Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/qiqIiHbaPRK_gZQGbtl6xN_lcg4.roa
File: qiqIiHbaPRK_gZQGbtl6xN_lcg4.roa (raw, json)
Hash identifier: oCdPA52raVvkQox9j6j4QOjOy+jvfLnP0wn+c7g3w+4=
Subject key identifier: AA:2A:88:88:76:DA:3D:12:BF:81:94:06:6E:D9:7A:C4:DF:E5:72:0E
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 141F
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/qiqIiHbaPRK_gZQGbtl6xN_lcg4.roa
Signing time: Fri 19 May 2023 05:54:09 +0000
ROA not before: Fri 19 May 2023 05:54:09 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 139648
IP address blocks: 103.244.116.0/22 maxlen: 24
103.244.118.0/24 maxlen: 24
103.244.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5151 (0x141f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: May 19 05:54:09 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=AA2A888876DA3D12BF8194066ED97AC4DFE5720E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:8c:46:15:7b:e1:db:69:2f:03:88:fa:0f:
e5:9f:69:d9:8e:22:42:b5:8f:6e:6b:bf:e0:e5:59:
72:81:45:30:29:ff:96:73:63:ee:7b:fd:71:cb:d6:
9a:6d:49:7c:e9:f7:ac:10:51:75:de:27:6a:31:8a:
7b:7c:93:57:56:4d:2b:aa:ab:1a:16:26:05:34:a6:
3e:d1:0d:f6:2c:06:6e:dc:f4:33:5f:df:fa:9b:7c:
88:1c:b6:cd:b2:a2:52:9f:6a:ee:3d:d2:fb:3a:c1:
4b:91:91:14:7b:72:da:8c:26:2c:c4:d4:a2:fe:7a:
5a:8a:b1:93:c8:db:ae:4b:30:e1:db:67:92:84:8f:
dc:60:ae:d6:2b:8d:11:9a:93:fa:75:a9:9f:98:6c:
52:0b:64:b7:24:da:94:ea:84:c2:93:99:8f:6c:56:
9d:06:2f:94:62:e3:52:27:5e:7f:d1:0f:02:08:c1:
df:c8:0c:4f:7f:1f:77:6f:19:33:26:6b:16:39:61:
c6:d5:2f:71:03:e1:28:e1:51:74:6d:85:8b:d7:94:
7e:04:19:92:37:8d:46:e0:25:11:3d:0a:a2:15:e5:
91:26:f9:6f:60:3e:93:cd:df:be:b7:44:68:ac:98:
cf:0a:38:2e:4e:ca:0c:1f:72:03:6f:a4:eb:ef:55:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2A:88:88:76:DA:3D:12:BF:81:94:06:6E:D9:7A:C4:DF:E5:72:0E
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/qiqIiHbaPRK_gZQGbtl6xN_lcg4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.116.0/22
Signature Algorithm: sha256WithRSAEncryption
19:f7:ff:df:a3:78:3b:be:d2:9a:d7:15:d2:d0:6a:f2:f6:45:
4a:ae:8a:5d:b9:10:98:ba:c2:b6:6b:a9:11:c9:79:9f:b3:a2:
c5:2e:8b:90:4c:6f:c7:eb:cf:dc:35:3e:54:bb:7c:e3:3f:1b:
2b:b5:f3:ea:f5:1f:c4:b9:40:ba:29:6e:7e:4a:06:0b:19:9c:
4a:dd:2f:2e:ef:25:7a:44:7f:e9:ab:e0:53:48:2c:b0:61:c5:
b5:e4:67:b0:d8:b2:34:e0:d2:d4:2a:3e:fe:df:5f:08:ed:17:
eb:cc:a8:2f:c5:c2:36:50:fa:dc:87:05:2b:cb:32:72:cf:fe:
df:65:31:80:51:6a:59:7b:ee:86:b4:1c:87:00:81:99:19:18:
6e:fa:39:de:6b:0e:03:0e:ae:30:a3:91:dd:48:d6:1e:62:b2:
60:a8:1b:11:06:98:83:d7:d8:ca:2c:17:6a:f7:6d:80:29:28:
1d:42:0f:9c:7c:85:22:e7:9e:9b:33:06:f8:2f:63:f3:7c:3c:
d6:c1:71:6a:46:21:e9:94:bb:53:26:44:0b:8d:75:b4:70:a0:
8a:03:31:c1:e8:9e:9b:a9:8c:9a:b1:2d:e4:0c:c3:89:29:b6:
f4:44:f5:d2:13:95:fd:2d:54:b2:70:9c:9d:28:04:3d:85:11:
a7:f9:6a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org