Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/B2Vncqk_fReLsxsC1WOoTecpyqc.roa
File: B2Vncqk_fReLsxsC1WOoTecpyqc.roa (raw, json)
Hash identifier: zCwYGq4a6slHnBkzk3Zy3rod0QdAEC0rK+c68OnBI/Q=
Subject key identifier: 07:65:67:72:A9:3F:7D:17:8B:B3:1B:02:D5:63:A8:4D:E7:29:CA:A7
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 0976
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/B2Vncqk_fReLsxsC1WOoTecpyqc.roa
Signing time: Tue 07 Jun 2022 10:10:16 +0000
ROA not before: Tue 07 Jun 2022 10:10:16 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 132168
IP address blocks: 103.204.72.0/22 maxlen: 24
202.160.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2422 (0x976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Jun 7 10:10:16 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=07656772A93F7D178BB31B02D563A84DE729CAA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:0a:a2:6a:e4:33:79:5b:10:27:40:42:b8:
c2:d9:38:37:5a:12:dc:72:d5:71:df:23:24:3e:0b:
d0:bd:88:34:81:0f:60:e1:42:2e:1c:a0:18:1c:d5:
1d:30:0b:be:80:24:af:6a:55:1b:c5:57:d3:79:47:
fe:63:47:69:a1:ad:6f:53:d1:a7:20:85:cf:ce:68:
25:9e:ab:79:b6:27:12:ec:7d:1b:ca:a1:82:ad:55:
55:98:48:9f:03:a8:cd:0a:f9:2d:d5:5b:8a:27:39:
a6:9c:98:45:8f:45:ae:d7:a8:fd:13:13:3f:6e:ea:
fc:01:b0:3e:ab:ba:50:bf:2e:8e:3e:5d:b9:c9:a6:
9c:e6:55:51:53:48:20:f9:d1:5c:6d:41:13:dc:c4:
1b:41:cc:2a:1f:a1:8f:f1:d9:a8:43:59:84:b9:d1:
6f:fd:c6:98:3b:72:ed:aa:e4:18:3c:5e:37:fe:fd:
c2:f9:38:e4:1e:6a:01:6b:a9:3d:ba:6f:e8:f3:5b:
34:93:03:ac:e3:62:eb:0b:0a:f0:3c:91:a8:2a:1f:
fd:14:5e:f8:9d:dc:ac:0c:01:29:7f:b5:e8:50:b8:
83:ac:74:47:e4:65:c2:47:da:43:0e:db:18:96:83:
b4:77:39:7a:77:5a:8b:a4:b9:92:02:a5:76:56:3f:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:67:72:A9:3F:7D:17:8B:B3:1B:02:D5:63:A8:4D:E7:29:CA:A7
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/B2Vncqk_fReLsxsC1WOoTecpyqc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
202.160.140.0/22
Signature Algorithm: sha256WithRSAEncryption
07:0c:2e:cf:9e:65:47:8c:d2:3d:92:74:ce:bd:31:af:f9:a2:
c1:f5:0b:9d:2e:b1:21:5e:eb:70:af:31:4b:a1:1c:24:48:b2:
94:ac:1a:6e:c6:c5:ba:73:51:88:b6:14:eb:4a:19:b2:54:5e:
43:9e:32:5e:03:94:48:29:cc:ea:b7:8b:f6:f9:fe:e3:ef:b9:
e7:ec:de:14:d7:da:14:20:e3:a7:c9:86:12:0f:e8:c9:c0:58:
ff:c8:d3:74:8d:45:46:53:e5:7a:b1:99:fa:1b:64:f5:78:54:
6e:74:ac:5c:70:a2:75:e3:e4:ef:92:97:9c:5b:fd:dc:f5:b5:
63:7f:9c:9e:e1:ea:1e:39:42:4e:ea:14:bf:17:a2:f7:f0:80:
19:eb:cb:d3:ee:ba:c9:f6:2b:65:1c:eb:0f:49:6c:5b:fc:e9:
54:d2:0d:90:f2:e3:50:8e:e3:3a:01:33:3a:48:09:fe:43:cf:
5a:06:fd:a4:bc:08:96:9a:db:03:70:a0:52:45:c6:1e:7f:c6:
9a:ff:2c:c0:94:44:16:39:0a:ea:45:0c:03:70:30:5d:24:f9:
3c:56:b5:cb:71:cc:c1:aa:de:d8:7a:36:83:43:18:2e:7a:99:
68:78:1c:60:26:e2:3b:b4:5d:ca:c5:60:1d:ca:1e:31:6a:c8:
c4:5a:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org