Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/hUs-UOIxnbVQnI1Od0IR8EvDaTw.roa
File: hUs-UOIxnbVQnI1Od0IR8EvDaTw.roa (raw, json)
Hash identifier: xTvLrJib0/jZR4kc3lmrCtegDcuSNrlatV+2UZR7vEY=
Subject key identifier: 85:4B:3E:50:E2:31:9D:B5:50:9C:8D:4E:77:42:11:F0:4B:C3:69:3C
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 0F28
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/hUs-UOIxnbVQnI1Od0IR8EvDaTw.roa
Signing time: Tue 07 Jun 2022 02:16:13 +0000
ROA not before: Tue 07 Jun 2022 02:16:13 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 59067
IP address blocks: 103.255.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3880 (0xf28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: Jun 7 02:16:13 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=854B3E50E2319DB5509C8D4E774211F04BC3693C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:89:50:72:3f:9e:15:a6:80:25:7e:7a:ed:
ea:6a:35:f8:bb:45:a8:55:f7:d4:c3:85:5b:cd:73:
c0:db:39:a5:9f:d1:bc:54:1c:61:77:f9:6d:9c:27:
99:b6:9f:12:db:37:88:e4:da:d1:dd:2e:70:d9:05:
a7:f0:00:ad:62:fb:28:38:6d:df:41:f4:0d:92:c4:
e2:cf:8b:c1:30:61:13:31:af:24:49:49:67:0e:f8:
04:d2:f6:a9:40:05:0b:57:0b:83:51:6e:b1:f0:ab:
8b:fb:b5:0f:6f:77:cf:97:cc:13:36:b1:fd:36:47:
8a:c2:ea:c7:c8:60:e5:98:25:eb:7e:db:9d:3c:7a:
35:68:a5:59:2c:87:23:5b:eb:c5:34:01:a3:96:56:
f7:f0:5a:05:e9:9b:1f:b8:d3:3b:c9:67:8d:31:82:
a3:15:44:0f:ee:1a:23:fe:e6:00:1b:b1:eb:aa:93:
49:2f:d9:92:15:b2:80:37:cc:1e:97:51:de:b3:16:
fe:0c:df:37:c6:a7:98:ae:fd:ce:e5:c0:3c:0a:bc:
2c:3f:8c:d6:9b:67:56:1d:cf:a0:1d:1d:55:d2:05:
ca:f2:d6:67:ea:74:16:4a:ce:8e:02:d4:86:ef:ed:
08:74:09:fc:61:fd:0a:00:df:69:b3:18:0c:de:a4:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4B:3E:50:E2:31:9D:B5:50:9C:8D:4E:77:42:11:F0:4B:C3:69:3C
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/hUs-UOIxnbVQnI1Od0IR8EvDaTw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.140.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:6b:d1:36:0f:d1:b3:cd:55:78:c0:5a:60:68:4f:3b:7f:b0:
a3:3f:cb:a8:7e:c5:e4:b1:06:7a:0f:09:44:2d:c9:8e:64:79:
72:07:c6:10:5e:f1:6e:ff:1d:db:19:a2:73:c7:09:06:d6:e1:
bb:38:55:df:d3:28:5f:cb:d5:14:6c:b7:e7:ec:26:1f:d4:91:
23:dc:bc:7d:3d:d8:97:ad:b0:e2:1d:75:f3:4a:f0:e3:40:87:
25:2d:12:36:02:49:4f:e1:4a:cd:08:1b:1e:77:e4:87:e5:2b:
23:a6:97:dc:7b:88:8f:4e:bc:f2:3e:fb:4a:e5:c6:8f:a0:24:
58:30:e8:cd:cf:ac:36:65:b8:d1:27:fc:6b:ba:b7:0e:22:6b:
af:76:f6:ad:a4:5e:ac:53:fc:6e:0d:7b:45:2f:66:8a:7d:5a:
ce:6d:f8:c7:15:9d:63:88:9b:73:1c:9f:21:a7:89:20:0d:7c:
0e:6d:e3:2d:82:ef:4f:58:d0:0f:32:08:96:8a:ea:c5:e6:1a:
86:01:4d:fd:81:db:b1:d5:1b:fe:1b:4f:7a:a1:c6:95:ea:00:
09:1d:a3:f7:6d:56:16:60:d3:0b:c7:89:de:53:98:13:03:81:
2c:65:5f:47:e3:b6:4e:20:c8:56:a5:a6:63:66:72:e6:2b:68:
d5:b8:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org