Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/0f5MZt7KSuO_ArLloHiQeNp-Vbk.roa
File: 0f5MZt7KSuO_ArLloHiQeNp-Vbk.roa (raw, json)
Hash identifier: w86Z0aaPeeB3avwPzAK03V00BE1WgSykN/332ma/3UU=
Subject key identifier: D1:FE:4C:66:DE:CA:4A:E3:BF:02:B2:E5:A0:78:90:78:DA:7E:55:B9
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 0D51
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/0f5MZt7KSuO_ArLloHiQeNp-Vbk.roa
Signing time: Tue 07 Jun 2022 02:16:44 +0000
ROA not before: Tue 07 Jun 2022 02:16:44 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 212237
IP address blocks: 103.31.236.0/22 maxlen: 24
103.31.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3409 (0xd51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jun 7 02:16:44 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=D1FE4C66DECA4AE3BF02B2E5A0789078DA7E55B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:bd:b5:01:8f:97:3e:de:c9:54:da:cf:24:
95:2c:14:05:31:e4:06:d8:09:65:6f:d3:b0:58:ed:
1e:44:6f:ae:dc:9f:84:b1:bb:e4:13:66:02:8f:21:
da:05:0b:f5:f6:79:df:45:e0:5c:5c:00:8d:61:f3:
73:3a:5f:fc:e5:ab:0a:82:c9:c3:1a:da:60:02:34:
49:01:a4:2c:fd:e2:80:bc:5e:cd:04:db:78:34:fc:
51:29:ff:fa:35:e3:b6:53:5f:f7:e0:d3:0b:5c:d0:
90:87:e0:38:62:c4:07:55:e0:f0:e0:2f:a9:d4:f3:
4b:c4:cf:6c:2f:09:32:8f:d7:bf:50:1d:4b:6a:ee:
a4:83:1c:23:b7:1f:58:45:cb:17:75:4c:2a:41:17:
43:f3:dd:3a:92:3c:4e:c5:d8:a2:48:fc:92:48:9b:
e5:ec:7b:ff:04:1f:0c:bb:13:a9:f6:80:46:41:f7:
5b:0d:7d:37:15:57:52:49:f4:07:6f:19:96:e7:b6:
e3:26:27:30:4a:f0:34:0f:27:25:9e:45:b1:59:7d:
c7:ce:04:a9:52:26:19:ed:00:b5:19:90:a0:12:fa:
e1:21:92:13:2a:93:26:be:56:3e:2b:5b:9d:fa:3a:
d9:1b:aa:b4:c3:76:4e:e2:0c:02:26:3b:b6:ea:cb:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FE:4C:66:DE:CA:4A:E3:BF:02:B2:E5:A0:78:90:78:DA:7E:55:B9
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/0f5MZt7KSuO_ArLloHiQeNp-Vbk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.236.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:9a:a0:10:93:58:9d:c9:6f:7a:b6:eb:14:56:6e:dc:27:3e:
ce:e8:c5:ed:4e:15:28:1b:03:d2:81:85:2a:7c:66:b1:2a:74:
36:09:79:c6:f6:44:39:a5:ab:51:8b:7c:cf:16:82:59:4a:b0:
81:12:f5:ed:66:b3:50:e5:ce:6c:61:29:ca:f0:e0:6c:74:e8:
50:0f:56:b2:3c:3c:1d:21:e1:e1:b5:40:7f:c3:b4:87:5f:2e:
4e:c8:2f:13:3c:34:57:8d:a5:e7:08:72:86:bb:76:84:fb:bb:
76:d7:f8:02:f3:ff:0b:ae:d7:74:29:63:5a:90:55:69:c2:7f:
7b:8b:f4:2a:66:1c:0e:95:96:8e:a3:2d:9a:b2:65:ec:49:cb:
c1:d5:4b:e9:26:6f:37:85:b4:7a:ab:be:f2:32:99:96:90:de:
80:7b:10:30:9e:5a:a3:cc:56:7f:8a:71:91:b3:25:44:05:c2:
f5:96:3a:de:8e:90:b4:5e:6d:7b:11:b8:8d:93:d6:0d:9b:6e:
7f:f5:26:37:5a:c6:2f:75:1d:fe:b0:0c:d2:fa:d8:b7:60:5f:
0d:76:5f:c0:d8:d3:59:6b:9a:84:72:ac:78:1a:c9:64:2a:80:
22:7d:6a:29:d9:54:d5:46:8e:5c:bb:11:c4:1b:65:69:e7:5a:
cd:21:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:03 2023 by rpki-client on console-fra.rpki-client.org