Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/xnPKc5CZ2vEvW2_NZI4-zbRZJqQ.roa
File: xnPKc5CZ2vEvW2_NZI4-zbRZJqQ.roa (raw, json)
Hash identifier: nfD8JZyzg9vXRhxQIjDhtsKtFtzvklHsHczBMPV9v7E=
Subject key identifier: C6:73:CA:73:90:99:DA:F1:2F:5B:6F:CD:64:8E:3E:CD:B4:59:26:A4
Certificate issuer: /CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Certificate serial: 05
Authority key identifier: 02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/xnPKc5CZ2vEvW2_NZI4-zbRZJqQ.roa
Signing time: Thu 27 May 2021 05:05:30 +0000
ROA not before: Thu 27 May 2021 05:05:30 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 134762
IP address blocks: 43.226.32.0/20 maxlen: 22
43.226.72.0/22 maxlen: 22
43.227.64.0/22 maxlen: 22
103.45.172.0/22 maxlen: 22
103.45.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Validity
Not Before: May 27 05:05:30 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=C673CA739099DAF12F5B6FCD648E3ECDB45926A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:6f:06:39:16:44:36:be:d7:3e:90:ae:b4:
9b:98:5c:fc:76:fd:6b:42:1f:3a:ca:44:03:a6:d9:
fd:0a:47:98:87:3d:9f:b3:8b:18:b3:f5:89:bd:dd:
4a:9d:51:b7:16:c2:31:33:02:5a:02:8a:28:c1:59:
da:1a:5c:4c:07:ef:0a:97:79:e8:ec:44:f3:a7:29:
0a:10:4d:ac:f4:cd:1d:ec:d2:ad:5a:d4:06:13:27:
e9:e6:a5:4e:c8:b8:9e:15:c1:7c:42:c1:86:d0:04:
8d:49:47:b2:ad:80:ee:80:bf:de:c0:ea:96:df:af:
ae:3a:e0:18:6d:5e:fe:63:ac:24:74:12:d6:dc:ff:
75:08:9d:fe:f0:77:84:53:58:73:dc:83:63:43:3d:
11:e1:49:e9:21:22:7a:78:22:76:38:4e:0c:68:91:
0b:8f:88:07:8e:f3:c2:ad:86:be:eb:1e:54:93:3c:
b2:55:f1:d8:8d:d3:ff:a5:aa:f2:b8:8c:7e:58:4c:
55:3a:22:ca:64:c7:a4:2b:62:09:8d:76:08:5f:96:
d8:32:60:d5:38:c8:76:3a:c2:98:21:6b:de:b3:4a:
22:5e:9a:5b:55:bd:7e:2c:78:e8:c9:be:18:f4:c5:
18:48:b2:81:18:65:8e:e6:82:38:1e:da:f5:bf:ec:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:CA:73:90:99:DA:F1:2F:5B:6F:CD:64:8E:3E:CD:B4:59:26:A4
X509v3 Authority Key Identifier:
keyid:02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AmBeOP5HEmDd56zml0Pi89Ty8MY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/xnPKc5CZ2vEvW2_NZI4-zbRZJqQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.32.0/20
43.226.72.0/22
43.227.64.0/22
103.45.172.0/22
103.45.248.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:88:90:d1:26:72:cd:ce:96:c0:00:4d:cb:5c:b3:3a:19:2c:
d9:a9:76:0a:92:87:59:ee:7e:06:a7:c4:47:ba:f5:25:f8:c1:
9f:ec:1e:1a:b4:7e:af:3b:c3:b7:f8:10:f0:94:ad:c1:6b:37:
8c:83:ff:0a:25:45:9e:61:67:fd:2a:83:f7:8f:57:fe:92:d3:
2c:1c:05:e6:4a:e8:66:82:91:39:2b:25:21:4b:31:14:f7:ae:
83:6d:ff:7d:12:07:7c:ce:4b:07:8b:37:92:9a:4b:ea:14:76:
66:92:6a:e1:a3:a7:95:e1:48:46:2e:27:03:d6:17:25:1c:21:
c1:f6:53:ad:a4:2a:2e:75:42:7b:db:d1:16:dc:d8:9d:99:23:
8c:a2:4b:83:f1:22:36:12:4a:78:0d:83:79:88:6b:e5:05:6d:
d6:f9:16:07:2f:6d:c2:b2:1a:d9:f5:ed:5c:ce:45:b6:a6:56:
ef:07:9d:46:7b:49:1c:20:45:ad:bd:c3:00:2c:b9:2d:7c:a4:
17:01:ea:2f:2d:68:ca:30:eb:ee:78:c2:c4:50:86:bf:41:92:
4f:4d:02:cf:ed:6d:5a:79:20:a1:df:47:98:43:a1:1d:7c:08:
93:b2:0b:5c:d7:8c:db:de:10:a9:3c:28:d2:94:fa:01:3f:e3:
59:6d:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org