Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/Ky-5CWhz47_HA50FMol3mqdq9AM.roa
File: Ky-5CWhz47_HA50FMol3mqdq9AM.roa (raw, json)
Hash identifier: c+wG1Fp5b3QPYuvlg/ZoGtRKPTsEFtL3aYFa8oeyLU8=
Subject key identifier: 2B:2F:B9:09:68:73:E3:BF:C7:03:9D:05:32:89:77:9A:A7:6A:F4:03
Certificate issuer: /CN=F76C9E43361DEA446077AD7029057380AFFF3266
Certificate serial: 0D53
Authority key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/Ky-5CWhz47_HA50FMol3mqdq9AM.roa
Signing time: Tue 07 Jun 2022 02:17:33 +0000
ROA not before: Tue 07 Jun 2022 02:17:33 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 24424
IP address blocks: 103.203.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3411 (0xd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F76C9E43361DEA446077AD7029057380AFFF3266
Validity
Not Before: Jun 7 02:17:33 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=2B2FB9096873E3BFC7039D053289779AA76AF403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:4e:55:fc:3c:62:96:58:ca:50:c8:37:39:
d0:19:6c:8e:df:2d:1b:70:c2:30:bc:9e:11:2f:b2:
97:c1:38:c8:f4:5b:79:0a:ba:95:c4:d8:19:a7:d0:
03:51:44:79:ac:93:ec:02:06:d5:7d:cd:37:e7:e4:
f6:6a:09:37:86:87:1b:a5:e7:37:1c:df:3c:4e:44:
13:7d:3d:3c:ad:5c:fb:36:c0:25:38:c0:b9:06:c1:
58:99:5e:fc:b0:47:f1:09:43:79:71:c7:03:81:b8:
b0:87:2b:0b:90:0c:eb:be:1c:30:b0:c9:39:26:8e:
14:f4:ca:79:ad:d8:f1:9b:99:e1:a2:cb:52:fe:7a:
19:48:ee:b0:19:8b:c4:69:1d:75:8a:11:3c:31:65:
d5:0f:99:c5:b6:6a:3b:e8:f6:29:03:35:c1:94:69:
16:ff:b0:8e:dc:8d:cc:d0:31:3b:75:37:bd:ab:30:
22:d0:76:f7:dc:0a:9f:ea:ed:09:a9:e4:29:25:95:
a8:7e:c4:15:f5:9e:17:b3:d1:da:25:87:60:eb:28:
bd:47:dd:6e:12:5c:db:06:98:5c:8a:e7:10:b4:6e:
79:c0:18:bc:a8:ef:70:b5:ae:2d:1c:90:28:ac:18:
b4:9d:8b:4a:26:0c:71:5f:8b:8a:73:1f:eb:f7:ac:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:B9:09:68:73:E3:BF:C7:03:9D:05:32:89:77:9A:A7:6A:F4:03
X509v3 Authority Key Identifier:
keyid:F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/Ky-5CWhz47_HA50FMol3mqdq9AM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.212.0/22
Signature Algorithm: sha256WithRSAEncryption
61:71:00:64:4f:5d:9d:5e:a4:66:1e:c6:e5:4c:d0:70:8f:ba:
4f:92:f7:84:d7:e2:29:28:c5:e1:7a:00:ad:19:03:e6:93:a7:
ee:da:ef:96:82:3f:eb:18:ba:ad:fe:fd:bf:78:c7:37:7e:ee:
cb:fc:89:2a:25:a5:13:36:ed:90:0d:02:11:46:30:bb:67:9e:
c4:d2:a2:65:6b:12:de:56:ce:7d:25:73:09:b4:97:c9:09:a4:
42:34:a6:1e:e5:a4:8b:09:d7:62:2a:b6:52:3b:79:51:18:b0:
3b:ff:e0:75:1f:76:db:16:1b:ca:1d:b6:d7:2f:d0:8d:7f:14:
73:ea:0b:77:ea:26:56:54:a3:4f:f5:2a:ce:9d:ee:ff:8a:98:
53:00:48:5e:26:36:d7:83:7e:eb:8b:69:64:19:ec:94:9c:e0:
bf:c1:96:34:9a:f3:5d:6c:b4:bf:d5:bb:f9:c2:c9:72:4f:53:
52:b7:da:03:88:9c:49:0b:44:9f:17:5b:1e:74:a0:0b:0f:38:
78:97:3f:a4:35:65:a9:25:65:a4:8d:1a:44:dc:a2:97:76:d9:
2c:21:49:d2:30:b6:c6:ae:2d:14:dc:e2:21:fd:a9:75:4f:72:
a4:28:19:9b:02:65:ad:f4:e4:92:cf:09:b3:09:de:33:f1:8b:
5a:ef:92:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org