Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/IzJDkSfOj8-mqkdQ2rP3FvC3xcs.roa
File: IzJDkSfOj8-mqkdQ2rP3FvC3xcs.roa (raw, json)
Hash identifier: cILQj/+XHyzb31rBo0qI4UQAr9fRCcHlO523NSphGpA=
Subject key identifier: 23:32:43:91:27:CE:8F:CF:A6:AA:47:50:DA:B3:F7:16:F0:B7:C5:CB
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 18BE
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/IzJDkSfOj8-mqkdQ2rP3FvC3xcs.roa
Signing time: Wed 24 May 2023 03:54:04 +0000
ROA not before: Wed 24 May 2023 03:54:04 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 134762
IP address blocks: 43.226.32.0/20 maxlen: 22
43.226.72.0/22 maxlen: 22
43.227.64.0/22 maxlen: 22
103.45.172.0/22 maxlen: 22
103.45.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6334 (0x18be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: May 24 03:54:04 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=2332439127CE8FCFA6AA4750DAB3F716F0B7C5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:fb:a6:8a:ea:8b:68:ec:43:9c:02:aa:8a:
a0:59:9d:41:8c:66:55:c7:ca:70:25:4c:9a:63:45:
b9:8c:67:72:f3:8b:6d:27:e9:ee:7e:99:f6:78:5b:
a1:52:a1:31:60:2a:06:42:db:f9:6e:95:82:bb:e5:
e5:e5:5d:ae:6d:cc:fe:c3:c0:cd:11:82:1f:f8:0a:
ba:28:fb:73:fb:1a:02:48:29:b5:a9:e9:c7:03:0d:
35:5e:71:fe:b3:3b:e2:f3:48:44:80:71:8a:0a:29:
cc:78:b6:0e:b5:5c:cf:67:e0:e8:65:cd:d2:ac:4b:
97:17:12:af:66:df:05:63:6f:13:77:c8:49:bb:c8:
9f:af:32:a9:56:11:10:bd:a1:7c:04:40:bd:5e:90:
ab:f8:d3:4c:1b:b1:c4:c6:e7:e3:e7:cc:cd:0c:2d:
05:59:ec:91:f1:38:52:b4:23:0f:8f:4f:71:f5:94:
c9:15:4e:94:51:41:1c:05:48:1e:09:d9:18:7b:ce:
af:82:63:26:10:7d:b4:fa:7a:af:28:5c:8f:8f:fd:
f2:a4:29:74:6e:4b:bc:8e:ab:eb:40:97:4e:53:f0:
16:88:02:b6:ae:64:ab:c7:18:5b:e1:d4:05:17:7d:
ef:13:bf:1a:3d:cf:c2:4b:2d:7e:4b:4c:d2:07:fe:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:32:43:91:27:CE:8F:CF:A6:AA:47:50:DA:B3:F7:16:F0:B7:C5:CB
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/IzJDkSfOj8-mqkdQ2rP3FvC3xcs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.32.0/20
43.226.72.0/22
43.227.64.0/22
103.45.172.0/22
103.45.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:54:aa:4c:f3:42:18:62:99:22:a2:4c:bb:15:1a:46:a6:15:
a3:2e:84:09:7d:22:35:77:9a:86:53:f9:0a:87:1c:ab:3d:3c:
1a:a2:f2:a2:12:ca:59:8e:4f:6b:b5:69:c6:1a:df:51:57:07:
f8:51:3a:a6:54:e5:cc:bf:af:ce:2a:82:05:a0:ef:f3:b1:8a:
0a:4c:6b:16:2c:e9:66:e5:3c:d8:87:6c:e2:35:82:d2:e1:32:
f2:d9:c1:6d:d9:9c:bb:a4:28:05:84:28:e8:a3:9b:c4:57:30:
52:5d:95:05:33:82:26:e6:45:77:f3:c7:3e:e2:40:22:37:8d:
ce:81:3f:d4:65:16:c7:7a:94:14:7b:4d:d2:29:8c:ef:f1:62:
1d:d8:05:d4:1c:cb:90:d6:cc:b9:75:d4:08:e8:30:23:8b:2d:
59:01:88:f3:08:99:dd:f6:d9:70:53:99:65:be:e7:27:af:92:
af:94:52:b0:22:92:a5:2c:db:2a:fe:f4:58:f3:96:a3:63:89:
84:09:a9:44:b4:b7:69:92:c7:b4:58:95:5d:64:0b:64:6b:9e:
77:9d:4e:86:c2:3b:e6:ab:f9:02:c7:6b:aa:a8:6c:44:f1:47:
68:4c:a1:7e:7f:e7:43:a1:98:ac:3e:46:56:b8:44:24:eb:66:
c4:18:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org