Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/Dwk4Ug3h1FQc0BvocGQlLR4ytew.roa
File: Dwk4Ug3h1FQc0BvocGQlLR4ytew.roa (raw, json)
Hash identifier: xO5H3bVB6oULRyVqCp6qUHDa0EI8eBGsfDfAFXNMEws=
Subject key identifier: 0F:09:38:52:0D:E1:D4:54:1C:D0:1B:E8:70:64:25:2D:1E:32:B5:EC
Certificate issuer: /CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Certificate serial: 045A
Authority key identifier: 14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/Dwk4Ug3h1FQc0BvocGQlLR4ytew.roa
Signing time: Sun 13 Jun 2021 17:22:16 +0000
ROA not before: Sun 13 Jun 2021 17:22:16 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139648
IP address blocks: 103.244.116.0/22 maxlen: 24
103.244.118.0/24 maxlen: 24
103.244.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114 (0x45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14FF3D11146E5316E23FE7F8542CAC313FD6F510
Validity
Not Before: Jun 13 17:22:16 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=0F0938520DE1D4541CD01BE87064252D1E32B5EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:38:20:75:0d:c5:92:57:09:7b:8f:c6:59:
21:ae:57:c9:32:16:88:0d:9d:1f:fe:b7:94:22:66:
cb:9b:d6:df:84:bc:00:15:d3:fe:82:fd:56:dd:d6:
3f:82:ac:53:c2:7b:dc:44:87:af:5c:48:52:f7:f4:
14:04:8f:18:73:84:d4:0f:8d:5d:19:c1:ad:ea:91:
79:47:7c:56:7d:7a:de:c9:be:0c:b9:4f:f8:89:b1:
4b:43:70:02:e5:7f:ef:a7:b6:f8:5d:ca:14:d1:b4:
8a:10:bb:17:c1:12:37:80:5b:7d:9d:dc:96:39:7c:
b3:29:d7:45:9b:aa:6c:3e:4d:8d:97:b4:0c:d3:0a:
78:fb:22:f4:a5:ee:30:05:5f:86:eb:26:52:57:9e:
c9:45:75:07:81:5f:37:ff:26:90:2f:96:6a:f1:58:
00:f4:67:71:b6:54:ad:97:25:a4:3d:ea:42:1d:32:
6e:90:df:cb:0a:de:8a:9b:a6:14:33:e0:38:12:b9:
97:e2:7d:a0:32:4f:af:0e:7f:d4:9d:41:60:9a:3c:
94:d8:02:86:e4:dd:b6:3b:dc:90:07:b5:ef:e2:ae:
af:cf:d0:2a:b4:1e:0f:27:7a:a8:77:3d:b4:a9:81:
71:29:df:71:6a:f3:3e:9c:92:ed:bf:63:52:b7:63:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:38:52:0D:E1:D4:54:1C:D0:1B:E8:70:64:25:2D:1E:32:B5:EC
X509v3 Authority Key Identifier:
keyid:14:FF:3D:11:14:6E:53:16:E2:3F:E7:F8:54:2C:AC:31:3F:D6:F5:10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/FP89ERRuUxbiP-f4VCysMT_W9RA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FP89ERRuUxbiP-f4VCysMT_W9RA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/Dwk4Ug3h1FQc0BvocGQlLR4ytew.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.116.0/22
Signature Algorithm: sha256WithRSAEncryption
84:7e:03:c0:fd:48:56:29:6a:93:b6:f5:0b:7c:38:3f:df:14:
75:f0:0f:3f:39:ac:de:ff:62:e1:2d:60:97:80:6f:25:96:ce:
37:e7:f5:f5:07:f6:58:34:5a:7f:0f:bd:06:5b:08:a9:b8:be:
d5:a6:cd:f2:3e:82:5e:1a:8f:76:15:7a:c3:16:d8:45:2e:c5:
5d:c7:a9:64:72:dd:bd:af:31:96:04:94:e4:51:16:e5:fb:e8:
f7:68:0f:db:da:4e:10:87:1f:07:50:14:74:62:fb:72:06:da:
7e:7f:7a:c8:07:87:b1:16:4b:08:87:4f:6b:08:08:df:36:f4:
84:10:87:61:33:74:72:e9:c3:cd:15:13:33:c7:75:3e:0b:d3:
bf:7b:ec:61:4c:1d:cf:ee:e0:f1:71:91:d8:e2:01:5e:58:30:
b7:bd:35:bd:4c:53:3a:d3:b0:56:69:ce:06:2b:f4:92:ab:4a:
53:00:96:76:a7:02:77:72:72:e9:83:04:1b:86:07:af:46:fc:
ad:10:dc:6f:49:b3:49:86:60:01:e6:05:4b:2e:3d:0b:da:72:
2e:67:72:6f:d2:cb:4f:a3:ff:09:f2:37:5f:2b:10:b6:18:8d:
e9:a2:58:0c:e7:d4:d1:5b:d7:90:96:23:56:de:3d:5a:a8:74:
bf:86:5c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org