Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/_3XB7oPoUSsJ2CJLe0qDuUGYE0g.roa
File: _3XB7oPoUSsJ2CJLe0qDuUGYE0g.roa (raw, json)
Hash identifier: JrOZfc75ZZuQFFnYuw1VcBtzzOxKUtnfMR3ZyBttOOg=
Subject key identifier: FF:75:C1:EE:83:E8:51:2B:09:D8:22:4B:7B:4A:83:B9:41:98:13:48
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 04
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_3XB7oPoUSsJ2CJLe0qDuUGYE0g.roa
Signing time: Wed 01 Jun 2022 07:07:20 +0000
ROA not before: Wed 01 Jun 2022 07:07:20 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 10103
IP address blocks: 45.254.24.0/24 maxlen: 24
45.254.27.0/24 maxlen: 24
103.223.120.0/24 maxlen: 24
103.223.121.0/24 maxlen: 24
103.223.122.0/24 maxlen: 24
103.223.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Jun 1 07:07:20 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=FF75C1EE83E8512B09D8224B7B4A83B941981348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:e6:65:c9:1e:ef:c4:09:d5:5f:88:2d:b4:
65:cb:33:d8:4d:7e:67:82:57:5d:85:7d:0a:29:fe:
84:3a:30:9c:74:fe:5f:5b:16:62:cf:65:17:11:73:
62:16:fc:79:75:1b:e6:ab:98:c0:7e:73:46:bf:f3:
3a:ef:7f:2e:cc:f6:2d:22:a1:3d:29:58:0e:7e:45:
86:09:2a:eb:8b:7e:f1:c1:74:87:f2:52:b7:a1:9e:
22:0a:0a:12:ce:a6:45:62:09:e9:49:0e:43:ae:2d:
78:8b:6d:b0:d4:72:a9:a3:e5:90:16:f1:ae:1e:f9:
bf:d5:96:b8:43:35:7f:d1:56:40:0d:5b:59:51:96:
2d:09:80:92:d2:86:e7:0b:a7:6e:2a:3a:6f:58:4a:
90:b7:e2:03:4b:d7:95:4c:6d:f4:3d:56:ac:a4:49:
e0:3c:9d:61:db:10:c4:50:25:31:7a:9b:c5:a4:a0:
92:ec:8b:88:a7:7f:ed:ee:b4:f9:1f:46:d2:5f:31:
62:3e:a9:c1:b8:8b:2a:33:2b:cd:1b:6f:8f:fd:de:
37:1f:06:e5:f6:b6:b3:52:4c:46:b3:fa:52:bd:7e:
a6:95:64:06:34:32:3f:af:b5:3a:76:f4:71:f7:62:
fa:e4:2d:06:5f:9e:4a:07:00:14:8a:b4:5b:5b:59:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:C1:EE:83:E8:51:2B:09:D8:22:4B:7B:4A:83:B9:41:98:13:48
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_3XB7oPoUSsJ2CJLe0qDuUGYE0g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/24
45.254.27.0/24
103.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:fd:1f:18:21:02:7b:c4:0d:fa:7c:4f:75:9a:28:e1:aa:55:
99:11:d6:64:d4:7c:5d:11:dd:8b:59:e6:4f:87:44:f9:e4:3f:
dd:a3:f3:cb:cf:a4:62:a4:04:52:39:ff:a1:69:5e:22:f9:a4:
51:16:6b:96:83:f1:aa:25:a5:57:3e:67:db:27:6e:da:47:eb:
32:40:eb:7f:f8:86:70:99:2c:ff:2f:75:12:3c:a4:b9:af:ba:
5d:f8:f2:87:d6:96:86:12:85:e7:f9:3d:dc:e8:81:1b:da:37:
a5:89:ea:fa:7b:b8:6f:0f:11:2d:4d:91:4e:21:d9:fe:15:ac:
6f:48:16:86:27:d5:69:96:1b:30:5e:77:0f:8a:12:a2:9d:4d:
f5:06:e5:db:86:fd:8b:a6:b4:e0:9c:fd:94:d0:ea:90:5c:d8:
0c:ac:08:f6:2b:8c:f4:d9:3b:18:7a:6c:a7:c9:ca:65:1c:a8:
3e:08:22:8b:b7:2d:8a:2f:01:0f:8f:45:b0:a8:b5:d0:94:22:
64:66:75:29:c3:0b:fa:f1:3e:58:a7:68:85:07:4e:7f:5a:ac:
a8:e4:88:4b:d9:a5:cd:e1:3b:7f:01:6b:0d:18:3a:ce:67:6f:
e6:40:62:6b:8a:22:07:2e:45:4f:31:73:dd:15:d3:79:ed:34:
02:1a:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org