Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/AUBEJk1JIkrurTpzgWja77LoEII.roa
File: AUBEJk1JIkrurTpzgWja77LoEII.roa (raw, json)
Hash identifier: JNEKq2jjzDORpi60RsrITTYiMszEC/QfRKRNAtSMaCk=
Subject key identifier: 01:40:44:26:4D:49:22:4A:EE:AD:3A:73:81:68:DA:EF:B2:E8:10:82
Certificate issuer: /CN=FC32874486AB02DC0D291866E4759AE26C6067AA
Certificate serial: 0112
Authority key identifier: FC:32:87:44:86:AB:02:DC:0D:29:18:66:E4:75:9A:E2:6C:60:67:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_DKHRIarAtwNKRhm5HWa4mxgZ6o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/AUBEJk1JIkrurTpzgWja77LoEII.roa
Signing time: Thu 03 Jun 2021 19:28:58 +0000
ROA not before: Thu 03 Jun 2021 19:28:58 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 141677
IP address blocks: 45.254.24.0/24 maxlen: 24
45.254.25.0/24 maxlen: 24
45.254.26.0/24 maxlen: 24
45.254.27.0/24 maxlen: 24
103.223.120.0/24 maxlen: 24
103.223.121.0/24 maxlen: 24
103.223.122.0/24 maxlen: 24
103.223.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC32874486AB02DC0D291866E4759AE26C6067AA
Validity
Not Before: Jun 3 19:28:58 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=014044264D49224AEEAD3A738168DAEFB2E81082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:d8:cf:6f:bc:ec:f5:63:44:6a:be:c1:43:
52:26:8f:6e:36:79:2b:a3:ed:03:3d:69:b0:d4:e5:
f5:2b:5e:d2:f2:60:dd:e0:f6:ac:44:39:cf:bd:f5:
aa:1d:cb:f9:a9:05:46:09:00:0e:3b:4d:50:3b:3c:
e4:92:28:16:28:eb:bc:2d:e8:a3:d8:71:20:c1:0a:
b5:b7:7c:f3:fa:6f:15:bb:a8:48:5e:d4:c8:51:bd:
41:18:95:47:a4:2a:03:30:66:34:58:e4:d8:39:60:
cd:c9:06:6d:dc:b9:58:48:5e:c8:ed:ff:72:89:2c:
2a:01:e6:b7:7e:a9:99:18:fa:bf:3e:ea:32:db:c9:
92:3f:dd:4c:bc:07:6a:6b:fe:f5:b6:f1:d0:65:66:
53:96:dd:9b:93:e3:e0:bd:fc:c7:1e:4d:ba:8d:84:
d9:08:4a:eb:74:d9:2b:ec:65:b5:d1:5e:5c:12:ee:
43:3f:04:60:80:3e:d1:77:74:3a:78:5c:50:d7:55:
e2:79:8b:c6:b4:10:87:8f:2d:19:94:4d:a0:e5:85:
bf:41:6d:cc:11:fc:ff:29:09:a4:a5:25:f1:ac:b9:
9d:9c:18:f0:50:66:49:a0:c6:1d:8d:35:a3:a1:ad:
26:f7:7b:42:bb:2e:85:ac:e9:9b:c0:4a:36:90:67:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:44:26:4D:49:22:4A:EE:AD:3A:73:81:68:DA:EF:B2:E8:10:82
X509v3 Authority Key Identifier:
keyid:FC:32:87:44:86:AB:02:DC:0D:29:18:66:E4:75:9A:E2:6C:60:67:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_DKHRIarAtwNKRhm5HWa4mxgZ6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_DKHRIarAtwNKRhm5HWa4mxgZ6o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/AUBEJk1JIkrurTpzgWja77LoEII.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/22
103.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:73:cf:44:dd:5c:74:36:e0:f9:4a:0c:9f:bf:e3:67:36:be:
38:db:3d:6f:a2:73:1c:9f:46:57:5a:cc:09:11:f8:1c:59:fe:
55:d2:56:dc:8e:79:83:93:ef:5f:c1:c3:ef:73:b2:df:3a:9e:
4e:b5:1f:7c:59:14:7b:1a:d8:fb:21:19:04:3a:c0:95:10:3e:
e0:5d:bb:5a:f0:15:97:d7:c3:73:3d:1d:64:a9:16:8d:10:10:
e5:fb:8c:24:ca:71:11:be:dc:a9:6a:d3:24:97:24:79:9b:f0:
50:73:0f:04:c9:34:da:2a:8d:a4:b4:46:3e:e8:49:ce:06:36:
72:de:a3:b6:80:e5:28:b4:94:32:67:9d:5c:f0:94:64:71:84:
fa:b8:a7:aa:f2:50:64:fc:78:c2:cc:29:bf:ea:71:b6:28:44:
2a:8e:bd:79:06:fe:0a:e3:76:20:2d:7c:f6:e9:41:73:1e:d7:
0f:e5:12:52:61:ae:f5:4a:15:b0:d7:9f:d0:a0:81:9b:f0:9b:
e6:1e:51:07:ed:89:7a:5e:86:39:06:70:87:11:a2:6c:35:17:
03:54:41:22:3c:c3:1a:03:37:f5:d6:ef:48:44:b2:6f:a2:37:
ba:88:be:6b:9a:50:ef:d1:14:ce:71:a9:05:f5:d0:86:1a:f6:
c5:68:b7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org