Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/div6_R3Csi9PCLVwL-kDgb6llUM.roa
File: div6_R3Csi9PCLVwL-kDgb6llUM.roa (raw, json)
Hash identifier: VjiFThIuR8RCtz5pGaInM2De5ZvrSY7sBFzpa9AjVOY=
Subject key identifier: 76:2B:FA:FD:1D:C2:B2:2F:4F:08:B5:70:2F:E9:03:81:BE:A5:95:43
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 0975
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/div6_R3Csi9PCLVwL-kDgb6llUM.roa
Signing time: Tue 07 Jun 2022 10:10:16 +0000
ROA not before: Tue 07 Jun 2022 10:10:16 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 63689
IP address blocks: 103.204.72.0/22 maxlen: 24
202.160.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421 (0x975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: Jun 7 10:10:16 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=762BFAFD1DC2B22F4F08B5702FE90381BEA59543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:84:95:9c:f9:39:d4:ed:a7:fb:fd:86:6e:
84:32:e7:69:07:f6:b0:3c:3b:2d:42:6a:ac:f6:e2:
bb:e1:a0:93:48:8d:03:49:7b:83:c0:fe:8e:b5:69:
d8:ed:55:b9:01:15:29:31:73:e9:7a:05:fa:83:73:
b4:8c:2e:9c:f8:d0:20:cc:83:1e:1c:bb:61:75:95:
0d:b1:f4:59:01:44:c8:fe:60:40:05:c3:44:af:f9:
3b:7a:69:fc:b1:53:28:64:ff:0c:35:d1:d3:c5:64:
e3:d8:3f:0e:00:60:79:1e:ea:c9:cf:f3:ce:45:a2:
63:71:26:0f:e4:f0:e8:d8:0e:d8:70:79:78:11:58:
75:f8:66:fa:9e:0e:85:c1:76:8f:60:f6:54:54:a2:
53:e2:3b:00:58:a1:d7:de:28:1f:2f:21:bb:ec:6d:
5c:85:64:ff:a1:26:cd:8c:7d:28:b3:ae:e0:26:82:
92:9d:46:d6:23:ff:06:62:18:74:ec:51:15:4c:bd:
15:3e:79:8c:4d:38:7d:8e:df:04:02:11:07:02:fa:
4d:1e:2b:4f:09:d2:e7:cd:e6:ba:31:bc:ee:73:25:
ad:9c:51:83:da:a2:1e:cc:11:2e:7a:bd:9a:24:39:
ee:f0:7c:a6:66:47:36:63:77:09:30:fc:1a:3f:ba:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2B:FA:FD:1D:C2:B2:2F:4F:08:B5:70:2F:E9:03:81:BE:A5:95:43
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/div6_R3Csi9PCLVwL-kDgb6llUM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
202.160.140.0/22
Signature Algorithm: sha256WithRSAEncryption
06:e7:d4:60:ab:31:34:a2:24:38:92:de:ad:28:d0:76:e1:cf:
e4:29:1d:76:bf:9d:ee:5a:07:a5:43:bf:ef:90:9f:0c:07:d7:
34:40:49:7d:b7:34:33:68:b0:e9:98:3d:26:32:60:ca:65:3d:
8b:69:69:8b:b4:e5:81:49:6d:6d:0d:57:cf:49:5b:1b:9c:19:
9f:14:80:ee:d6:cb:9a:7a:53:74:f9:06:e1:c3:76:f1:32:fe:
fb:31:9f:83:c2:f6:1b:d7:2b:cb:86:35:92:c5:4c:7b:e1:40:
2a:20:1c:e1:c3:a7:4b:43:45:55:49:52:63:ea:6e:a4:ee:f0:
00:f2:63:88:87:4d:e1:7d:47:17:a9:26:dc:1e:1b:74:67:43:
2a:15:0f:b8:67:23:15:dc:10:3a:e6:e9:e9:cb:84:cb:40:ef:
85:e1:29:c6:b1:b0:88:30:86:71:9b:94:a5:be:87:05:86:02:
4c:8f:85:17:ef:6f:fc:74:c5:cd:bd:7d:6a:8a:2d:6a:7c:e4:
d1:de:ef:cc:b3:0b:ef:3d:54:b5:f1:38:1e:b4:b4:45:f7:32:
94:47:2e:8f:11:d2:99:ab:7c:e8:dc:85:a6:82:2f:9d:7e:c6:
19:5c:72:24:74:53:34:b4:bb:c6:07:48:bc:ca:20:8f:ca:a0:
e7:ab:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org