Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/GVNaXGDm-OkpvFbHxTkJtBY8K-0.roa
File: GVNaXGDm-OkpvFbHxTkJtBY8K-0.roa (raw, json)
Hash identifier: hh59rMxTLNur76y8HXEHBzzRcu17D/usvwPFwKCS5CI=
Subject key identifier: 19:53:5A:5C:60:E6:F8:E9:29:BC:56:C7:C5:39:09:B4:16:3C:2B:ED
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 0968
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/GVNaXGDm-OkpvFbHxTkJtBY8K-0.roa
Signing time: Tue 07 Jun 2022 10:06:41 +0000
ROA not before: Tue 07 Jun 2022 10:06:41 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 4816
IP address blocks: 103.39.208.0/20 maxlen: 20
103.40.240.0/20 maxlen: 20
103.44.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408 (0x968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Jun 7 10:06:41 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=19535A5C60E6F8E929BC56C7C53909B4163C2BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5d:2e:06:79:a1:00:84:6b:55:41:90:e3:91:
24:9c:6d:2f:8e:fe:e0:47:bc:27:0e:5b:e0:0f:78:
c3:f3:c1:b1:13:18:62:30:d8:a3:0b:72:ac:cb:4c:
35:10:23:49:dd:81:e1:86:e0:84:65:5e:d0:f3:2f:
b4:3a:eb:0b:ec:06:37:f5:11:7c:6d:61:eb:2b:c3:
77:ac:c3:76:1c:57:ba:83:f0:3a:50:29:d8:25:90:
09:04:8a:bd:9f:ce:aa:26:e3:85:1b:1b:e8:c5:67:
5e:c6:57:70:62:73:7a:9f:7c:00:9a:0f:2a:65:3d:
18:61:26:58:6b:d7:38:34:94:bd:0c:e1:61:32:22:
47:91:eb:5e:2d:c7:71:04:8d:90:e1:12:e1:95:65:
87:57:4b:53:a9:93:7e:a6:dd:c6:02:9f:9b:eb:f3:
c5:b6:ce:83:2f:31:ca:21:d3:af:0f:cc:27:0c:b4:
4f:4f:b2:60:d4:78:8b:11:02:95:ae:77:ee:2b:e7:
44:1e:79:fe:97:28:2b:0b:04:ae:6e:59:45:f6:1d:
68:8a:2e:9b:b4:08:39:b4:5a:5e:9a:0b:b8:ab:c3:
30:4e:b1:41:70:03:96:b7:e6:a0:c3:fe:d9:6f:01:
57:8b:72:0a:47:da:42:12:37:8b:96:3c:a3:1b:5d:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:53:5A:5C:60:E6:F8:E9:29:BC:56:C7:C5:39:09:B4:16:3C:2B:ED
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/GVNaXGDm-OkpvFbHxTkJtBY8K-0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.208.0/20
103.40.240.0/20
103.44.240.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:e1:49:c4:51:2a:28:9c:df:1b:68:5a:39:bf:6c:57:1f:a8:
e5:1a:0b:af:42:de:61:7a:d1:8d:8e:16:65:dc:33:2d:cd:e8:
d5:91:a5:f6:5c:bb:39:2e:f3:bb:2e:9f:a3:af:bb:0b:68:01:
d1:9d:78:4c:5b:ea:53:e4:1e:b5:7d:2b:a7:2a:2f:f2:5a:c9:
be:e4:d8:09:97:53:20:bd:03:29:08:fc:8d:a6:81:54:7e:5b:
5e:35:bb:1e:a3:87:77:4e:80:23:87:b8:19:9e:1a:9b:aa:2e:
e5:b3:1d:04:4b:af:3e:e7:e7:c5:b7:c5:cc:58:13:12:60:6a:
01:fe:3d:9d:45:a3:72:05:d7:63:9f:ae:1d:04:94:8f:35:2d:
87:25:78:3a:07:ee:08:e3:93:de:56:82:99:41:4e:6b:08:8b:
dc:19:31:13:e3:33:f5:bf:65:72:ff:cd:ca:e9:7a:40:5b:ce:
91:ca:2f:be:2c:a8:42:b4:2a:67:49:c3:c1:8a:24:a9:57:a9:
93:cb:11:c5:55:39:50:7d:f2:19:9c:53:e5:8d:a7:e9:b7:9a:
33:54:c4:49:e4:5e:28:e8:0f:65:cb:7f:31:d2:c5:92:a9:22:
f0:2c:ab:e3:dc:c7:51:eb:ec:65:00:e7:f4:79:69:2e:36:5a:
28:ad:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:04 2023 by rpki-client on console-fra.rpki-client.org