Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/s8ystIFpqRfxNfdvrco4TeP7X0o.roa
File: s8ystIFpqRfxNfdvrco4TeP7X0o.roa (raw, json)
Hash identifier: jDojei953NJo9t9WfLGIKnfhxOBnnC9PQ5YwZhC4Gqg=
Subject key identifier: B3:CC:AC:B4:81:69:A9:17:F1:35:F7:6F:AD:CA:38:4D:E3:FB:5F:4A
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 096E
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/s8ystIFpqRfxNfdvrco4TeP7X0o.roa
Signing time: Tue 07 Jun 2022 10:06:44 +0000
ROA not before: Tue 07 Jun 2022 10:06:44 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 134762
IP address blocks: 43.226.144.0/20 maxlen: 20
103.45.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414 (0x96e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Jun 7 10:06:44 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=B3CCACB48169A917F135F76FADCA384DE3FB5F4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:76:bc:4d:13:1e:1f:79:f9:02:a8:eb:0e:
a3:a4:29:8e:25:b8:48:38:01:5a:9f:03:29:5c:61:
01:d5:b5:5e:3f:56:7c:be:1d:1e:ad:7c:60:1e:9a:
f9:70:cc:f7:fd:13:3b:94:f0:e0:10:19:d2:25:87:
6f:1a:84:46:3e:76:4e:c9:2b:87:43:bc:7b:22:49:
38:eb:a2:95:1b:e3:89:e6:b7:04:1f:b9:0f:3b:5d:
d4:34:ca:de:10:ee:d7:fa:f1:ac:39:f1:b3:5f:cc:
cf:15:26:f5:51:ac:6a:bf:75:4a:cc:a0:d0:d5:90:
63:55:fe:91:13:49:59:27:28:e6:c3:97:0f:f3:e5:
ef:90:7d:21:aa:44:ac:af:a5:01:34:52:a9:35:b9:
c1:f5:b0:0e:c7:62:dd:a2:a4:69:f3:07:25:71:fd:
13:e8:d6:28:ae:68:4f:57:b1:1a:25:d0:84:49:83:
74:d3:fd:2b:37:3b:e5:d3:00:6f:d7:5c:83:82:1d:
ae:0e:d0:89:e4:e0:4b:86:ab:17:4c:09:f2:59:f0:
5b:57:d8:b5:de:ad:58:79:d3:e5:35:ae:ab:b8:13:
fa:93:7b:e6:24:b5:79:a9:4e:0a:f7:21:ff:de:28:
cd:75:dc:61:f3:b2:c0:0f:f8:29:26:0b:98:92:6d:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:AC:B4:81:69:A9:17:F1:35:F7:6F:AD:CA:38:4D:E3:FB:5F:4A
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/s8ystIFpqRfxNfdvrco4TeP7X0o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.144.0/20
103.45.176.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:29:15:aa:b2:58:cb:07:12:ca:17:3a:5a:bb:25:04:4a:5c:
0d:34:d6:ec:dc:d1:c4:6a:ed:f0:bb:ea:62:a0:c6:e4:95:8c:
bd:a8:fe:6d:02:db:1b:e0:3d:26:36:b5:3d:99:06:bf:1e:90:
3b:29:21:ed:14:5f:0e:c3:58:12:b4:e2:cc:54:dc:3a:c0:01:
80:24:98:3d:05:31:9f:e1:72:e6:dc:b7:13:1d:3f:bb:85:ae:
2a:6f:d2:a0:9c:fa:77:c5:9a:cf:5a:b7:00:c4:64:e7:75:d9:
e5:09:46:94:18:1f:fa:8b:80:7d:69:9f:27:1d:cc:bd:c7:ef:
6c:8e:bb:97:61:82:80:52:30:6e:c6:aa:4b:93:43:92:fa:67:
7d:2f:38:04:ce:95:b3:4b:ca:98:d3:5a:0c:71:c3:4f:79:0a:
23:51:cf:f4:5f:1e:44:93:34:b5:71:4e:01:10:4d:fc:5a:7b:
5a:29:7a:d4:ab:9c:4b:7e:bb:e5:9d:1a:13:59:b6:6e:82:15:
7c:f1:1c:4a:56:f4:d3:71:21:92:61:89:fd:06:ff:0c:b4:61:
71:b3:2d:44:b7:a8:5f:60:2d:ec:97:7e:26:98:a1:3e:75:d6:
90:60:52:c4:12:44:c0:52:cb:60:cf:4a:d3:7f:07:06:0c:a4:
e9:1a:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:14 2023 by rpki-client on console-fra.rpki-client.org