Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1629/pwe0dm9WU1CctMLZ6U_bss9_3K0.roa
File: pwe0dm9WU1CctMLZ6U_bss9_3K0.roa (raw, json)
Hash identifier: nl8fuIDkCuzmDTk9jRXGCOCW3uUNbAA17V+QWbj2zhI=
Subject key identifier: A7:07:B4:76:6F:56:53:50:9C:B4:C2:D9:E9:4F:DB:B2:CF:7F:DC:AD
Certificate issuer: /CN=C6989C06DC9A55F383D61F7271B8ADE6A3CC26A5
Certificate serial: 3AC1
Authority key identifier: C6:98:9C:06:DC:9A:55:F3:83:D6:1F:72:71:B8:AD:E6:A3:CC:26:A5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xpicBtyaVfOD1h9ycbit5qPMJqU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/pwe0dm9WU1CctMLZ6U_bss9_3K0.roa
Signing time: Tue 07 Jun 2022 10:10:05 +0000
ROA not before: Tue 07 Jun 2022 10:10:05 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 63679
IP address blocks: 103.208.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15041 (0x3ac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6989C06DC9A55F383D61F7271B8ADE6A3CC26A5
Validity
Not Before: Jun 7 10:10:05 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=A707B4766F5653509CB4C2D9E94FDBB2CF7FDCAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:cb:d5:dd:09:c4:2e:a7:0c:e5:8a:ff:fc:
ec:28:c1:3e:dc:f7:4e:f5:65:7f:79:1d:7b:62:b8:
24:93:21:ff:fa:a8:7d:33:5f:46:28:dd:d6:c8:f1:
44:23:d7:7f:a1:55:cd:75:84:52:0d:8c:34:e9:79:
b7:4c:f5:40:34:d4:52:2a:d1:38:9d:a9:7a:8a:0d:
08:9a:69:77:6b:34:5e:d4:d3:b0:fa:da:93:ef:ac:
9e:b3:00:d3:84:08:6d:60:a7:1d:31:8a:7c:45:d0:
86:0d:61:7f:20:19:12:88:b6:55:11:01:7b:ed:d2:
b6:62:c1:82:5b:16:f5:f3:77:fd:69:57:98:16:3c:
fa:c0:39:06:92:d5:d4:e8:ed:c8:50:5a:b3:14:5d:
5a:af:3e:74:d2:4d:3c:95:c8:64:fc:4d:73:76:04:
db:35:fb:98:33:40:5c:47:80:e2:79:53:66:27:bb:
25:26:b2:e9:c8:b4:8c:77:6c:fc:49:fa:88:ee:30:
c8:6f:15:b3:22:dd:e3:47:3e:b7:51:fe:1f:14:f1:
f4:9a:c3:be:77:e1:20:f4:d5:c7:7e:bd:c9:e9:04:
48:13:7c:b2:45:ed:68:fb:65:2b:ad:30:27:77:2a:
20:08:d8:b4:a1:fe:b8:26:4b:9f:8e:71:e4:3f:8f:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:B4:76:6F:56:53:50:9C:B4:C2:D9:E9:4F:DB:B2:CF:7F:DC:AD
X509v3 Authority Key Identifier:
keyid:C6:98:9C:06:DC:9A:55:F3:83:D6:1F:72:71:B8:AD:E6:A3:CC:26:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/xpicBtyaVfOD1h9ycbit5qPMJqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xpicBtyaVfOD1h9ycbit5qPMJqU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/pwe0dm9WU1CctMLZ6U_bss9_3K0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.208.44.0/22
Signature Algorithm: sha256WithRSAEncryption
56:c6:64:32:e4:cb:d3:41:82:0f:1c:42:df:d8:48:69:43:e2:
48:a0:4d:8f:d6:28:86:2c:95:c0:7d:01:12:af:23:ba:90:f8:
62:24:7d:b1:df:d9:8e:cd:f5:71:ee:06:2c:ba:65:b5:41:f4:
bd:e3:ab:ea:fa:2d:be:f5:92:b7:2d:40:9a:ed:ed:52:5e:1c:
78:19:a7:b4:1d:5c:b3:18:00:54:66:5c:03:6b:5e:6d:59:13:
ca:cf:c1:9b:6f:60:4e:8c:4c:04:5b:6d:fb:fe:71:c7:38:50:
8e:b0:97:d8:47:ed:7a:18:e9:d4:29:43:b7:98:cc:56:bd:f9:
18:7d:fd:43:a9:16:7d:58:2b:94:c7:a2:7d:26:02:1f:e4:d3:
85:43:85:23:c4:9f:88:32:77:2b:c9:35:35:62:3a:32:f4:3a:
6b:f0:48:8e:22:01:f9:3b:cc:d4:4d:24:fc:43:fe:fb:d9:bb:
c0:56:fe:92:06:5f:88:22:61:68:5f:ad:66:26:da:c8:fc:13:
01:98:40:e2:fe:65:16:26:fb:15:eb:c9:33:45:ce:cc:ed:ca:
91:bf:27:89:4d:59:9b:de:48:72:17:94:01:bc:9d:81:c3:5b:
e9:d5:c7:ef:50:3d:33:fd:82:b3:a9:78:94:97:30:1e:41:9c:
e9:9f:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:03 2023 by rpki-client on console-fra.rpki-client.org