Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/wEDB4hvITO80yTKh-vhuAidpyQs.roa
File: wEDB4hvITO80yTKh-vhuAidpyQs.roa (raw, json)
Hash identifier: 9Rt0R7h7M20rTfdgIBOnX4Y/hq8dgI4SWKoID9i2+AM=
Subject key identifier: C0:40:C1:E2:1B:C8:4C:EF:34:C9:32:A1:FA:F8:6E:02:27:69:C9:0B
Certificate issuer: /CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Certificate serial: 06
Authority key identifier: 81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/wEDB4hvITO80yTKh-vhuAidpyQs.roa
Signing time: Thu 27 May 2021 05:02:09 +0000
ROA not before: Thu 27 May 2021 05:02:09 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 132168
IP address blocks: 103.204.72.0/22 maxlen: 24
202.160.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81FCB6319F0CB6C3598BD2154BB8CB4DB2BC430A
Validity
Not Before: May 27 05:02:09 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=C040C1E21BC84CEF34C932A1FAF86E022769C90B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:da:4f:d9:38:89:ea:b3:eb:68:05:15:de:
1e:5d:d9:90:17:dd:69:9d:11:74:e0:3e:32:2b:ce:
08:70:62:dd:57:d1:4d:e6:1b:d5:96:b9:33:58:4c:
ad:74:ef:18:6e:8d:8d:7e:03:5a:02:c2:a1:3d:62:
cf:64:c3:bc:7f:42:79:9e:29:81:77:54:b0:fc:f7:
2c:a0:b0:18:09:64:5e:c4:c1:33:c5:ed:bf:4c:ef:
21:e2:48:71:ba:ee:d6:5b:68:22:ea:e9:6f:b0:0c:
f7:77:41:39:24:f5:8a:cf:38:f2:4a:88:f3:82:b4:
eb:87:7d:71:f0:b6:58:e0:3e:8c:cc:34:ef:f9:0a:
57:49:0b:3c:60:9f:39:2b:1f:f8:c9:3f:e6:85:d9:
1e:f7:57:a5:66:8b:aa:9a:4a:5e:e8:f8:bc:20:94:
36:e1:38:f4:6c:64:5e:b5:eb:63:2c:11:98:fc:e9:
51:20:41:b3:67:54:27:22:61:4c:91:d0:27:79:37:
50:69:29:c8:12:f3:89:a6:5f:a6:12:db:17:9e:76:
5b:fa:6d:39:3c:a2:fe:53:d1:0d:ad:e7:20:8b:dd:
72:e8:f0:a4:31:f1:7f:ba:1e:c6:43:f2:5f:e7:f4:
27:16:43:af:90:7f:4a:c2:af:06:52:9f:47:7c:a7:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:40:C1:E2:1B:C8:4C:EF:34:C9:32:A1:FA:F8:6E:02:27:69:C9:0B
X509v3 Authority Key Identifier:
keyid:81:FC:B6:31:9F:0C:B6:C3:59:8B:D2:15:4B:B8:CB:4D:B2:BC:43:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gfy2MZ8MtsNZi9IVS7jLTbK8Qwo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/wEDB4hvITO80yTKh-vhuAidpyQs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.72.0/22
202.160.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:51:88:05:49:bd:9f:10:06:68:06:46:74:81:16:56:da:a3:
74:f2:de:47:52:5c:a8:93:d2:f2:22:37:16:08:73:a4:63:80:
18:db:fe:9d:25:aa:70:1c:7a:da:09:90:84:c9:fc:2f:96:2c:
82:ba:be:51:cb:e8:cc:ff:08:27:d4:0e:64:fa:f6:44:8f:e7:
b0:80:74:66:2f:45:cc:f5:f7:14:0c:eb:55:7c:2d:50:67:7c:
43:19:57:7d:94:ae:91:c6:6a:76:d4:db:76:a8:41:a0:f9:12:
26:11:f7:64:0b:2a:3b:87:b9:41:c9:60:4c:ca:02:a0:e5:88:
83:7c:69:a0:f2:37:19:30:32:9b:1b:3d:52:4f:9c:1a:cb:e1:
70:db:50:b7:2d:66:aa:09:68:9a:b1:df:39:9a:24:96:0b:b7:
89:8f:e5:eb:5b:5e:93:ec:54:b6:12:14:23:ad:88:84:82:b7:
ec:80:d0:31:45:cc:25:d7:1f:fe:12:24:2f:04:30:79:3d:81:
39:80:c9:76:bc:1f:25:64:79:b6:c1:16:41:c2:1a:d7:1f:28:
48:21:41:ae:7b:12:98:bb:3a:f6:d2:7f:19:07:ea:2a:e1:28:
51:a9:2f:cf:f5:ed:c2:65:fa:52:3b:d3:92:4f:37:3f:0f:73:
24:43:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org