Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/zHIxuq3wDfw7yMeexHjsSjFn1BA.roa
File: zHIxuq3wDfw7yMeexHjsSjFn1BA.roa (raw, json)
Hash identifier: sgveuFgWTSEtSyl5vliF3S/vz7ZMY/k4ioRl7bxGaIQ=
Subject key identifier: CC:72:31:BA:AD:F0:0D:FC:3B:C8:C7:9E:C4:78:EC:4A:31:67:D4:10
Certificate issuer: /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial: 0969
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/zHIxuq3wDfw7yMeexHjsSjFn1BA.roa
Signing time: Tue 07 Jun 2022 10:06:41 +0000
ROA not before: Tue 07 Jun 2022 10:06:41 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 134762
IP address blocks: 43.226.32.0/20 maxlen: 22
43.226.72.0/22 maxlen: 22
43.227.64.0/22 maxlen: 22
103.45.172.0/22 maxlen: 22
103.45.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Validity
Not Before: Jun 7 10:06:41 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=CC7231BAADF00DFC3BC8C79EC478EC4A3167D410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:f4:88:5c:ac:78:c9:52:35:54:c9:d3:13:
0d:90:5c:9c:f8:90:dc:58:35:ea:2d:96:67:61:63:
e0:a2:e0:fe:37:3f:6f:c2:35:f5:12:02:5b:12:0e:
b2:f1:1e:f0:a4:c6:ef:f9:9d:ed:02:df:b2:57:ab:
ad:25:d1:9f:3f:ca:2c:0b:59:0a:97:6a:48:30:e7:
a4:43:04:08:68:d5:b0:a1:d7:cf:08:3b:64:c6:0f:
77:f2:24:d5:c9:cb:25:26:33:4c:ec:b9:de:8d:85:
31:01:5f:e2:c0:e5:72:47:75:2a:7a:61:02:26:4c:
e7:bc:db:f5:e3:f5:49:b2:5c:ff:24:11:c3:ff:ee:
a6:b8:03:ce:cf:3b:83:ae:f5:df:69:f8:07:9b:c2:
89:6d:00:52:9e:c8:29:1d:72:18:a2:65:7f:ac:26:
34:0c:97:e3:ed:0a:c7:b4:dd:d1:73:3d:2c:18:31:
b1:53:e9:f7:2a:f3:31:07:a8:e6:b7:83:c2:24:3b:
a4:81:3c:36:0f:fb:7e:90:74:9e:25:17:c7:6f:52:
6c:89:be:e9:f3:36:0b:7c:c9:09:56:1a:80:8a:74:
57:5f:77:bc:b9:02:7b:61:ee:ca:b3:9a:ba:ef:c0:
93:0f:a2:8c:95:e6:f1:bd:a9:33:34:c0:50:a7:ad:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:31:BA:AD:F0:0D:FC:3B:C8:C7:9E:C4:78:EC:4A:31:67:D4:10
X509v3 Authority Key Identifier:
keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/zHIxuq3wDfw7yMeexHjsSjFn1BA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.32.0/20
43.226.72.0/22
43.227.64.0/22
103.45.172.0/22
103.45.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:23:81:8a:03:38:6b:4e:0d:b4:bc:3b:85:8d:98:78:bb:33:
6f:63:85:da:bc:56:00:ee:6f:38:b1:04:7a:ac:16:48:5f:d2:
da:a6:c9:0c:b2:87:cd:3b:55:8a:c4:02:a6:6a:ab:1a:e6:d8:
b5:ee:a7:14:49:72:bf:3e:a3:69:77:41:f7:51:f4:00:37:da:
eb:15:f6:8b:a3:6a:5f:00:d6:6c:a1:65:47:b9:57:9f:fb:9d:
25:66:22:56:e8:ec:b2:63:42:96:3d:80:61:fa:7a:77:d9:46:
4b:b7:b2:86:03:c9:a3:98:e7:a4:3f:62:15:81:eb:66:94:2f:
35:0e:b4:55:78:80:b7:6d:64:46:5d:c5:66:7b:10:2d:6d:2e:
dd:35:d1:6e:f0:9b:83:af:95:f5:3c:a2:b2:82:a4:6d:fb:97:
7a:94:f9:e3:da:d0:bb:a1:7c:80:d8:ef:fc:ca:b2:b6:a2:10:
c0:dc:cd:ca:65:7a:e7:40:c3:41:79:8f:09:61:93:3c:08:28:
23:ff:0f:12:96:73:bb:9a:95:62:03:9e:7d:8e:3a:c9:7d:67:
27:46:3f:52:1f:e2:4c:8d:8b:e2:ae:97:d2:6c:62:58:df:a3:
71:2f:11:83:8b:4b:5c:87:53:f7:3c:17:a1:7d:7b:66:3d:20:
1d:c4:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:10 2023 by rpki-client on console-ams.rpki-client.org