Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/AoWYhz_ivLBlNMB7vOluwzxm2eE.roa
File: AoWYhz_ivLBlNMB7vOluwzxm2eE.roa (raw, json)
Hash identifier: jigbDJ5t8k5ltomq3ddhiNnD8thZQoOdX00QOSnXEQg=
Subject key identifier: 02:85:98:87:3F:E2:BC:B0:65:34:C0:7B:BC:E9:6E:C3:3C:66:D9:E1
Certificate issuer: /CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Certificate serial: 045B
Authority key identifier: 14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/AoWYhz_ivLBlNMB7vOluwzxm2eE.roa
Signing time: Sun 13 Jun 2021 17:22:16 +0000
ROA not before: Sun 13 Jun 2021 17:22:16 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 209242
IP address blocks: 103.244.116.0/22 maxlen: 24
103.244.118.0/24 maxlen: 24
103.244.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Validity
Not Before: Jun 13 17:22:16 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=028598873FE2BCB06534C07BBCE96EC33C66D9E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:0d:46:56:b9:4b:15:8b:c4:2c:65:5d:13:
62:5b:48:1d:08:7b:11:5e:0c:aa:c4:06:fc:82:42:
09:d4:ee:93:d0:af:8b:d3:27:03:2d:aa:f2:98:d9:
e1:bf:eb:46:4f:7c:da:73:fb:e1:87:3e:da:b8:9e:
61:b0:bc:ab:1d:5a:81:aa:d5:ca:17:21:f7:b3:ed:
07:f3:61:ed:49:b4:2b:0b:be:0e:32:6f:eb:ab:ce:
69:96:28:94:60:7a:01:12:3e:59:c3:8c:cb:30:f3:
fc:49:0d:b1:5b:c4:11:98:3d:3c:c3:1c:4c:62:70:
b8:93:55:7d:c4:e3:42:41:5b:ab:5e:a0:5b:6e:29:
72:fc:e7:e3:78:d3:6e:20:c6:6b:cb:84:eb:5a:ff:
77:71:e6:11:d5:57:52:db:20:ea:49:d1:1b:6c:fc:
1e:35:69:c7:eb:6f:30:50:74:64:fd:4f:72:9a:27:
bd:91:6c:bd:76:03:d4:08:86:1a:17:6a:13:0d:ee:
c4:14:47:99:fd:67:c2:70:82:2e:1c:10:91:b4:e9:
24:4b:09:83:f5:fc:08:40:67:6c:c5:1a:90:03:b3:
9a:90:26:78:f7:7b:84:42:09:fc:2a:b6:05:73:89:
e2:da:2a:c3:a2:a2:98:be:61:d0:87:9a:7b:26:9a:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:85:98:87:3F:E2:BC:B0:65:34:C0:7B:BC:E9:6E:C3:3C:66:D9:E1
X509v3 Authority Key Identifier:
keyid:14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FP89ERRuUxbiP-f4VCysMT_W9RA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/AoWYhz_ivLBlNMB7vOluwzxm2eE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:6f:e7:e2:fe:78:30:91:5f:92:00:7e:db:d1:72:10:c9:81:
53:09:a7:b7:94:ef:8c:5c:fb:b0:ba:4a:9c:26:29:8a:56:be:
40:cc:d6:2d:b2:75:4d:ac:1c:b5:89:b5:f2:75:b5:54:44:59:
d8:d4:6c:c5:1c:da:a7:84:b2:a5:ab:78:a5:61:54:12:df:67:
67:d7:0b:cf:fe:bd:ef:60:14:33:dd:15:10:ed:b1:ef:6e:f3:
20:6d:5c:fa:1b:9e:e3:aa:fd:fb:65:73:78:bf:1d:ef:e5:a9:
ed:61:c4:aa:5f:54:72:99:4b:cc:1c:3a:dd:d1:39:54:58:1d:
73:03:47:e5:4a:90:6f:d5:99:bd:21:93:4c:eb:88:4a:62:88:
1e:86:26:61:37:bc:a7:63:80:71:35:2d:7e:23:e6:28:e4:0c:
c6:d0:d2:cc:ea:e3:0c:9d:9f:a6:18:5c:d1:d6:14:80:04:21:
e4:46:a2:e8:fc:4e:e1:7d:3e:ed:bc:f4:8d:50:fe:5c:1c:b7:
c1:2a:05:6a:0e:2a:ac:51:41:87:cd:fe:5d:cb:9a:6d:6c:53:
bf:16:70:63:44:2e:81:0b:db:6b:b6:65:b1:ab:cc:a9:c8:d2:
41:f1:dd:96:be:8e:05:76:32:2c:96:a7:86:17:bd:63:39:c0:
e5:3a:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:06 2023 by rpki-client on console-ams.rpki-client.org