Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/If73vIJfsw1ctqBpF0j6MiTvsQY.roa
File: If73vIJfsw1ctqBpF0j6MiTvsQY.roa (raw, json)
Hash identifier: 5o1/YPdtI0UVs4WJhLa0AirxIdkcMZEhFyNBo8yiy18=
Subject key identifier: 21:FE:F7:BC:82:5F:B3:0D:5C:B6:A0:69:17:48:FA:32:24:EF:B1:06
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 1421
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/If73vIJfsw1ctqBpF0j6MiTvsQY.roa
Signing time: Fri 19 May 2023 05:54:10 +0000
ROA not before: Fri 19 May 2023 05:54:10 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 209242
IP address blocks: 103.244.116.0/22 maxlen: 24
103.244.118.0/24 maxlen: 24
103.244.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5153 (0x1421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: May 19 05:54:10 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=21FEF7BC825FB30D5CB6A0691748FA3224EFB106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:60:dd:d5:84:e5:b6:fe:b7:90:4f:12:94:b2:
77:22:8b:61:25:c5:85:7a:69:77:07:46:ef:f1:f2:
4d:9a:ec:56:41:cc:fd:d3:63:3a:7c:35:c2:b9:5f:
79:fe:8d:6a:77:bd:c3:0c:47:90:c6:6b:c9:33:af:
48:b6:4c:73:16:0b:7f:cf:b4:d0:52:9e:25:79:e3:
81:b3:14:2f:bc:fd:87:79:37:e5:a7:1c:ca:98:0d:
c9:3f:97:50:a3:37:96:e7:a1:62:22:e7:81:7d:90:
9c:75:d6:b9:aa:56:fd:83:61:fb:22:88:60:31:67:
e3:c8:33:0b:2a:36:9f:2b:05:ad:3c:12:d3:aa:d7:
74:79:94:5f:c0:76:c6:7c:56:bb:91:20:50:d5:df:
30:99:21:e0:26:f3:b3:0b:30:75:a4:6f:ef:2b:93:
8b:b4:89:0f:8b:ff:f7:78:fc:27:3d:da:c2:7d:91:
91:b7:f9:a4:26:23:8b:3b:56:48:1b:bf:79:6d:58:
cd:6a:cf:98:d2:c5:a7:3d:92:7a:5a:58:cb:50:aa:
ce:90:81:58:da:d6:98:7b:5a:26:94:e9:9d:88:0e:
bd:0f:f9:4c:33:b4:01:7a:2f:ce:f3:af:3e:dc:8c:
82:c1:ad:32:bc:41:16:91:30:ef:d6:96:ce:e8:e6:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:F7:BC:82:5F:B3:0D:5C:B6:A0:69:17:48:FA:32:24:EF:B1:06
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/If73vIJfsw1ctqBpF0j6MiTvsQY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:cb:33:34:08:3b:14:d4:e8:8b:4d:72:1d:55:33:97:e1:e6:
b6:45:38:b6:af:8b:4c:f8:68:6c:57:1d:25:69:c7:32:60:79:
34:10:f2:ee:4f:bf:5d:57:7a:bc:9a:51:46:86:ce:2c:32:b9:
88:8f:14:66:6a:de:bc:4e:b8:90:e6:ba:b8:d9:ed:cc:f5:ef:
05:03:5f:da:16:07:a0:dc:ca:9d:81:7b:8c:5b:9d:e2:8d:df:
08:67:fb:99:49:c7:56:3d:fd:61:9b:d8:2b:c5:8f:f5:2f:03:
5c:f1:65:ef:4b:fa:08:ff:71:0d:29:43:c9:1e:81:f8:33:a9:
00:cc:6a:d5:58:eb:28:63:78:12:b9:fe:fd:89:69:9f:7a:9b:
1f:09:fe:f2:ae:23:94:95:76:cd:ab:bd:02:b2:b0:4d:d6:59:
6a:c1:fc:1c:cc:fd:43:08:4b:b8:7e:d1:d4:c6:c8:9f:4d:8d:
8a:89:d7:61:5e:f9:fb:60:a6:a6:7f:3b:63:e1:d6:c9:55:92:
c1:1c:8f:de:b1:97:93:82:7a:a5:45:10:ce:ed:fa:37:e3:bf:
2b:db:54:fc:d5:be:20:d1:51:6a:07:a0:a6:d0:70:ad:6f:75:
26:fa:8a:0e:54:82:5f:67:27:c8:45:8a:27:b9:99:c5:fc:7b:
43:8b:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org