Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/IgDF5na6S8YRZLjkgtsE4AD024I.roa
File: IgDF5na6S8YRZLjkgtsE4AD024I.roa (raw, json)
Hash identifier: U7GbGMFvQBmj0LMTsEBuX+IBP9fW3GD7NsaNFPzEtPw=
Subject key identifier: 22:00:C5:E6:76:BA:4B:C6:11:64:B8:E4:82:DB:04:E0:00:F4:DB:82
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 05
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/IgDF5na6S8YRZLjkgtsE4AD024I.roa
Signing time: Wed 01 Jun 2022 07:07:20 +0000
ROA not before: Wed 01 Jun 2022 07:07:20 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 133551
IP address blocks: 45.254.24.0/24 maxlen: 24
45.254.25.0/24 maxlen: 24
45.254.26.0/24 maxlen: 24
45.254.27.0/24 maxlen: 24
103.223.120.0/24 maxlen: 24
103.223.121.0/24 maxlen: 24
103.223.122.0/24 maxlen: 24
103.223.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Jun 1 07:07:20 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=2200C5E676BA4BC61164B8E482DB04E000F4DB82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:e2:f7:c6:4b:63:88:d6:d6:f6:41:ae:01:
64:64:db:04:f7:12:43:32:1e:fc:b6:a6:c6:1d:d0:
93:4e:b1:32:a4:ad:07:f0:f0:b7:0f:40:44:81:1c:
33:b9:e7:1a:a6:f6:74:16:47:f2:6b:b8:d9:16:19:
53:b8:bd:c2:01:4e:04:03:d2:08:0d:bf:90:9f:61:
8e:5e:ec:56:c7:e3:4e:f7:da:ba:e5:d9:ec:38:3e:
39:e5:45:9c:f6:03:e5:f7:1b:de:d6:08:2d:e4:0b:
55:41:07:87:6d:c7:b4:35:b3:0a:bd:e9:c1:74:10:
87:1f:72:8e:09:29:b2:a0:eb:8e:75:72:1b:2b:d1:
59:a6:be:9b:51:97:42:98:ee:0b:e7:e3:af:5a:49:
60:60:dc:24:e1:9e:90:37:c4:81:26:f8:85:67:b5:
e9:ea:a6:dc:c4:99:0d:61:3a:a8:63:8c:6c:e5:79:
a7:34:e3:62:8c:33:e6:d8:7f:13:23:db:64:53:74:
16:5a:98:06:ee:00:84:69:6d:48:b6:c4:4b:87:ee:
01:1d:4b:44:46:53:8b:1f:8e:65:39:0f:e8:30:47:
63:12:e1:05:a5:0f:ef:d8:d6:65:f6:46:55:33:9c:
dc:02:e5:22:64:cf:ee:2e:94:1a:09:08:6d:da:ba:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:00:C5:E6:76:BA:4B:C6:11:64:B8:E4:82:DB:04:E0:00:F4:DB:82
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/IgDF5na6S8YRZLjkgtsE4AD024I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/22
103.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:c1:e6:5c:c5:1b:3d:e4:0b:c9:ea:5d:76:90:e5:c3:b0:7e:
63:df:ec:bb:a1:3c:ff:8a:ff:94:b7:1c:37:06:50:72:03:58:
24:78:be:d7:0f:01:a9:19:00:f7:26:31:8a:ca:43:8f:8c:87:
77:b1:ab:4e:43:a3:26:5b:6f:5a:40:74:e8:93:5f:ae:d7:ea:
e4:ab:da:d3:4f:10:a2:d8:dc:39:b6:09:89:01:01:5a:63:d3:
2f:86:5f:f8:b3:7f:90:3f:38:8d:2a:ca:d2:25:a9:94:d6:61:
80:98:a2:ca:56:6a:c9:5c:ed:ed:9f:42:37:14:83:89:29:00:
60:01:93:d3:b7:a5:b4:9e:39:6d:b2:4d:ab:aa:f5:f3:4e:a7:
7d:41:7c:08:6c:5b:78:ac:14:9f:f8:d3:6f:8e:46:c0:b6:5d:
40:68:2d:72:f7:72:cc:73:35:7a:b1:8e:94:fe:12:97:2b:4f:
ad:0d:f1:cf:f4:49:50:e1:29:33:2b:fa:5b:80:6a:b0:15:80:
df:34:e3:5d:7e:5d:a2:e0:05:2e:3e:93:a1:aa:42:1f:a4:fb:
b8:2a:88:ec:47:4a:16:38:48:0c:72:11:fa:49:a3:14:cd:8b:
7d:58:ac:4e:94:14:b3:d9:9f:00:84:bf:87:b2:04:6e:d1:1c:
1f:65:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:10 2023 by rpki-client on console-ams.rpki-client.org