Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1629/zK3b_kOrPQCb0OHCbp9f12uGpLE.roa
File: zK3b_kOrPQCb0OHCbp9f12uGpLE.roa (raw, json)
Hash identifier: /YDZGr/eL1f2S8TA208R6T3spX2epw4x3nW3khijAI8=
Subject key identifier: CC:AD:DB:FE:43:AB:3D:00:9B:D0:E1:C2:6E:9F:5F:D7:6B:86:A4:B1
Certificate issuer: /CN=E71B50ABCEF3CEC3F7125C3A4DECC13D8A850691
Certificate serial: 34D9
Authority key identifier: E7:1B:50:AB:CE:F3:CE:C3:F7:12:5C:3A:4D:EC:C1:3D:8A:85:06:91
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5xtQq87zzsP3Elw6TezBPYqFBpE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/zK3b_kOrPQCb0OHCbp9f12uGpLE.roa
Signing time: Thu 18 Nov 2021 20:17:33 +0000
ROA not before: Thu 18 Nov 2021 20:17:33 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63679
IP address blocks: 103.208.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13529 (0x34d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E71B50ABCEF3CEC3F7125C3A4DECC13D8A850691
Validity
Not Before: Nov 18 20:17:33 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=CCADDBFE43AB3D009BD0E1C26E9F5FD76B86A4B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:1e:96:c4:cb:08:06:ae:d7:97:44:3b:44:
7b:14:8b:28:c8:0c:99:42:77:26:23:24:1d:67:e7:
99:7c:a4:16:13:20:85:60:de:bd:e3:69:f7:ea:af:
69:d8:81:3b:36:4e:ea:16:67:29:e1:2b:bb:62:9e:
58:5d:01:aa:c3:83:a2:4d:e4:74:fc:ee:15:31:95:
fd:4a:be:c1:42:fe:34:89:12:f3:71:ec:26:f7:75:
0c:fa:03:fe:6d:8c:f6:06:d0:65:13:fa:27:9e:e5:
f4:8a:f5:90:5f:45:8e:b1:2f:96:17:2b:b5:78:01:
c1:9b:2c:5b:ce:ae:12:a2:78:ee:54:ad:d7:0d:f6:
c8:bb:b6:21:8b:6d:a9:a6:2e:8f:e6:cb:8b:be:99:
9a:a8:22:94:2f:05:d3:55:13:26:33:55:76:62:bd:
2b:25:07:8b:5f:5c:c6:4e:3a:d3:9f:90:7e:72:02:
f1:bb:39:cd:8f:83:34:2b:62:dc:c3:2a:86:dc:f7:
ae:b6:76:2f:0f:a4:b7:dc:69:a9:36:25:17:a4:93:
05:7b:5e:1e:4c:17:e2:bc:97:71:65:53:33:12:bb:
db:0f:5f:c3:fe:93:ec:8e:78:89:8c:a3:75:be:ed:
0c:0f:cf:c6:14:e9:b3:4c:33:99:05:1a:db:a8:02:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AD:DB:FE:43:AB:3D:00:9B:D0:E1:C2:6E:9F:5F:D7:6B:86:A4:B1
X509v3 Authority Key Identifier:
keyid:E7:1B:50:AB:CE:F3:CE:C3:F7:12:5C:3A:4D:EC:C1:3D:8A:85:06:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/5xtQq87zzsP3Elw6TezBPYqFBpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5xtQq87zzsP3Elw6TezBPYqFBpE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1629/zK3b_kOrPQCb0OHCbp9f12uGpLE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.208.44.0/22
Signature Algorithm: sha256WithRSAEncryption
56:a5:7f:d1:f1:9d:16:32:ad:3c:af:72:b8:82:84:51:53:fa:
18:e3:04:19:fb:fd:f5:fd:74:4a:9c:77:55:47:03:6d:dd:7c:
5d:41:8f:63:f0:90:11:1f:58:3b:c2:f7:b2:cd:cb:ef:19:bc:
ce:2c:c4:76:76:cf:4b:30:b6:2d:ac:51:53:50:3f:c9:ba:ca:
f6:36:e7:e9:0d:70:0c:61:f5:e0:ce:24:51:ba:d7:99:2b:42:
72:63:9e:c8:77:a4:5d:93:76:cf:b8:93:c7:f0:c9:91:e2:ed:
e4:34:8b:eb:ea:49:5d:05:18:e6:88:f2:bb:a9:23:bf:9e:3c:
09:c2:3d:28:2f:49:a7:b7:c2:d3:a6:7b:d6:9a:e0:ce:36:0d:
cb:4f:e6:fd:3a:d9:b3:19:fa:f1:9a:52:20:15:79:73:7d:c0:
f4:09:3e:b8:de:51:8a:df:cd:76:76:b6:18:f7:96:88:40:66:
f5:71:50:12:3b:ec:54:fe:64:33:f0:8f:23:81:31:f3:13:08:
cc:43:66:f3:49:91:17:1b:27:8f:ba:bb:5d:fe:af:49:2f:4c:
c6:b1:37:62:a0:84:3c:14:4f:0e:30:89:65:40:c3:60:af:9d:
d5:24:fc:82:ed:35:20:02:94:aa:64:f9:7c:f4:e8:84:66:a9:
d5:6e:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org