Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/QtNEBGK2CgOkqCg6iwn-TTA-Lv8.roa
File: QtNEBGK2CgOkqCg6iwn-TTA-Lv8.roa (raw, json)
Hash identifier: xKd+U3nco1fC5oaI7I8rV8I5EOMnip7h1wxnbo5Xw+Q=
Subject key identifier: 42:D3:44:04:62:B6:0A:03:A4:A8:28:3A:8B:09:FE:4D:30:3E:2E:FF
Certificate issuer: /CN=78F1EEC94794DA5530B552AFC84232040D5A5455
Certificate serial: 0790
Authority key identifier: 78:F1:EE:C9:47:94:DA:55:30:B5:52:AF:C8:42:32:04:0D:5A:54:55
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ePHuyUeU2lUwtVKvyEIyBA1aVFU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/QtNEBGK2CgOkqCg6iwn-TTA-Lv8.roa
Signing time: Mon 23 Aug 2021 09:15:41 +0000
ROA not before: Mon 23 Aug 2021 09:15:41 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 59067
IP address blocks: 103.255.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78F1EEC94794DA5530B552AFC84232040D5A5455
Validity
Not Before: Aug 23 09:15:41 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=42D3440462B60A03A4A8283A8B09FE4D303E2EFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:38:78:42:14:d7:31:89:c2:e4:b9:86:e3:
31:6d:69:e9:33:7b:17:b0:e5:07:d7:b6:de:c0:7e:
ae:b9:55:6c:d6:f5:32:31:23:8d:f7:c3:11:af:5c:
0f:0d:f4:ff:5e:e6:6e:83:32:60:69:13:3e:ba:ce:
42:5a:0b:2a:4f:9a:3a:09:4d:59:32:da:4f:0b:2c:
90:0a:95:56:1f:e5:66:5d:e7:f5:e7:e9:d6:93:2e:
bf:95:06:b6:2b:b6:48:7c:09:9e:a1:98:b7:08:b7:
00:4a:fc:b9:7e:d1:d6:2f:6b:4f:60:08:4a:ea:d0:
7b:7b:8b:20:16:64:ae:ac:e9:2e:37:70:32:bc:08:
4a:e3:c2:ec:9d:73:b6:aa:9f:6e:d2:0a:67:94:e3:
97:76:d5:ba:c8:51:b9:1e:54:15:7a:d7:1d:33:3f:
bf:1f:8e:0c:33:7a:bf:0f:dc:37:61:10:97:a2:80:
4b:48:ea:b3:d7:e2:ef:7d:27:74:9a:a9:4d:7b:b1:
36:37:aa:4a:2d:8c:b7:0c:03:b1:31:a1:ec:38:33:
b3:72:66:9f:1c:e2:2d:d4:cf:17:71:2e:8a:9f:0a:
bf:e5:eb:a6:e8:d2:6a:b2:53:69:32:07:4e:8e:aa:
97:a5:53:91:e5:33:76:8f:1a:44:0d:f8:ba:35:3f:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D3:44:04:62:B6:0A:03:A4:A8:28:3A:8B:09:FE:4D:30:3E:2E:FF
X509v3 Authority Key Identifier:
keyid:78:F1:EE:C9:47:94:DA:55:30:B5:52:AF:C8:42:32:04:0D:5A:54:55
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/ePHuyUeU2lUwtVKvyEIyBA1aVFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ePHuyUeU2lUwtVKvyEIyBA1aVFU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/QtNEBGK2CgOkqCg6iwn-TTA-Lv8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.140.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:83:78:fd:f7:46:05:96:78:6d:e4:8d:6d:73:b0:e2:32:32:
17:aa:b8:9a:a4:49:0a:e6:31:92:84:cc:a0:90:d6:d5:8f:07:
9e:d9:32:9d:78:3b:f4:a6:b9:bb:bf:25:bb:f6:ef:8a:4c:ec:
11:0f:9e:f8:b6:ef:c3:51:fd:2b:db:30:f7:a9:d0:bd:06:ac:
8b:07:39:cd:09:fd:10:f8:7d:2b:f4:30:fe:c9:eb:4c:b8:bf:
0e:88:14:a2:02:88:84:98:89:95:d8:67:a6:65:57:55:65:73:
b7:fc:75:b3:9f:66:08:03:cf:f6:9e:d8:b6:39:1c:c0:5a:ca:
3a:a6:14:fc:38:d6:66:b8:5f:fc:47:61:31:50:55:af:06:c2:
34:5d:2c:73:56:55:91:62:65:d3:fb:27:fb:43:fe:13:27:37:
14:24:cc:78:fb:b7:e3:ac:b9:ff:ed:0d:d2:f4:98:2a:2e:29:
61:e0:dd:0a:f0:eb:bd:06:23:e7:ef:b6:3d:9d:fb:92:89:f8:
ff:28:60:8e:8e:c5:50:08:67:39:2f:55:2e:a2:d5:4a:0c:1e:
31:ce:89:84:2f:cd:e3:f3:96:21:a8:22:af:ce:e2:43:4d:86:
ab:3e:76:f3:77:29:a5:e3:b4:2e:9a:76:11:29:3f:9a:4f:e8:
b0:50:d4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org