Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/ACVjimqZhgFW3mztWXqynl9FOPQ.roa
File: ACVjimqZhgFW3mztWXqynl9FOPQ.roa (raw, json)
Hash identifier: WoFn+Wq3/y5XuOYAh1CJxs2XSFZxY/04ANIgbf6Gf7c=
Subject key identifier: 00:25:63:8A:6A:99:86:01:56:DE:6C:ED:59:7A:B2:9E:5F:45:38:F4
Certificate issuer: /CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Certificate serial: 072B
Authority key identifier: 14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/ACVjimqZhgFW3mztWXqynl9FOPQ.roa
Signing time: Wed 03 Nov 2021 06:43:38 +0000
ROA not before: Wed 03 Nov 2021 06:43:38 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 212237
IP address blocks: 103.31.236.0/22 maxlen: 24
103.31.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835 (0x72b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Validity
Not Before: Nov 3 06:43:38 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=0025638A6A99860156DE6CED597AB29E5F4538F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:fd:24:6c:09:91:9d:29:dd:a2:7f:d4:bc:
15:02:b9:b8:94:af:00:f4:91:8f:c8:8b:33:07:4e:
26:e8:7f:bb:78:ef:cb:1c:86:2e:d7:3b:20:b8:6c:
52:c8:cf:34:2d:24:bc:71:81:3c:84:91:87:5f:b2:
2a:94:eb:f0:ae:84:8f:56:5e:7a:53:94:f7:b6:cb:
4e:96:0e:4b:1f:6e:58:c9:a9:40:dc:6c:63:ec:05:
43:61:af:82:d2:b6:80:e3:4c:b1:74:12:e3:c4:ba:
43:5d:3d:db:05:75:8f:b7:f5:e0:53:ca:9c:d2:0d:
d0:d8:b9:84:f3:f3:c4:94:33:95:e9:2d:e8:e2:e3:
72:73:69:d6:29:1c:b6:6e:80:df:e3:a7:95:51:a4:
8e:37:23:a3:ed:13:17:d3:1c:73:76:ea:4d:be:53:
69:ee:90:cf:6d:4e:10:ac:3c:0e:65:fc:2b:6c:13:
7a:7a:69:23:40:cc:4f:19:f4:6d:d7:8f:49:d6:94:
de:2f:ed:20:f0:d4:2a:83:bb:7b:90:1a:c4:56:7f:
ae:de:22:63:ae:4a:c6:c4:9a:54:f2:52:db:a1:56:
b4:df:85:71:ad:84:b3:36:f0:1a:26:6f:54:1c:39:
31:16:3e:00:9b:b0:82:81:4d:54:7d:c1:b0:96:3a:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:25:63:8A:6A:99:86:01:56:DE:6C:ED:59:7A:B2:9E:5F:45:38:F4
X509v3 Authority Key Identifier:
keyid:14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FP89ERRuUxbiP-f4VCysMT_W9RA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/ACVjimqZhgFW3mztWXqynl9FOPQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.236.0/22
Signature Algorithm: sha256WithRSAEncryption
38:4c:0d:29:ad:fe:d8:02:64:5c:6b:96:b9:94:d1:67:7c:aa:
15:b2:dd:95:a3:f7:41:29:73:33:fe:db:b2:b2:87:8c:e6:53:
fe:53:cc:48:69:3a:22:87:e7:87:10:72:77:ce:e9:79:b9:96:
cb:de:0f:20:bb:9d:7f:e9:5c:09:85:58:71:9a:bb:29:34:ef:
6d:bb:5c:92:34:43:4a:9f:84:67:2c:98:f0:5b:05:a3:cd:9b:
d8:ca:c0:53:d7:fe:fc:96:9d:ef:77:83:39:58:fb:f4:e6:41:
7e:4f:53:55:84:6e:f0:13:a3:16:02:5d:b8:59:e3:b0:75:75:
b1:72:b6:d9:de:67:4a:9b:8e:8b:14:32:f0:08:01:7b:be:de:
55:80:e3:f9:a1:f3:58:a9:78:d9:54:0e:79:ea:c1:c7:e6:a5:
2d:a7:b5:12:7c:d3:a4:a4:e9:7e:45:9d:c8:52:c2:f2:47:5b:
29:16:ee:27:88:84:84:f2:41:54:fc:58:3b:fa:7e:89:7e:89:
c8:25:bb:6e:15:be:d9:5f:2e:e7:d8:5e:62:19:71:e4:11:9e:
b2:9a:aa:1c:73:04:71:36:8d:e5:83:fb:c6:e3:32:d3:0e:6b:
5d:e6:50:26:65:e8:44:10:d1:cc:7a:df:cd:ba:40:7e:8b:94:
ae:cf:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org