Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/d3lIL-zu4MXlcxBBvhAwW-1Wblc.roa
File: d3lIL-zu4MXlcxBBvhAwW-1Wblc.roa (raw, json)
Hash identifier: KrJ0fX2BB5HtlBpII0VNjfhqkow214tJTTHJj9RlC6U=
Subject key identifier: 77:79:48:2F:EC:EE:E0:C5:E5:73:10:41:BE:10:30:5B:ED:56:6E:57
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 06E3
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/d3lIL-zu4MXlcxBBvhAwW-1Wblc.roa
Signing time: Thu 18 May 2023 07:25:45 +0000
ROA not before: Thu 18 May 2023 07:25:45 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 10103
IP address blocks: 45.254.24.0/24 maxlen: 24
45.254.27.0/24 maxlen: 24
103.223.120.0/24 maxlen: 24
103.223.121.0/24 maxlen: 24
103.223.122.0/24 maxlen: 24
103.223.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: May 18 07:25:45 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=7779482FECEEE0C5E5731041BE10305BED566E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b7:8f:57:59:20:39:ed:e7:af:09:e2:06:3b:
0b:f5:1e:dd:24:16:f5:3f:88:4d:2e:3b:64:c4:06:
e9:78:63:b2:fe:98:17:b3:1e:71:16:b4:3d:61:22:
d5:c8:d2:59:49:fa:ff:0d:1e:b5:99:66:f3:51:73:
39:9f:90:27:21:c6:96:6c:6b:73:97:7a:56:ed:d7:
d2:32:bf:15:d7:64:47:fe:fa:4a:b2:3e:85:f6:41:
a0:8f:cd:5d:a5:10:0d:b8:b4:2b:b7:6b:5f:a4:2a:
2c:31:38:fe:b1:8e:4b:c9:14:ec:02:ca:a1:15:40:
c5:d4:3c:82:9d:76:f3:d5:fe:ea:cd:a9:46:8a:7a:
c8:80:29:3c:42:4d:d8:91:92:28:3e:48:8c:8e:fd:
d2:f2:b5:26:16:05:3d:e3:79:4b:4a:08:4a:83:ba:
03:eb:f9:b7:ce:a6:34:e5:18:41:73:62:b2:8b:e7:
c8:66:be:f9:73:8c:1c:2f:e8:3a:9c:90:ef:99:d2:
dc:20:44:ba:d8:0b:84:8b:49:9d:f0:c1:bb:bf:1b:
fa:b4:3e:e6:26:b7:35:42:46:ac:56:a6:4a:51:aa:
4a:6d:83:f3:36:78:70:94:e2:da:88:3b:3a:73:f9:
27:8c:fb:9f:fe:54:3c:8d:db:2e:fd:1e:f6:2b:7c:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:79:48:2F:EC:EE:E0:C5:E5:73:10:41:BE:10:30:5B:ED:56:6E:57
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/d3lIL-zu4MXlcxBBvhAwW-1Wblc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/24
45.254.27.0/24
103.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:eb:4b:3e:88:e1:ce:23:1e:0d:46:a1:24:78:83:2c:de:4d:
0a:72:40:56:9a:47:74:da:d9:90:be:67:1e:fb:9b:ca:77:e1:
c5:c7:dd:dd:7d:59:ea:d9:69:36:dd:ad:74:27:5c:f4:e7:3f:
91:f3:a7:d9:5a:99:22:34:32:cf:43:52:4a:ab:1c:ee:cc:12:
85:f3:5a:a8:ae:1c:29:b8:38:8e:16:00:f1:5d:4a:d6:8f:bb:
31:c6:94:6a:bf:7b:03:c0:4a:c4:36:e3:62:74:53:ac:07:6a:
f4:2d:17:6b:81:af:64:d8:06:22:63:98:07:a3:b1:0b:87:31:
20:d2:84:e2:36:75:b8:6a:a6:16:45:dc:f3:e7:72:25:3a:8d:
98:f8:51:03:d3:84:6c:c9:c2:0e:9a:e6:63:50:b8:b3:da:9b:
91:9a:dc:cb:3a:75:2c:f4:8d:83:b1:34:b4:26:4b:2e:08:0a:
e3:8b:84:57:2f:52:23:99:d7:62:12:88:fc:f5:6b:74:36:6e:
12:db:e6:10:91:0d:7c:90:c3:51:0e:76:e6:0e:25:e9:52:1e:
6d:1d:c2:5e:8a:1b:7c:ce:6d:dd:97:c4:dd:47:42:40:40:3a:
aa:a6:04:ad:8b:6c:98:66:ad:92:50:a8:72:dd:bd:f4:bf:df:
d4:d5:70:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org