Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/gYNqORZm9DV6iP815qJ4P7yM1O4.roa
File: gYNqORZm9DV6iP815qJ4P7yM1O4.roa (raw, json)
Hash identifier: Dkz0SW8M7kp5n4LXaT+aaD28TuVTizwVz/12uVvUnVc=
Subject key identifier: 81:83:6A:39:16:66:F4:35:7A:88:FF:35:E6:A2:78:3F:BC:8C:D4:EE
Certificate issuer: /CN=FC32874486AB02DC0D291866E4759AE26C6067AA
Certificate serial: 0113
Authority key identifier: FC:32:87:44:86:AB:02:DC:0D:29:18:66:E4:75:9A:E2:6C:60:67:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_DKHRIarAtwNKRhm5HWa4mxgZ6o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/gYNqORZm9DV6iP815qJ4P7yM1O4.roa
Signing time: Thu 03 Jun 2021 19:28:58 +0000
ROA not before: Thu 03 Jun 2021 19:28:58 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 10103
IP address blocks: 45.254.24.0/24 maxlen: 24
45.254.27.0/24 maxlen: 24
103.223.120.0/24 maxlen: 24
103.223.121.0/24 maxlen: 24
103.223.122.0/24 maxlen: 24
103.223.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC32874486AB02DC0D291866E4759AE26C6067AA
Validity
Not Before: Jun 3 19:28:58 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=81836A391666F4357A88FF35E6A2783FBC8CD4EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:5e:08:e3:3b:f4:bb:08:09:9b:56:1a:a2:
f6:68:37:a2:1b:42:32:09:c2:88:9d:8f:eb:a7:49:
66:ac:28:3f:ae:64:8b:0a:8e:56:01:44:5a:15:6a:
45:26:ec:e3:18:22:ce:f6:28:42:9e:61:30:c7:1e:
ea:0a:34:e7:86:99:33:81:9d:10:b5:d3:2d:aa:ff:
21:a4:43:ff:05:08:8f:e0:1a:98:84:2b:ec:c7:64:
34:71:f5:c3:e0:5b:1a:29:6f:d4:c8:c3:34:c9:c5:
3e:9c:bb:86:b4:a6:44:2c:5b:da:b6:46:a8:6a:a9:
11:91:a6:36:5c:a2:f3:09:7e:4b:ad:8f:3a:a9:f0:
d5:03:72:c0:d1:d7:3b:e0:6d:e9:d3:87:e5:71:1d:
da:98:40:09:1d:f4:29:ca:50:f5:d6:9d:0a:35:23:
c1:73:58:5a:30:be:ca:f1:b6:d4:d4:1e:a7:84:a3:
e8:37:46:5a:bd:9d:83:b2:0c:57:ae:0f:bb:d2:ce:
b5:36:78:e7:c3:28:7f:87:1d:a3:79:de:d8:bf:6b:
a2:9a:3f:4a:07:c9:0e:55:4f:ff:4e:77:dc:d9:10:
f1:6a:fc:d1:6b:2e:13:11:8a:6e:2e:ff:9b:17:c3:
52:a1:c3:95:cf:79:e9:5f:71:24:6a:8e:99:93:e9:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:83:6A:39:16:66:F4:35:7A:88:FF:35:E6:A2:78:3F:BC:8C:D4:EE
X509v3 Authority Key Identifier:
keyid:FC:32:87:44:86:AB:02:DC:0D:29:18:66:E4:75:9A:E2:6C:60:67:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_DKHRIarAtwNKRhm5HWa4mxgZ6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_DKHRIarAtwNKRhm5HWa4mxgZ6o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/gYNqORZm9DV6iP815qJ4P7yM1O4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/24
45.254.27.0/24
103.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:11:12:7d:5e:67:94:65:f8:38:3b:77:80:4e:86:f3:ea:69:
41:4f:1a:3f:0f:1b:8c:14:b9:cf:c7:34:2d:be:1b:23:4c:a7:
7b:03:31:94:70:f3:30:58:7c:06:49:37:9c:c2:d9:00:70:a1:
67:7f:7e:04:bd:7e:a5:74:21:96:a1:3b:41:b7:ce:9c:1e:02:
c6:c8:02:d2:2b:3f:59:ed:ed:2e:fb:70:57:7e:a4:24:70:4c:
ac:5f:cd:b0:8d:da:bd:7f:a2:68:20:0c:bb:a7:9a:48:60:63:
11:c3:0f:61:36:95:65:ee:92:d3:75:66:75:49:a3:58:df:2f:
e5:a7:14:16:5b:a1:0d:8d:3a:3a:d1:44:5c:f2:e5:ab:25:6a:
db:49:c2:9f:62:21:36:84:cd:31:6c:cd:83:fc:6f:5d:e5:fc:
ca:7c:c5:ac:00:28:9b:be:c8:4d:f4:e8:9f:32:47:b4:8f:cd:
df:fe:ab:b1:74:ab:6e:18:4d:d2:20:6b:d1:da:08:64:1b:da:
3d:59:d0:37:ec:4e:20:57:c9:66:06:96:08:6a:0f:d5:93:8e:
3a:16:b1:d2:ea:cc:75:92:34:e3:90:8c:0d:8c:cc:6a:2c:bc:
a6:c4:b4:3f:f0:97:a0:35:d1:02:7e:2a:d3:ac:90:0c:8d:86:
71:a2:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org