Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/AKyMNgyEt_MUgIvdkhbq4xxaaJE.roa
File: AKyMNgyEt_MUgIvdkhbq4xxaaJE.roa (raw, json)
Hash identifier: aYUJve1TxXWcDn3im7F2/kO83G4tuNi4HBuFHstltoo=
Subject key identifier: 00:AC:8C:36:0C:84:B7:F3:14:80:8B:DD:92:16:EA:E3:1C:5A:68:91
Certificate issuer: /CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Certificate serial: 1013
Authority key identifier: 4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/AKyMNgyEt_MUgIvdkhbq4xxaaJE.roa
Signing time: Fri 19 May 2023 05:53:42 +0000
ROA not before: Fri 19 May 2023 05:53:42 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 63679
IP address blocks: 27.0.204.0/22 maxlen: 24
27.0.207.0/24 maxlen: 24
103.208.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4115 (0x1013)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C1FB553FF23312CD9C25DE1DA72048F06483C5A
Validity
Not Before: May 19 05:53:42 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=00AC8C360C84B7F314808BDD9216EAE31C5A6891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:38:1d:b3:8e:5b:99:8a:92:86:75:f6:5b:
cc:53:8c:32:53:65:2f:61:eb:1c:80:a5:eb:59:5e:
fd:f6:cd:ac:61:dc:f5:dd:a9:18:05:45:3f:4c:ed:
94:66:37:12:eb:17:2d:6b:44:38:0c:5a:f5:c5:80:
e7:17:46:c5:4c:06:e0:52:18:e0:d8:25:2d:90:62:
5a:0a:8b:b5:d9:20:33:a9:1b:24:37:2f:6e:03:1d:
a6:d8:b5:da:43:9e:1b:ca:d7:54:6a:f0:8b:f3:42:
f9:bd:9a:89:f8:56:b9:70:96:57:f2:74:a3:80:53:
01:10:f0:73:2e:06:49:58:05:e9:5e:32:88:a5:f8:
f7:f9:5f:b8:ec:db:e0:b4:8c:d8:b6:93:fc:c6:c3:
d1:42:51:33:8c:6e:f0:3d:ee:e1:ae:40:2d:ed:e5:
76:8e:1b:c8:c0:47:ff:c8:06:11:66:75:49:0a:49:
70:6d:d3:ee:4f:af:c7:63:52:11:59:93:c0:cd:9f:
f7:3f:8c:97:e5:5d:b7:bd:02:3c:73:15:e3:d3:b4:
86:e7:57:45:0f:fa:bd:a3:d3:12:b3:83:cf:0b:f2:
cf:e4:6d:e7:14:41:62:50:8f:54:89:ad:ac:b8:ee:
d7:e5:23:80:53:56:e6:2c:df:dd:f6:ae:2a:a3:6a:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AC:8C:36:0C:84:B7:F3:14:80:8B:DD:92:16:EA:E3:1C:5A:68:91
X509v3 Authority Key Identifier:
keyid:4C:1F:B5:53:FF:23:31:2C:D9:C2:5D:E1:DA:72:04:8F:06:48:3C:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/TB-1U_8jMSzZwl3h2nIEjwZIPFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/TB-1U_8jMSzZwl3h2nIEjwZIPFo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/AKyMNgyEt_MUgIvdkhbq4xxaaJE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0/22
103.208.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:2a:83:bf:d5:f9:59:cb:09:82:75:e3:28:38:b0:27:dc:9f:
c5:bc:b6:01:f5:78:8f:ef:57:ec:1c:17:5b:33:44:17:1d:eb:
66:36:3a:1a:b0:20:05:d1:9c:e4:54:d0:ce:62:ea:d2:e6:c2:
5c:bb:f1:81:c4:2b:75:e1:6d:ff:77:4a:19:d1:ee:46:09:82:
95:23:3a:bb:0d:ee:75:b2:31:a8:e8:cc:ed:9a:b8:be:d2:e5:
14:fd:52:58:29:0d:f0:c5:36:e4:e4:b3:bc:1c:43:d5:3f:69:
9e:fe:76:f6:05:59:54:34:93:83:74:a5:3f:b2:f8:82:10:47:
e4:38:f4:32:3d:98:8b:38:a3:97:07:20:d7:65:4c:17:c1:ef:
b7:35:a8:e2:2a:41:12:28:28:59:35:85:99:63:5b:a6:02:db:
9e:91:1c:cf:d6:a7:6d:84:9f:e4:7f:e4:c3:de:8e:a5:c5:7d:
a5:41:88:9a:af:61:37:2e:1f:60:2b:ec:a0:3f:25:df:7a:b5:
39:41:98:cd:45:c8:e9:0f:7b:22:42:6e:4d:f6:20:3f:4f:46:
52:7d:53:c6:03:ec:df:c8:cb:85:84:f0:67:98:42:db:fb:c2:
d3:13:1c:0b:15:52:2e:b0:53:1a:e3:d9:5c:c3:6d:a7:0a:89:
12:38:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org