Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/5l2blxbh-cZg469_4-dy1DDdRvI.roa
File: 5l2blxbh-cZg469_4-dy1DDdRvI.roa (raw, json)
Hash identifier: xxQA6gvQrUFu582j+rDhNtUSVOlAMi2JV3FDPMAx2zA=
Subject key identifier: E6:5D:9B:97:16:E1:F9:C6:60:E3:AF:7F:E3:E7:72:D4:30:DD:46:F2
Certificate issuer: /CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Certificate serial: 04
Authority key identifier: 02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/5l2blxbh-cZg469_4-dy1DDdRvI.roa
Signing time: Thu 27 May 2021 05:05:30 +0000
ROA not before: Thu 27 May 2021 05:05:30 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 4816
IP address blocks: 103.39.208.0/20 maxlen: 20
103.40.240.0/20 maxlen: 20
103.44.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Validity
Not Before: May 27 05:05:30 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=E65D9B9716E1F9C660E3AF7FE3E772D430DD46F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:5c:a7:be:2b:8f:48:ee:08:03:34:42:98:
53:9b:d4:cc:b1:c0:43:67:0c:08:b1:99:ba:ad:35:
85:49:ad:00:13:4f:76:3f:06:38:81:49:ba:60:16:
53:24:8c:0c:bd:68:99:53:6f:7d:46:13:72:e2:1b:
55:53:b3:5e:0d:cc:11:ba:1b:f0:dd:95:30:88:21:
90:e2:38:55:a9:b5:d4:5c:03:82:07:8c:13:98:62:
c3:db:94:dc:94:ff:4f:3a:70:92:7d:63:ac:3f:90:
74:a6:44:53:cb:7f:81:01:76:30:6c:36:6b:1b:7f:
1f:7b:56:33:34:4c:fd:ea:eb:fb:6c:c0:dc:bb:48:
c1:a3:0a:57:14:e4:05:6c:75:5c:b2:6e:40:98:70:
fe:0e:94:2b:b5:8f:e7:a6:a9:d8:b3:44:e6:78:22:
77:a0:eb:4c:64:bd:e1:25:40:ea:8b:a5:6d:13:b2:
a4:f9:68:78:a1:3e:0f:ee:64:3b:0b:89:7a:cb:60:
e1:fd:2f:57:dc:0d:87:a2:b9:f4:44:9c:ec:2c:fb:
4c:51:b3:d2:50:10:e8:24:8b:9b:bd:f8:ec:a9:41:
ac:97:90:c6:89:51:aa:c6:a6:e2:cf:22:18:85:6e:
23:51:e0:e5:97:26:ae:c4:bd:08:a7:37:8d:38:8d:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5D:9B:97:16:E1:F9:C6:60:E3:AF:7F:E3:E7:72:D4:30:DD:46:F2
X509v3 Authority Key Identifier:
keyid:02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AmBeOP5HEmDd56zml0Pi89Ty8MY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/5l2blxbh-cZg469_4-dy1DDdRvI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.208.0/20
103.40.240.0/20
103.44.240.0/20
Signature Algorithm: sha256WithRSAEncryption
c9:f4:b8:e7:96:3c:2c:95:38:d2:03:cd:8a:95:d8:f0:8e:e6:
fe:4c:26:dd:8a:f6:a5:a6:63:4f:d9:29:e2:1a:0b:d2:50:da:
49:3d:0a:e0:37:a7:16:7d:9e:54:d5:bd:62:60:86:ca:61:df:
55:e6:38:52:13:d4:05:23:01:b2:bd:75:8c:92:08:11:bc:fb:
07:02:b9:70:65:ce:63:c1:60:13:09:a7:af:75:a6:ad:2c:8a:
a6:4b:e2:42:a8:bb:00:f9:15:39:ab:51:34:5d:1f:05:7a:17:
38:7b:8c:51:83:fc:ad:5f:e9:fa:5f:97:40:ee:46:6e:2c:b2:
d4:7b:43:cb:a7:96:4f:14:c8:20:cb:26:f9:80:3a:e6:83:19:
f0:81:9d:04:35:67:63:7d:8c:95:c0:1d:a2:7e:c8:12:b3:a3:
c5:aa:e0:71:74:bc:19:3a:7b:3c:66:64:3f:b1:4e:2e:fd:74:
a2:01:a6:b4:74:b8:68:c9:0c:be:77:98:be:df:b6:dc:f4:da:
83:0c:2d:1f:8d:84:d7:61:d2:cd:41:5c:31:b6:65:e9:42:d7:
4c:53:ce:3b:60:ad:22:cc:4f:37:85:eb:e7:e5:d8:a8:f3:c9:
5b:eb:82:25:8a:43:d3:13:02:68:ad:f6:ed:5b:1a:f4:10:df:
b9:fa:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:06 2023 by rpki-client on console-ams.rpki-client.org