Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/UzgcfaEW7NGRmnhWJ2YmT0DDG1w.roa
File: UzgcfaEW7NGRmnhWJ2YmT0DDG1w.roa (raw, json)
Hash identifier: 8nVvopbhoY9KYHp+qW+XUhGpLLtS4RNanH1EOYUZAcA=
Subject key identifier: 53:38:1C:7D:A1:16:EC:D1:91:9A:78:56:27:66:26:4F:40:C3:1B:5C
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 096A
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/UzgcfaEW7NGRmnhWJ2YmT0DDG1w.roa
Signing time: Tue 07 Jun 2022 10:06:42 +0000
ROA not before: Tue 07 Jun 2022 10:06:42 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 4816
IP address blocks: 103.39.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2410 (0x96a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Jun 7 10:06:42 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=53381C7DA116ECD1919A78562766264F40C31B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:8a:38:be:93:9f:e3:19:76:13:ad:96:df:
7d:13:ba:da:87:33:c2:bd:94:41:d4:4f:f0:23:25:
5b:09:1a:b0:dc:7f:28:cb:6a:e3:47:02:d3:33:2d:
77:af:4f:c6:3c:58:85:2c:4d:9f:4f:34:1b:c6:d3:
85:b9:11:17:17:74:c5:d1:c0:2f:53:20:12:35:2c:
65:34:8a:16:5d:38:89:1f:d4:ec:b4:6d:91:0c:2d:
b6:cc:7f:c0:53:6b:79:38:87:0a:70:66:95:a3:36:
e5:77:5a:e9:4e:d2:f7:89:ad:7c:85:36:17:de:cf:
8c:cf:29:70:ee:99:fd:78:5f:bc:03:20:7a:c7:86:
3b:0a:77:ac:78:16:24:8f:f6:24:dd:96:ef:6d:81:
13:42:32:01:d6:9a:4f:17:e0:aa:f0:38:8b:92:47:
93:bc:55:54:40:46:eb:85:00:83:5c:ee:1a:9c:ea:
1a:0c:96:1c:21:a7:ac:5e:1e:cb:bb:2d:23:98:87:
2c:52:ad:ba:b7:a7:3f:c9:58:85:b9:d8:42:71:b8:
cd:dd:a0:bc:42:30:ef:0e:01:7f:5e:89:f5:8d:1b:
e2:6b:24:e4:ed:1f:d1:73:a1:63:06:3e:98:a8:d3:
87:48:5b:b5:e6:0e:ab:a0:76:fc:35:b7:2a:f2:39:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:38:1C:7D:A1:16:EC:D1:91:9A:78:56:27:66:26:4F:40:C3:1B:5C
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/UzgcfaEW7NGRmnhWJ2YmT0DDG1w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.224.0/21
Signature Algorithm: sha256WithRSAEncryption
55:58:50:cd:9a:4c:14:c0:44:77:b7:06:01:ba:c3:60:ef:4c:
16:06:a8:c4:7e:49:4e:d1:af:e6:49:fa:7b:a1:ab:7c:a5:52:
d9:75:55:d2:d7:36:30:7f:23:a8:e0:bf:4d:0b:82:db:73:7a:
49:ba:18:f6:b4:24:26:82:96:d6:e5:2d:d7:4c:16:c8:a4:52:
9d:1a:cb:9a:8f:d7:5f:81:e9:83:10:28:cc:e9:1e:b7:39:45:
d1:09:8e:12:ac:5b:38:8a:a4:a4:fb:d0:7a:a3:d6:f4:7e:1d:
06:5d:f1:0c:d3:18:6a:25:98:4b:e0:9c:18:1f:11:4e:38:f5:
26:f6:e8:d8:80:2b:7f:ca:4f:55:df:4b:bc:38:c0:24:be:68:
d1:80:d7:35:c5:fc:fd:aa:07:78:93:91:50:72:e6:e1:cb:3c:
75:6b:76:52:d5:29:29:96:c7:19:4c:c7:c5:da:6a:f0:83:52:
45:4b:06:14:7c:6f:46:0c:70:3f:95:7f:a4:97:4a:4d:6d:44:
a4:dd:09:7b:77:30:0e:49:aa:bb:ad:ef:8d:cf:57:97:a7:18:
c8:de:db:bc:79:b2:6b:f2:fa:d3:03:2e:c8:c4:6b:b1:2d:27:
08:6e:3f:cb:72:33:8f:f5:43:3c:c8:f5:6c:58:03:b1:e6:ba:
b1:de:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org