Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/ujwOjp653zmUERji_FcQFalSlyA.roa
File: ujwOjp653zmUERji_FcQFalSlyA.roa (raw, json)
Hash identifier: yaDe2S9EKa3zxUoIiQJM7sfJXWDdTRg6Bfme+lbRZPY=
Subject key identifier: BA:3C:0E:8E:9E:B9:DF:39:94:11:18:E2:FC:57:10:15:A9:52:97:20
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 18BF
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ujwOjp653zmUERji_FcQFalSlyA.roa
Signing time: Wed 24 May 2023 03:54:04 +0000
ROA not before: Wed 24 May 2023 03:54:04 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 4816
IP address blocks: 103.39.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6335 (0x18bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: May 24 03:54:04 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=BA3C0E8E9EB9DF39941118E2FC571015A9529720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:84:31:b8:f1:c6:0e:fe:c5:45:fe:2a:07:
77:5c:38:f6:fc:c7:4e:ab:65:71:31:5b:76:6e:ab:
c9:10:8e:7b:32:ad:d3:84:5d:0a:84:55:68:91:6d:
c8:99:34:e1:2b:41:90:ae:5e:2b:ac:ce:a6:7a:f1:
c6:6b:e5:4e:0e:58:d3:15:03:58:62:e3:ee:75:2e:
be:74:55:48:16:5d:27:64:18:d8:f3:18:de:8f:ea:
c7:92:fd:34:7c:e5:2b:23:55:74:12:2a:00:41:ca:
46:71:b8:e6:9b:73:09:68:c1:36:8e:b4:fe:7d:a8:
74:f3:fb:f4:6e:5e:84:50:9b:ea:79:84:0c:26:1b:
34:e0:32:0c:de:08:b0:2c:2d:1a:fa:bb:d2:0b:49:
08:0a:1d:e1:5a:99:60:e2:7f:52:f2:11:65:e2:35:
76:c8:35:c6:1e:69:a0:2a:02:c4:36:b1:34:3b:ab:
7b:1b:ba:46:b1:76:97:52:f5:16:11:a4:e4:fe:65:
4b:83:aa:96:5e:ee:4c:df:bf:cf:af:50:b0:68:e5:
17:7e:37:0e:4b:54:f9:64:6f:da:cd:9e:7f:9c:d0:
72:1b:5e:85:9e:56:49:d7:e7:7d:54:9a:23:5c:9c:
ff:2f:69:3f:d3:c0:45:64:c0:04:15:e9:ae:5d:4a:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3C:0E:8E:9E:B9:DF:39:94:11:18:E2:FC:57:10:15:A9:52:97:20
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ujwOjp653zmUERji_FcQFalSlyA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.224.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:c3:5f:6e:03:2d:75:38:9d:64:ec:0c:c1:5e:ea:a2:73:a0:
54:64:d0:a5:99:7d:d8:e9:0b:6c:e3:ac:84:de:15:0d:cf:a6:
b4:fb:09:99:62:6a:97:b0:0c:ca:5d:36:ee:f5:bd:9e:e1:3d:
7a:a9:3d:cb:a7:88:ba:71:93:eb:ec:eb:8c:a4:f2:0b:70:80:
bf:ea:9d:75:67:50:27:e1:65:b3:ec:8c:84:ae:fa:f3:d5:c9:
54:81:02:d1:05:ec:9c:7c:75:2e:83:e6:0f:b7:72:78:01:11:
f0:03:7a:52:70:c5:99:ae:d0:5d:dd:2e:dd:29:f8:56:4c:7a:
df:9c:27:72:40:20:b1:be:46:06:aa:4e:76:55:ed:30:68:dd:
d2:5c:72:9d:eb:4c:94:00:1f:9d:7e:36:a7:7c:98:21:35:86:
fd:cb:9a:53:95:5d:b2:c5:80:55:8b:32:6d:2d:85:10:4c:9f:
97:ec:16:f1:d9:5c:1a:db:08:69:56:db:eb:23:d4:2a:6f:30:
77:8c:8e:3d:5d:8b:38:44:29:57:ac:1f:d6:a8:ac:18:3a:24:
df:ba:36:9d:a5:ba:83:16:4a:29:a5:da:a2:24:88:38:e9:ca:
9c:04:10:be:4c:87:c5:b4:6e:1f:74:42:ed:5e:04:cf:5f:01:
9b:bf:66:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org