Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/2-LEXB-t6ILnTCZPeZIO77gBvEk.roa
File: 2-LEXB-t6ILnTCZPeZIO77gBvEk.roa (raw, json)
Hash identifier: iZh+ho+GCZ0du8cSO4/QRnRktkDZUBHJ0PC8RpvEwKc=
Subject key identifier: DB:E2:C4:5C:1F:AD:E8:82:E7:4C:26:4F:79:92:0E:EF:B8:01:BC:49
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 03
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/2-LEXB-t6ILnTCZPeZIO77gBvEk.roa
Signing time: Wed 01 Jun 2022 07:07:19 +0000
ROA not before: Wed 01 Jun 2022 07:07:19 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 141677
IP address blocks: 45.254.24.0/24 maxlen: 24
45.254.25.0/24 maxlen: 24
45.254.26.0/24 maxlen: 24
45.254.27.0/24 maxlen: 24
103.223.120.0/24 maxlen: 24
103.223.121.0/24 maxlen: 24
103.223.122.0/24 maxlen: 24
103.223.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Jun 1 07:07:19 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=DBE2C45C1FADE882E74C264F79920EEFB801BC49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:4d:c8:5c:30:eb:85:4b:3b:82:93:c4:9e:
54:2b:b0:4e:8e:57:64:91:b6:cf:b0:e8:a6:b6:bb:
d8:32:e7:b9:ec:1f:32:aa:90:02:d0:e0:3b:30:31:
f3:b4:8b:6c:b6:04:4b:b9:7f:e4:ad:74:dc:ba:70:
13:d4:70:e8:c1:91:41:d8:63:c0:f5:a2:c5:b1:ec:
a6:2b:8f:fb:c6:63:0b:a8:3e:8a:36:a1:57:36:31:
04:41:f5:b4:7b:50:65:c5:cf:2b:d1:91:e0:68:a1:
77:1d:43:84:00:09:69:cd:44:9e:0a:7f:17:0f:ae:
f7:e0:3e:34:e5:fc:72:13:2e:93:15:f2:54:7f:62:
82:15:18:92:43:53:00:ba:91:3d:91:e7:0b:29:af:
4a:36:77:9f:3f:1b:eb:93:3f:75:54:63:6c:36:7f:
91:5b:a1:fa:22:c5:db:95:af:c6:80:1b:3b:02:f5:
03:ad:f0:b8:da:40:70:dc:a5:af:8a:0f:b5:aa:0f:
bd:e2:9f:75:bf:2c:51:e1:56:e5:b5:25:fb:df:09:
28:f4:a4:85:cd:65:72:8a:9d:91:4a:d5:29:ed:e0:
58:35:56:70:0f:f8:10:99:0e:60:9a:b9:a8:0c:51:
f4:71:fc:6c:14:c9:78:c7:1a:e4:73:85:c0:fa:e8:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E2:C4:5C:1F:AD:E8:82:E7:4C:26:4F:79:92:0E:EF:B8:01:BC:49
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/2-LEXB-t6ILnTCZPeZIO77gBvEk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/22
103.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
09:46:c6:82:57:30:5f:28:fa:de:48:90:04:bf:8f:d4:7c:5f:
2e:01:b0:11:91:dd:fc:f7:06:d5:b4:3d:10:b1:9e:2d:49:71:
17:a8:2a:12:ec:2a:21:9d:78:99:60:ca:07:82:ab:1f:02:79:
8e:7a:f1:50:a3:74:3f:0e:5c:74:aa:5c:f7:6b:4c:43:76:f1:
60:7a:56:df:78:7a:ce:dc:97:98:9c:81:f5:7c:fa:3c:d0:ae:
12:5d:5b:a4:6d:34:30:62:be:db:22:ef:d7:95:89:be:51:70:
7a:69:9a:7c:ee:a5:67:59:44:dd:10:c6:bc:cc:1b:4b:97:b4:
70:11:9e:d9:9e:c0:0a:3a:f2:65:0c:88:e9:cd:a3:60:c9:60:
2b:14:e1:18:92:68:43:aa:f4:d0:9b:69:31:bc:fc:1b:0e:51:
52:60:71:81:05:41:a9:9f:82:a0:79:4e:2f:61:bd:c7:2d:08:
60:34:a8:9c:09:cf:db:98:63:55:b9:c1:69:50:13:f3:ed:bc:
02:cf:20:21:62:b7:a2:47:71:bf:22:9f:cc:b3:53:49:bb:3f:
d1:21:43:4a:10:8f:6c:0b:53:c0:43:6a:f6:9e:e6:64:e6:a6:
5c:d2:ec:d4:51:99:75:5e:25:56:8f:c2:9e:95:b9:0c:a1:39:
c5:03:ba:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:10 2023 by rpki-client on console-ams.rpki-client.org