Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/RfU0MHRmk-tlbwjEhFsIOyHgxt0.roa
File: RfU0MHRmk-tlbwjEhFsIOyHgxt0.roa (raw, json)
Hash identifier: 0XOsnDZ1YLH8UWSUu42HuqrDGdm6Y3GG2j9VkGwWDyk=
Subject key identifier: 45:F5:34:30:74:66:93:EB:65:6F:08:C4:84:5B:08:3B:21:E0:C6:DD
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 0F2B
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/RfU0MHRmk-tlbwjEhFsIOyHgxt0.roa
Signing time: Tue 07 Jun 2022 02:16:15 +0000
ROA not before: Tue 07 Jun 2022 02:16:15 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 59067
IP address blocks: 103.36.96.0/22 maxlen: 22
103.202.116.0/22 maxlen: 22
103.255.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3883 (0xf2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Jun 7 02:16:15 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=45F53430746693EB656F08C4845B083B21E0C6DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:7b:da:67:4e:dd:99:e3:29:25:14:cf:36:
89:45:10:cb:ae:8b:0e:25:f5:31:c5:b0:f9:44:3c:
1d:2c:94:4f:68:24:11:3c:14:0f:68:bf:50:b0:9c:
e3:6a:06:ee:38:0b:30:3a:8a:45:08:95:2c:a5:96:
ce:c4:20:a8:f6:c2:68:78:8d:90:34:03:d4:92:3f:
b3:9e:bb:8c:af:d2:a0:af:4f:88:d2:4f:84:64:63:
12:57:9b:bf:49:22:89:5b:5a:9f:5b:47:8d:fb:a7:
1c:b0:21:15:15:77:77:c8:4a:1f:f4:f0:d5:ad:a7:
be:d8:1f:f4:09:74:96:86:84:ab:ac:d2:4d:9d:30:
71:65:9e:46:3e:56:39:eb:d3:83:6b:7f:4c:b8:df:
0d:dd:20:0f:59:63:52:57:08:a9:a7:99:45:e5:bc:
44:4f:93:7d:a2:43:07:93:c8:cc:24:c5:19:6a:82:
38:f6:07:57:d1:f6:0e:3d:bd:db:12:90:79:f2:c3:
f8:d2:80:ea:3a:e5:c9:6e:14:a8:fa:2b:31:34:35:
a8:b4:50:6e:04:e1:eb:d5:bb:36:7a:f6:c6:99:75:
d1:e6:14:b3:b5:cf:ca:f2:53:e0:41:ce:48:e8:7d:
74:33:c7:fa:41:3b:0f:4f:0b:4c:41:a0:54:85:10:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F5:34:30:74:66:93:EB:65:6F:08:C4:84:5B:08:3B:21:E0:C6:DD
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/RfU0MHRmk-tlbwjEhFsIOyHgxt0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.36.96.0/22
103.202.116.0/22
103.255.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:ab:e1:c8:70:77:b6:5e:87:f8:ad:99:0d:17:0d:38:3f:e9:
fb:a2:b8:d5:f8:98:32:57:f2:34:e7:97:80:84:40:41:ea:e4:
7b:35:20:75:91:4f:30:16:0b:2a:31:58:d9:d0:41:83:fd:bc:
97:90:3e:73:55:12:5f:4d:b4:f3:e3:b6:5c:5e:5b:27:e7:83:
6a:ed:d7:2a:f5:14:b7:bd:fd:fe:29:b4:f6:16:2c:b1:91:9a:
8c:d2:fd:b5:03:cd:60:cc:f2:d7:e1:05:95:5f:f2:e8:b0:d2:
f6:8f:4e:cc:5c:e9:2b:48:f2:e2:8e:0a:e5:14:c8:87:3c:20:
98:51:de:de:52:56:7e:e5:e5:4d:46:5a:28:48:a0:87:ae:e5:
e0:c7:44:4e:9b:eb:84:01:f5:b5:c7:1a:c3:11:17:97:8a:08:
98:98:19:ae:3c:e6:eb:f3:43:e2:38:2b:72:e5:8f:43:fb:cd:
06:0c:d3:79:10:19:d3:4a:1b:3d:d4:eb:77:5a:b8:02:9a:11:
bd:73:a1:5e:02:1f:ab:db:43:db:ff:7c:4f:5b:d3:60:a6:49:
16:bf:ed:80:3f:09:4d:3b:8f:75:b2:aa:69:6a:6b:e0:f2:2a:
61:e5:9c:fa:93:c9:55:1a:6f:19:28:83:38:ce:ae:fe:49:8b:
f5:bf:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org