Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/c3jgIM2gHboFQ0KMjOBd4CM0RHk.roa
File: c3jgIM2gHboFQ0KMjOBd4CM0RHk.roa (raw, json)
Hash identifier: WeTAKH5kQRGfussOl8J68QCSZLWISz7Yq6rSAM9QeRU=
Subject key identifier: 73:78:E0:20:CD:A0:1D:BA:05:43:42:8C:8C:E0:5D:E0:23:34:44:79
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 0D53
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/c3jgIM2gHboFQ0KMjOBd4CM0RHk.roa
Signing time: Tue 07 Jun 2022 02:16:45 +0000
ROA not before: Tue 07 Jun 2022 02:16:45 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 139648
IP address blocks: 103.244.116.0/22 maxlen: 24
103.244.118.0/24 maxlen: 24
103.244.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3411 (0xd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jun 7 02:16:45 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=7378E020CDA01DBA0543428C8CE05DE023344479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:66:e8:55:3f:bb:91:69:1a:2a:ae:cf:39:
2e:c9:9c:07:a3:c7:78:7b:c3:e8:c0:59:40:98:9b:
16:24:ea:26:ba:66:c7:21:d5:6f:66:f8:c2:9d:72:
97:13:f1:12:7b:a4:76:20:cc:8e:1d:ff:0d:78:21:
82:6a:af:60:6b:fd:ea:74:f7:74:dd:50:9d:98:ac:
c4:41:36:55:b7:96:7f:b4:eb:b7:ce:6c:59:c5:89:
cf:71:10:f2:37:b3:b0:96:31:a4:58:72:2f:c3:89:
58:7d:3f:55:fe:c6:45:5d:3c:bc:10:aa:d0:8f:01:
d2:08:c3:f1:c0:00:f8:25:56:51:3e:a7:b0:a0:fe:
e3:a4:8b:00:54:bc:3a:54:5b:a0:86:69:aa:f1:12:
33:21:d7:82:c7:26:20:2c:7c:28:dc:06:14:39:08:
d6:35:ac:ba:da:05:92:57:91:2a:7f:bd:aa:97:6f:
89:86:26:2f:50:5b:cf:d8:53:36:df:c0:83:74:81:
57:10:68:6b:e8:12:6e:02:7a:f6:f3:de:25:ef:65:
8d:af:13:f6:0f:db:91:8a:79:93:8d:74:e6:3a:fc:
78:fa:78:dc:ad:9d:dd:76:26:95:af:2f:5d:06:b5:
bb:2e:84:5c:cf:31:c8:a1:cb:7f:ea:e4:ab:3d:b9:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:E0:20:CD:A0:1D:BA:05:43:42:8C:8C:E0:5D:E0:23:34:44:79
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/c3jgIM2gHboFQ0KMjOBd4CM0RHk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:69:e7:c6:09:09:43:9b:2f:72:18:ae:e6:ad:55:df:0f:12:
eb:24:4c:38:b8:03:8f:ef:25:48:ea:f8:80:d0:8d:54:31:77:
2b:74:19:d2:00:3f:57:b4:7f:f4:fb:c1:e5:ff:00:5f:08:08:
c3:85:54:ae:0c:90:ea:04:98:c3:df:9f:c3:c5:e4:44:11:d5:
86:0f:a8:2e:aa:c4:7d:d1:9c:fb:01:dd:db:94:2e:71:60:f4:
0c:67:44:9b:9f:e3:ed:bd:83:41:a9:db:6c:e0:bf:67:7c:ff:
3d:d0:37:3a:b4:3a:2f:74:8c:eb:e9:74:22:22:6a:ed:40:f7:
49:1b:f5:ea:a0:eb:2e:e1:d0:cf:0c:4d:3f:36:7c:a2:04:f8:
c6:56:00:43:49:b3:a0:bf:15:15:57:64:89:b8:49:0e:10:02:
5c:0c:37:6f:6e:70:8c:63:2b:a4:ca:df:99:3a:27:11:7b:d6:
df:65:c3:54:01:71:c6:a5:bd:b2:e3:65:a2:32:a4:01:c9:8b:
7f:ed:24:4c:93:26:ef:f0:a8:78:89:47:d1:11:bc:62:a4:78:
e1:96:0d:4a:7a:66:ea:c1:d9:37:17:be:fc:43:73:14:01:aa:
10:be:72:3b:8b:05:6f:9f:e8:7a:39:b3:0c:58:c2:c3:96:cf:
5e:c2:77:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org