Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/-VtqVaHGrz3LXv-eb2ucIB4ymDU.roa
File: -VtqVaHGrz3LXv-eb2ucIB4ymDU.roa (raw, json)
Hash identifier: xcpiP9XJxJ/7xR08p6fgD0CrwKmkVtsnv045CCTZtlY=
Subject key identifier: F9:5B:6A:55:A1:C6:AF:3D:CB:5E:FF:9E:6F:6B:9C:20:1E:32:98:35
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 15F3
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/-VtqVaHGrz3LXv-eb2ucIB4ymDU.roa
Signing time: Fri 19 May 2023 05:54:52 +0000
ROA not before: Fri 19 May 2023 05:54:52 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 59067
IP address blocks: 103.36.96.0/22 maxlen: 22
103.202.116.0/22 maxlen: 22
103.255.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5619 (0x15f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: May 19 05:54:52 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=F95B6A55A1C6AF3DCB5EFF9E6F6B9C201E329835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:1c:27:a4:4a:0e:10:03:6d:1e:d2:fd:ee:
d3:63:8b:70:bb:32:38:4e:30:77:72:ff:aa:75:7c:
1e:5c:d4:09:34:6d:0d:25:c1:c0:c3:b2:40:0e:d9:
c4:cb:06:af:36:69:69:c1:ae:0e:d3:2d:56:10:ff:
4d:54:89:46:ee:60:9a:b8:3e:43:a8:11:94:bd:08:
39:aa:f9:e4:dc:f6:8b:3c:26:9f:b9:80:cb:d3:8e:
4b:74:01:24:8c:fb:e8:c0:62:8e:94:9d:00:4a:61:
15:d4:52:7f:ed:5a:fc:3f:e7:6e:7c:55:08:fd:1f:
1e:45:b6:7f:19:40:85:52:10:50:76:85:5a:f8:0e:
bc:68:57:9d:4f:5c:86:a1:04:3e:ed:5a:cc:4c:eb:
5c:55:81:0f:d4:ab:65:3b:b6:04:ff:ad:ac:21:64:
e0:d3:e0:03:a2:81:77:ee:61:e1:23:f5:8e:bf:90:
fa:a9:22:3f:53:71:df:e2:c6:15:de:9a:3c:2a:b2:
a6:43:1d:0b:94:5e:cf:6c:6b:6e:e9:0a:cc:dd:cf:
56:57:25:d3:3c:da:d3:2b:d3:d3:25:fe:2d:ca:de:
99:4b:7e:99:ba:e5:b3:88:76:56:59:8f:a9:8c:e9:
f1:75:d5:58:7e:7a:13:cb:15:04:02:8d:fe:d1:7d:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5B:6A:55:A1:C6:AF:3D:CB:5E:FF:9E:6F:6B:9C:20:1E:32:98:35
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/-VtqVaHGrz3LXv-eb2ucIB4ymDU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.96.0/22
103.202.116.0/22
103.255.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:2a:34:c4:0e:69:6c:d3:3b:f8:05:c3:f9:9d:67:43:48:09:
cb:24:ab:c8:6b:1d:6f:3d:9a:2c:27:cd:d9:cf:09:99:e7:5d:
18:51:86:dc:88:62:ae:e0:a3:ce:b3:b7:1d:89:0c:29:d3:e5:
ff:19:c4:86:14:b5:fe:a5:92:37:b0:b6:89:7b:8e:2a:9a:fd:
a4:a5:ca:d4:ce:e2:d5:61:9e:a6:37:a7:01:88:d6:13:40:60:
e5:ba:64:f7:ca:69:aa:29:11:6a:c7:b8:d8:55:c6:70:ef:a5:
10:a5:ae:54:f4:bc:18:1b:02:18:3d:19:41:b5:af:de:31:14:
d8:4f:45:0d:e5:2e:ae:de:6e:92:cd:b2:60:78:94:3c:26:0b:
9e:cf:fb:e4:57:67:fa:7c:57:38:73:3d:91:7e:6d:f3:1a:4a:
2b:33:8e:24:c5:e9:56:62:df:71:f0:0f:32:b4:76:ac:19:12:
42:5e:c6:9f:af:c2:35:f4:87:3e:a9:26:2a:04:7d:70:16:54:
57:ff:5a:bc:7b:70:2e:b1:33:35:8e:61:af:55:b5:be:d2:e0:
cf:57:a2:df:c3:6c:32:37:71:0a:35:41:e7:d2:dd:32:36:52:
82:d5:b1:18:f8:df:89:bd:76:f4:30:a4:da:9b:40:fd:a5:47:
c3:be:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org