Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/973qy3SlXTYhrLkcN6wWNuQQ7S8.roa
File: 973qy3SlXTYhrLkcN6wWNuQQ7S8.roa (raw, json)
Hash identifier: 4hDCRXhR2vWQgMiKu26tN/Veoa60+FJPZOFlFN/9RbI=
Subject key identifier: F7:BD:EA:CB:74:A5:5D:36:21:AC:B9:1C:37:AC:16:36:E4:10:ED:2F
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 06E2
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/973qy3SlXTYhrLkcN6wWNuQQ7S8.roa
Signing time: Thu 18 May 2023 07:25:45 +0000
ROA not before: Thu 18 May 2023 07:25:45 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 141677
IP address blocks: 45.254.24.0/24 maxlen: 24
45.254.25.0/24 maxlen: 24
45.254.26.0/24 maxlen: 24
45.254.27.0/24 maxlen: 24
103.223.120.0/24 maxlen: 24
103.223.121.0/24 maxlen: 24
103.223.122.0/24 maxlen: 24
103.223.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762 (0x6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: May 18 07:25:45 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=F7BDEACB74A55D3621ACB91C37AC1636E410ED2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dd:74:40:82:c3:d0:a5:31:50:df:31:4b:87:
78:49:0c:bc:20:6a:e8:d5:86:e9:78:36:fe:b5:0b:
b0:fd:0a:f6:b2:64:79:e3:f9:33:f2:ff:f4:01:bc:
c7:45:54:aa:8d:7f:62:f0:62:3d:1d:18:f7:52:bb:
a7:ac:e7:7b:e4:28:6a:8e:7b:83:61:2f:e5:7b:3a:
1c:5e:36:80:7a:f5:4e:0f:8e:29:dc:93:c8:8d:17:
c9:ea:9d:dd:cf:4a:85:f8:8f:c6:49:81:fa:5f:f8:
b5:3b:69:9d:dc:6f:04:c7:4f:b3:a8:ef:ff:fe:b1:
df:9d:a3:cf:a2:ca:b9:32:e2:2f:79:73:fc:d2:a2:
02:4c:09:de:ff:19:bd:76:e0:ba:ae:81:d0:33:3e:
0e:e5:b2:3b:be:cb:a5:9c:d7:ca:d7:5b:75:be:b1:
82:b5:f8:a3:42:4e:39:25:aa:1d:4a:3a:26:50:1f:
7f:d0:6e:aa:96:ce:54:88:ae:b1:c8:cb:81:21:bb:
1a:96:84:d4:07:53:c2:8d:6c:ae:18:f9:af:57:6c:
87:2b:95:38:b7:c4:06:02:d5:33:05:53:e3:88:2b:
79:f3:d7:e7:d6:64:6a:b5:b4:3c:41:32:e5:0e:d2:
15:ab:67:e1:19:80:0a:1c:d5:de:a4:26:3d:73:df:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BD:EA:CB:74:A5:5D:36:21:AC:B9:1C:37:AC:16:36:E4:10:ED:2F
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/973qy3SlXTYhrLkcN6wWNuQQ7S8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/22
103.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
88:19:c4:4f:d4:c5:5f:b9:12:1a:9f:31:a1:e2:03:fe:c7:b6:
13:8e:89:9c:58:fb:b9:af:f6:d3:4e:74:a8:35:a9:e9:b3:87:
98:40:1a:b1:af:17:94:bd:d4:4a:86:3e:dd:2b:01:20:36:d2:
c3:cb:fa:a0:51:08:06:0d:c5:31:09:aa:21:41:fe:29:65:02:
d4:c2:1d:d8:31:10:12:04:ea:f6:b6:60:16:d4:e4:ef:31:f1:
02:2e:86:74:01:2f:a5:c3:7d:28:14:0d:90:d3:8b:00:b0:9f:
5a:ed:79:70:56:f7:08:02:d8:48:16:e6:10:1d:ff:09:d0:47:
98:20:71:83:fd:bd:8c:f9:f8:8b:f0:b9:f1:0a:cc:f6:22:c7:
86:4b:f9:83:63:aa:44:13:18:be:c2:d2:9e:26:cf:d3:04:f6:
64:67:45:83:cf:58:6a:ea:f5:62:c5:22:6f:be:ae:2e:9e:b9:
01:54:cc:f1:fd:fa:b8:b5:c2:ed:71:c2:18:78:75:a1:f3:58:
ae:fa:fd:c9:b1:5f:d6:0e:2b:ad:37:c5:3d:01:2c:3d:b8:05:
90:9c:07:26:a7:ed:a5:48:52:28:5a:06:af:8c:96:f9:c0:b5:
99:21:7d:4d:3c:06:53:70:a2:27:7a:4e:6b:1e:b7:8d:55:ca:
71:64:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org