Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/buRyvenUcrvSFyZ_6ELB3J71jOs.roa
File: buRyvenUcrvSFyZ_6ELB3J71jOs.roa (raw, json)
Hash identifier: l2N3e7qL2WoAfk5aNZvi/u8m61pPQYH6xQ9iIOjUImg=
Subject key identifier: 6E:E4:72:BD:E9:D4:72:BB:D2:17:26:7F:E8:42:C1:DC:9E:F5:8C:EB
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 141D
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/buRyvenUcrvSFyZ_6ELB3J71jOs.roa
Signing time: Fri 19 May 2023 05:54:08 +0000
ROA not before: Fri 19 May 2023 05:54:08 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 212237
IP address blocks: 103.31.236.0/22 maxlen: 24
103.31.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5149 (0x141d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: May 19 05:54:08 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=6EE472BDE9D472BBD217267FE842C1DC9EF58CEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:d9:88:44:4c:40:b6:da:67:62:cf:67:a8:
f4:70:05:5e:10:75:3e:f5:5c:00:d9:2e:85:bb:48:
42:fd:86:e6:99:df:bf:f1:27:f5:25:04:65:ba:23:
e7:0f:b0:cd:c6:be:5f:8c:77:2e:f0:65:33:76:c4:
0a:91:bf:1c:f6:6e:16:5b:12:bf:00:11:a5:43:49:
58:6e:14:0b:4c:b6:08:92:17:b4:b2:84:e9:96:76:
9d:24:d4:9e:c3:d7:23:c5:b5:5b:97:ae:03:b6:58:
85:95:45:ea:6a:35:8b:aa:a9:4a:a8:91:7a:9c:01:
96:9c:23:40:1b:85:41:b6:5c:5f:89:b1:a0:02:0f:
57:8f:e7:6b:b1:3d:85:d2:7c:45:89:10:c4:e4:d3:
86:6d:34:ed:ae:e1:51:6c:f1:e7:47:8e:87:80:85:
fe:3d:98:fb:94:60:84:22:3b:d9:d9:a4:ab:14:1f:
5a:7a:5d:b7:38:9e:b8:70:64:c2:a4:f9:c7:7a:9b:
4c:b0:68:b8:ed:2a:e4:aa:f7:8e:19:3d:c7:c9:4a:
80:f0:0b:c5:d2:90:a2:28:69:15:e9:ef:1b:8d:44:
c6:f8:ef:17:df:74:33:6c:d1:94:ea:83:61:97:50:
c0:4b:59:79:b7:70:4c:36:6f:e1:f5:b0:a4:8c:5a:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E4:72:BD:E9:D4:72:BB:D2:17:26:7F:E8:42:C1:DC:9E:F5:8C:EB
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/buRyvenUcrvSFyZ_6ELB3J71jOs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.31.236.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:96:1e:7e:c5:6b:57:75:92:44:7c:f6:5b:a4:2f:d1:be:c6:
ec:f9:3a:96:3c:34:dc:f9:95:6f:bd:88:d6:50:df:1f:73:e7:
bc:04:6c:c6:b0:d1:f2:53:3b:46:9e:20:10:f3:96:50:d0:63:
18:30:3a:d2:55:48:2b:0e:6b:22:f1:0e:36:9a:04:32:fc:3f:
1d:73:0f:12:3c:f8:b2:d1:7a:23:ca:8a:cf:ce:80:ad:57:31:
47:83:58:20:7c:9e:da:4b:83:de:8e:25:ee:b6:0c:ef:e7:72:
cf:84:17:01:d0:73:3f:be:2c:0b:d3:45:d5:48:ac:ce:b7:92:
84:15:55:62:d9:73:4a:19:2f:99:63:d2:e6:10:67:2a:d8:46:
a0:88:8e:ad:26:2c:8a:b3:ba:9e:56:47:69:d4:84:7e:14:ca:
aa:7e:d4:ef:c4:4d:34:07:c7:b7:62:68:dd:f3:a7:64:a0:41:
db:b0:09:8a:c8:56:46:6f:86:ba:bb:9c:d1:bd:6a:9e:c5:8a:
14:f3:66:ca:55:0e:55:a5:c2:9d:7f:67:41:02:5f:21:f3:43:
40:23:a8:e2:5e:a0:31:eb:98:7b:99:10:0d:6e:23:e5:67:88:
47:ac:d2:91:37:78:5c:78:4d:57:b7:6a:5d:d8:12:e5:7b:5d:
87:d9:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org