Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1628/rL5SVbeDoO_bvxVITFaH9kJCv1E.roa
File: rL5SVbeDoO_bvxVITFaH9kJCv1E.roa (raw, json)
Hash identifier: v2Qf5UU6x6gzop2+7/BPwOr7mzgzyuJLAYbWWylF7YQ=
Subject key identifier: AC:BE:52:55:B7:83:A0:EF:DB:BF:15:48:4C:56:87:F6:42:42:BF:51
Certificate issuer: /CN=8C8500B5D76B0B0AD71BCEC53D25456BCDD2FA1F
Certificate serial: 03
Authority key identifier: 8C:85:00:B5:D7:6B:0B:0A:D7:1B:CE:C5:3D:25:45:6B:CD:D2:FA:1F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jIUAtddrCwrXG87FPSVFa83S-h8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/rL5SVbeDoO_bvxVITFaH9kJCv1E.roa
Signing time: Thu 27 May 2021 05:02:22 +0000
ROA not before: Thu 27 May 2021 05:02:22 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63679
IP address blocks: 103.208.40.0/22 maxlen: 24
103.208.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8500B5D76B0B0AD71BCEC53D25456BCDD2FA1F
Validity
Not Before: May 27 05:02:22 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=ACBE5255B783A0EFDBBF15484C5687F64242BF51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:ad:52:75:d1:3d:8c:db:67:b0:f8:53:ce:
77:d8:29:c9:03:df:ef:33:f1:3e:1a:f7:ec:c8:b6:
2d:72:e9:15:b6:49:b5:ee:1e:01:30:59:9a:77:42:
58:83:8e:bd:17:71:7a:51:68:a5:27:c7:93:01:96:
22:56:1e:bc:0a:ab:1d:69:7d:2b:ac:f8:55:e7:7c:
10:40:db:9a:a1:50:31:3d:20:bc:fc:ce:aa:ee:13:
ea:3b:94:e3:52:54:57:96:c7:b2:c2:d2:1b:ac:be:
88:5a:90:8e:e3:a0:cd:dc:de:e6:d1:e5:bf:ca:99:
22:bf:f8:c4:a4:9a:8f:9e:cf:28:9d:b4:74:c4:43:
e5:47:45:1f:bf:cc:be:a2:94:66:65:48:0f:9a:f2:
0f:3a:66:fd:89:8d:16:e7:e3:07:20:9d:16:4b:0f:
f6:ac:a8:dd:2d:86:4d:fd:1f:7b:4e:06:37:c8:12:
c4:a9:40:c2:49:4e:9f:3d:30:1c:10:6a:de:a2:46:
95:21:96:90:33:07:9d:63:11:d5:62:97:41:0a:f5:
1b:3b:47:8e:ce:b5:bc:3a:f8:db:ce:8e:3c:ad:90:
b1:43:72:d9:f4:42:af:0a:98:5e:66:84:32:04:51:
be:10:93:25:89:e1:d1:13:c4:c6:10:41:27:ac:c3:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BE:52:55:B7:83:A0:EF:DB:BF:15:48:4C:56:87:F6:42:42:BF:51
X509v3 Authority Key Identifier:
keyid:8C:85:00:B5:D7:6B:0B:0A:D7:1B:CE:C5:3D:25:45:6B:CD:D2:FA:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/jIUAtddrCwrXG87FPSVFa83S-h8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jIUAtddrCwrXG87FPSVFa83S-h8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/rL5SVbeDoO_bvxVITFaH9kJCv1E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.208.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:31:69:67:72:fe:3b:66:91:6d:41:59:6b:72:fb:2f:21:3f:
a1:c5:71:63:de:58:9b:40:bc:de:fa:d7:dc:84:60:7c:30:e5:
77:83:c9:fb:e0:bc:0d:92:20:c3:68:e5:b6:8a:ea:b0:00:fe:
97:e2:d4:51:3b:3a:c3:c6:26:9a:02:bf:95:a3:94:b6:47:f8:
d0:d7:02:48:da:37:c6:d7:af:e3:5d:48:9b:38:9a:e5:de:6c:
53:71:42:fc:bc:9f:c0:b1:8b:ad:ee:b2:fa:32:5f:83:a0:04:
41:81:3e:c7:9f:22:66:14:e9:b9:62:95:c4:1a:7e:96:a8:00:
0f:de:52:46:e6:6c:8d:5f:84:05:ff:f0:bc:4b:87:c7:a2:87:
49:dc:d8:9f:91:3d:da:9c:de:10:b7:e7:57:53:18:67:f1:24:
33:67:08:fa:93:84:cb:cc:15:e6:ba:c5:6a:83:bd:66:3c:99:
cf:3b:0e:5b:38:e9:a6:a3:28:1d:97:50:ba:01:a1:01:c7:fa:
9f:b6:f3:38:13:50:05:38:66:10:40:e4:6f:31:db:ed:22:6b:
25:29:ff:05:eb:80:b2:30:55:40:19:80:97:f7:bd:02:0a:3d:
c2:db:bb:c9:d0:05:45:e5:c3:1a:ae:06:5d:52:d9:21:fc:68:
1b:a3:03:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org