Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/eCtLPvNjq6N5hMu45KYWwLTs-JA.roa
File: eCtLPvNjq6N5hMu45KYWwLTs-JA.roa (raw, json)
Hash identifier: /eqrYXDbUjYDESRsaN7lriEDNM9pi/zmvv7On9aI97w=
Subject key identifier: 78:2B:4B:3E:F3:63:AB:A3:79:84:CB:B8:E4:A6:16:C0:B4:EC:F8:90
Certificate issuer: /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial: 1050
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/eCtLPvNjq6N5hMu45KYWwLTs-JA.roa
Signing time: Wed 24 May 2023 03:53:38 +0000
ROA not before: Wed 24 May 2023 03:53:38 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 59033
IP address blocks: 103.204.72.0/22 maxlen: 24
202.160.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4176 (0x1050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Validity
Not Before: May 24 03:53:38 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=782B4B3EF363ABA37984CBB8E4A616C0B4ECF890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:c0:8b:fa:86:81:24:d9:46:b8:64:e2:d7:
ad:eb:2b:70:7f:b4:f2:13:97:d6:76:a5:e7:f8:61:
e8:5a:87:ef:4d:eb:6f:7d:65:7e:72:9b:ef:c9:ff:
e1:03:0d:ab:3f:9d:47:80:4c:a0:d4:0d:bf:f8:e6:
d9:c6:62:ab:78:f2:9c:ff:64:41:35:ef:fb:8f:bd:
af:70:f3:98:ea:db:c4:de:51:79:24:c3:dd:d2:d2:
01:c3:d4:74:54:9d:13:7b:a6:68:0f:69:c6:1b:ef:
14:5b:06:99:bf:1d:c5:5d:e1:7d:11:da:c0:eb:2d:
77:e0:a4:6f:34:a0:9e:65:ff:a4:2c:de:b6:28:3b:
0b:78:29:f9:ef:2a:8b:e5:31:ba:a9:2a:a3:5b:b0:
30:7d:5c:b0:0b:6f:3e:b9:17:56:2a:20:32:ac:73:
1d:05:c7:b2:7f:39:bc:ee:65:9f:25:f1:15:3a:da:
1d:6c:bd:55:1b:04:37:4b:75:b0:c9:67:26:9b:08:
4f:e6:c3:61:eb:65:30:66:02:ea:0e:f5:2b:8d:96:
86:10:77:e8:b4:5d:20:16:6e:b3:f6:cb:91:10:9b:
ac:ca:65:c9:c4:be:51:de:41:23:f5:2d:dd:3f:a9:
0f:09:8c:88:a4:20:30:1b:8d:a8:be:f4:09:5c:13:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2B:4B:3E:F3:63:AB:A3:79:84:CB:B8:E4:A6:16:C0:B4:EC:F8:90
X509v3 Authority Key Identifier:
keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/eCtLPvNjq6N5hMu45KYWwLTs-JA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
202.160.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:ae:29:80:48:b2:d2:ba:5c:93:f4:ff:3f:37:86:e9:ef:90:
e0:39:f1:fb:5a:88:e7:00:48:32:78:6c:3e:85:4c:1d:d3:a2:
50:2f:f2:09:51:49:17:46:14:96:03:49:eb:ae:05:e6:a9:d1:
04:85:1c:72:ae:59:7a:a5:36:3c:14:ff:24:dd:5b:67:ae:f7:
d4:8c:ac:32:64:11:9d:a4:20:5f:85:ec:20:40:c8:b2:2a:5c:
e8:40:f3:4f:19:0a:4c:47:19:fe:65:3e:43:ec:30:d2:b7:43:
06:98:ad:69:d2:96:10:b6:e8:1a:53:04:82:cb:3d:14:00:65:
c4:48:99:53:8a:5e:f0:95:d7:53:85:75:e9:5d:b9:e7:17:45:
57:30:ee:5f:47:a7:d6:d5:73:1e:f9:b2:d1:57:9e:28:ac:ef:
98:12:b2:5e:72:01:36:3c:e8:34:6b:38:3c:57:ee:cc:46:df:
33:5c:34:0c:8c:e6:68:9c:69:c5:96:db:83:78:03:28:e4:2e:
4d:02:a0:b2:43:e2:2a:96:f9:78:3b:f9:32:d9:e7:d0:4d:1d:
12:8a:1b:bd:73:58:43:0c:33:5b:1c:64:93:25:1d:5f:d6:90:
e6:02:a1:ff:6a:62:27:08:09:fc:fb:a3:27:5f:d7:76:dd:b1:
65:15:a5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org