Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/8a8Y8qqggNRxFQnOIQzJoUWE9Bw.roa
File: 8a8Y8qqggNRxFQnOIQzJoUWE9Bw.roa (raw, json)
Hash identifier: xkzvh/hn6wXpK4gF2URij5BaTl2H/3vzguGIwSxzhNw=
Subject key identifier: F1:AF:18:F2:AA:A0:80:D4:71:15:09:CE:21:0C:C9:A1:45:84:F4:1C
Certificate issuer: /CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Certificate serial: 05
Authority key identifier: 81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/8a8Y8qqggNRxFQnOIQzJoUWE9Bw.roa
Signing time: Thu 27 May 2021 05:02:09 +0000
ROA not before: Thu 27 May 2021 05:02:09 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63689
IP address blocks: 103.204.72.0/22 maxlen: 24
202.160.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Validity
Not Before: May 27 05:02:09 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=F1AF18F2AAA080D4711509CE210CC9A14584F41C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:b8:90:24:e0:4e:01:2c:89:eb:55:c2:d2:
e7:8e:ea:07:6b:ad:a3:e0:90:03:5f:30:ac:80:2f:
e8:9b:d4:c7:4b:f1:2b:d9:86:be:aa:9a:fc:b9:70:
bb:fd:c4:fc:3f:96:17:f9:02:4e:f1:d4:45:47:58:
c4:a3:eb:7e:48:be:4f:6e:d1:9c:d7:cf:11:1d:33:
06:b2:14:80:b7:57:69:34:78:43:56:09:ff:bd:81:
7a:fc:6a:04:93:24:e8:b9:99:d5:aa:57:2b:97:aa:
70:de:bb:2f:10:19:3f:07:24:54:b3:9e:3d:f0:c6:
bc:9d:8a:c8:d6:a6:62:16:35:f2:97:41:3c:08:65:
95:fb:d7:3b:fa:d4:32:f9:e0:1a:bc:65:22:b6:47:
3e:08:18:47:6e:98:ce:1d:5d:4e:c8:1a:8a:1a:2c:
b4:b7:ce:b2:4c:29:f4:2a:13:ae:b3:83:db:b7:f2:
58:90:3f:97:fc:fe:5a:38:dd:fe:60:a6:b8:85:4a:
e5:03:6a:66:aa:cb:90:df:1b:e7:1c:a5:13:36:43:
64:66:3e:5b:37:63:27:5c:14:50:d0:88:48:6e:ec:
e2:68:f1:5a:fc:23:6d:88:78:2f:90:cd:95:6d:74:
14:27:e6:2e:75:80:0a:ce:d9:e4:28:66:ec:d1:3e:
5d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AF:18:F2:AA:A0:80:D4:71:15:09:CE:21:0C:C9:A1:45:84:F4:1C
X509v3 Authority Key Identifier:
keyid:81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/8a8Y8qqggNRxFQnOIQzJoUWE9Bw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
202.160.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:9e:8c:1c:b8:18:da:28:56:5a:8b:98:af:72:34:2f:00:e9:
00:72:65:87:59:e4:19:5b:b8:b2:80:0d:57:b5:2c:8a:37:74:
08:8b:2e:27:8a:1e:71:ec:dd:79:b0:dc:1c:cf:35:d8:ca:57:
3d:1a:50:a3:fe:86:a0:bf:22:55:5e:28:eb:d1:88:16:2f:ab:
75:e4:fe:ea:50:6a:21:50:38:50:3a:60:6f:18:36:4f:51:7e:
c8:3e:f7:5f:51:9f:bb:2f:e5:72:6b:f5:12:3b:cc:eb:20:a0:
7b:75:84:5e:cf:56:e6:d0:6e:77:53:f9:f6:80:57:23:0f:1d:
82:bb:1e:b0:5b:d1:c9:af:78:4f:35:de:0d:76:15:04:5e:87:
6b:81:3d:94:d8:cc:62:d4:c6:8b:d0:a6:55:d1:01:cd:e7:91:
3e:65:09:bc:1f:b8:db:2c:58:9e:79:cf:08:40:47:6a:b9:87:
66:bf:96:4a:e8:e7:cd:0d:46:4b:61:98:f1:90:db:6e:a3:fc:
c6:c3:a8:67:d9:f9:f4:61:70:86:73:4e:de:ca:80:ff:e4:5c:
e4:58:7c:0d:f5:0b:93:93:dc:25:6f:dc:db:fb:b2:ec:7d:60:
6b:d3:f7:f8:bf:e6:8c:5b:49:69:4a:02:e8:bf:f9:8c:14:12:
81:0a:61:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org