Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/WjwV7PZJf03wABJeyycFfCadSzc.roa
File: WjwV7PZJf03wABJeyycFfCadSzc.roa (raw, json)
Hash identifier: kzC2P5Vy40Whlk2p+jrmdz/r2kBXm9ROJnCxZQ2WEGc=
Subject key identifier: 5A:3C:15:EC:F6:49:7F:4D:F0:00:12:5E:CB:27:05:7C:26:9D:4B:37
Certificate issuer: /CN=A68DCF97A1BFF797FBA88969B7D17DD03E6A13A4
Certificate serial: 06
Authority key identifier: A6:8D:CF:97:A1:BF:F7:97:FB:A8:89:69:B7:D1:7D:D0:3E:6A:13:A4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/po3Pl6G_95f7qIlpt9F90D5qE6Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/WjwV7PZJf03wABJeyycFfCadSzc.roa
Signing time: Thu 27 May 2021 05:05:50 +0000
ROA not before: Thu 27 May 2021 05:05:50 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63679
IP address blocks: 27.0.204.0/22 maxlen: 24
27.0.207.0/24 maxlen: 24
103.208.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A68DCF97A1BFF797FBA88969B7D17DD03E6A13A4
Validity
Not Before: May 27 05:05:50 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=5A3C15ECF6497F4DF000125ECB27057C269D4B37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:b1:78:ce:e9:31:3a:5f:15:6f:51:9a:d9:
c0:8a:3c:47:58:af:a1:d9:f3:d9:7e:a7:c5:ab:e5:
9b:ce:f2:bb:68:95:99:cd:a4:65:ba:c3:09:d5:6e:
10:d4:70:55:1d:3b:08:13:e5:17:58:49:24:b8:78:
3b:e1:6a:73:2b:ba:c8:4f:5d:77:5c:7a:fd:0c:22:
81:c8:90:e6:80:42:88:28:ad:44:34:cb:dd:c9:7d:
65:5a:85:e4:91:e2:81:8d:25:d2:61:dc:a5:a1:87:
d9:1f:0c:2b:74:cc:fd:24:ee:ee:43:1d:67:a2:cd:
b8:9f:96:b3:06:cb:be:75:f9:5a:93:85:af:63:b8:
a9:41:10:31:d6:bf:d3:3a:98:ec:4d:34:4c:bc:e0:
ae:19:4b:32:11:db:75:ef:31:1e:09:4d:65:85:d0:
ac:2b:dc:b6:66:f3:fd:b0:51:4d:29:4b:2e:a3:85:
08:59:c1:e3:40:06:57:21:70:fa:38:2c:dc:19:7c:
c6:e2:e7:ac:bb:59:8e:ea:1a:b8:2c:3b:14:b7:7e:
29:45:dd:1a:26:6c:93:fd:d6:ff:98:0f:12:37:3d:
11:77:47:ba:4e:b7:57:a1:16:48:3b:16:9c:2c:41:
58:3f:32:12:28:49:eb:bb:d6:91:1b:74:2c:d0:e1:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:15:EC:F6:49:7F:4D:F0:00:12:5E:CB:27:05:7C:26:9D:4B:37
X509v3 Authority Key Identifier:
keyid:A6:8D:CF:97:A1:BF:F7:97:FB:A8:89:69:B7:D1:7D:D0:3E:6A:13:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/po3Pl6G_95f7qIlpt9F90D5qE6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/po3Pl6G_95f7qIlpt9F90D5qE6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/WjwV7PZJf03wABJeyycFfCadSzc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0/22
103.208.48.0/22
Signature Algorithm: sha256WithRSAEncryption
67:2f:0e:74:30:6d:20:b5:04:42:11:d3:34:3a:98:16:79:d0:
38:9d:30:c5:d5:fb:cd:24:ba:03:5f:a4:e8:39:5e:da:31:16:
cd:e9:33:7a:61:d0:f3:23:c1:72:51:b2:4e:d4:2c:d5:a6:bb:
29:a8:da:3e:71:cf:88:23:e7:d0:b8:fd:1e:9a:6d:a7:1c:cc:
ea:9e:3a:d2:5f:f4:68:88:3d:3c:d0:85:36:01:58:cf:7e:e0:
92:5f:f1:92:e1:10:ed:0f:3e:ae:04:ce:e0:81:b8:74:fd:cb:
69:78:31:80:90:cc:3c:77:39:c6:62:ed:5a:60:d6:18:20:a6:
81:50:36:95:04:6c:a6:46:7b:27:6e:79:ac:6a:69:56:d2:dc:
16:b0:ed:84:f4:2b:f8:5e:8c:0e:87:69:72:4d:5f:50:91:b9:
da:cf:24:50:d6:0b:d8:61:25:8b:46:56:52:51:21:3f:31:08:
91:34:93:0e:4d:e0:39:89:34:ec:7f:4e:fe:ec:e9:90:36:d1:
42:76:93:ca:5e:78:61:c4:38:f1:6b:39:64:87:71:5e:3f:b7:
5a:c0:15:bc:a2:38:3d:58:2c:c4:b3:ba:a5:54:43:5f:43:1c:
d1:22:53:50:96:b9:55:4c:d7:a9:d0:ee:e8:a7:c3:71:56:c1:
1a:69:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org