7d:8a:41:80:33:12:
88:69:94:6c:b1:32:6f:bc:8d:15:46:23:10:d3:9c:ec:59:8b:
57:b7:2b:81:48:52:a3:a1:0e:49:b9:2a:41:c6:18:bf:fc:19:
7b:26:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org