Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/R-xN1ZITWLwA2DFUOU_wsZmUBGE.roa
File: R-xN1ZITWLwA2DFUOU_wsZmUBGE.roa (raw, json)
Hash identifier: /ZoztxuHd6BKRIUxOLfo99jwzjJbniFfbajGtCBQ3HU=
Subject key identifier: 47:EC:4D:D5:92:13:58:BC:00:D8:31:54:39:4F:F0:B1:99:94:04:61
Certificate issuer: /CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Certificate serial: 03
Authority key identifier: 81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/R-xN1ZITWLwA2DFUOU_wsZmUBGE.roa
Signing time: Thu 27 May 2021 05:02:09 +0000
ROA not before: Thu 27 May 2021 05:02:09 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 59033
IP address blocks: 103.204.72.0/22 maxlen: 24
202.160.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Validity
Not Before: May 27 05:02:09 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=47EC4DD5921358BC00D83154394FF0B199940461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:3c:1c:b2:97:a7:14:4a:3b:b9:a4:c8:d3:
fe:e9:d1:d9:7b:4c:42:08:20:77:cb:d9:51:96:56:
31:c9:35:67:e8:81:28:4f:5a:4b:70:63:0f:19:50:
f7:b7:2a:55:c5:0b:8a:9e:6f:84:a2:c5:c9:8c:f9:
9d:b7:01:49:a6:65:21:8a:0d:dd:2a:2d:50:19:e5:
38:55:90:2f:57:b0:38:c6:f4:b3:00:52:ad:6d:f9:
5c:6b:dc:8a:d0:b8:44:3f:22:3b:36:19:47:19:c6:
75:88:86:da:68:83:d0:7c:9f:aa:25:a6:4f:e9:f5:
38:b9:c3:cb:20:0f:ff:c2:fb:68:12:b0:36:d6:aa:
b3:89:05:24:21:05:cf:20:7f:b7:99:ed:7e:6f:75:
e4:3e:6c:26:6c:3d:e7:5a:b4:61:49:cc:ae:1d:1b:
32:b5:4c:85:fb:ed:04:5d:15:74:78:41:66:aa:53:
00:1a:27:0d:50:8d:5a:27:26:96:5f:47:6f:39:2f:
f1:71:b3:53:c9:01:d1:88:57:bf:6d:94:c8:f8:e8:
82:ae:8c:e1:d5:af:18:9c:27:97:d6:f8:9a:b6:cc:
b2:6b:78:c0:28:a7:86:be:37:de:1a:73:3e:eb:4b:
f5:61:ee:96:52:de:a0:a3:8a:2c:f7:f2:23:f4:8c:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EC:4D:D5:92:13:58:BC:00:D8:31:54:39:4F:F0:B1:99:94:04:61
X509v3 Authority Key Identifier:
keyid:81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/R-xN1ZITWLwA2DFUOU_wsZmUBGE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
202.160.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:2b:0c:df:0c:7f:55:56:91:b4:84:28:6b:9a:3f:d4:e4:c0:
9c:07:07:34:a2:41:92:36:58:29:ab:5f:2e:b0:df:6f:3c:68:
5c:57:d7:7e:4f:58:f8:9d:57:cd:fc:b2:da:9b:27:ef:c6:34:
69:48:84:29:31:b3:44:03:98:38:b6:03:e0:cd:64:6c:6d:74:
e3:11:78:2c:47:bc:82:8e:99:33:5a:6e:20:5e:91:9a:ec:84:
4a:c9:f7:ce:20:68:de:6f:d9:5b:b1:69:35:c4:b1:7a:da:6e:
e3:d8:77:55:63:cb:7e:e3:b8:55:92:48:2c:c8:8b:8a:78:64:
33:62:49:25:53:64:d7:ec:f9:45:fd:1a:f0:4e:8d:6d:ad:b2:
bc:74:71:ca:2f:11:27:5b:e3:49:51:78:9a:4a:33:51:02:22:
33:42:2e:91:37:de:4a:d9:40:56:bc:15:c0:45:25:5a:07:57:
65:a4:f9:ac:ac:42:e9:1a:1b:eb:73:cd:0e:79:d7:5a:d6:38:
45:2d:13:b2:7f:db:bb:ad:d0:2c:bb:6e:9a:29:bf:50:92:ba:
f9:84:6e:37:56:3b:ba:75:6c:69:9e:f4:e6:95:98:f9:03:01:
8a:fb:95:1d:fa:63:d4:46:a7:7c:57:e8:59:24:19:0c:97:81:
66:3f:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org