Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/moW2uaDN2NzqncsNs6eAeIbmnQg.roa
File: moW2uaDN2NzqncsNs6eAeIbmnQg.roa (raw, json)
Hash identifier: cXQ4YHUkHpUTtuRn2MrvkMvu/uGQoUEVT7fCGTTf3BY=
Subject key identifier: 9A:85:B6:B9:A0:CD:D8:DC:EA:9D:CB:0D:B3:A7:80:78:86:E6:9D:08
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 06E4
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/moW2uaDN2NzqncsNs6eAeIbmnQg.roa
Signing time: Thu 18 May 2023 07:25:45 +0000
ROA not before: Thu 18 May 2023 07:25:45 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 133551
IP address blocks: 45.254.24.0/24 maxlen: 24
45.254.25.0/24 maxlen: 24
45.254.26.0/24 maxlen: 24
45.254.27.0/24 maxlen: 24
103.223.120.0/24 maxlen: 24
103.223.121.0/24 maxlen: 24
103.223.122.0/24 maxlen: 24
103.223.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: May 18 07:25:45 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=9A85B6B9A0CDD8DCEA9DCB0DB3A7807886E69D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:62:c8:2e:30:bf:6e:ac:a5:50:92:64:61:
2b:67:ba:00:08:05:a9:f0:8b:f3:65:e0:e5:f2:a2:
46:cc:32:e5:91:a3:31:e1:cb:f6:0b:2f:39:72:52:
32:56:e8:95:0a:17:11:52:89:28:ed:d2:08:eb:b2:
f1:a2:84:d8:0d:1a:02:d0:cd:f9:2d:f0:8c:34:bc:
ed:b3:e5:ef:93:0e:0e:32:3d:8e:88:6e:ac:bd:ae:
d7:52:42:f5:0c:b7:2b:e0:90:2a:15:84:45:5d:98:
28:c4:f0:8b:34:b3:5e:d8:64:0d:48:09:f9:a2:bf:
45:d1:08:5f:c6:a2:90:62:e6:5b:21:44:5b:21:37:
08:6b:3e:d6:28:a5:f8:65:71:fd:e7:9d:fa:7d:e5:
28:0d:cf:8d:a9:c2:42:70:9b:a6:3a:81:76:da:37:
79:d5:38:54:23:6e:33:c3:c9:c6:8f:ed:c4:20:0d:
7d:f2:6c:d1:78:2a:89:b4:64:95:d3:4c:f2:40:84:
76:12:e0:84:f9:ba:ae:ac:11:dd:a4:72:93:c4:29:
1f:c8:3a:94:f7:80:f3:9f:be:7b:20:8f:69:df:cb:
24:45:07:e0:8d:6e:7e:e8:2b:e9:d7:3d:6a:ac:45:
b2:c7:79:3a:0d:0f:de:5b:fe:8f:1c:20:0c:c2:82:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:85:B6:B9:A0:CD:D8:DC:EA:9D:CB:0D:B3:A7:80:78:86:E6:9D:08
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/moW2uaDN2NzqncsNs6eAeIbmnQg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/22
103.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:cf:6b:70:5e:90:3d:c8:2d:76:dd:51:a9:ed:b4:6f:10:29:
d9:52:03:5d:32:fa:b5:b3:33:3d:ec:22:27:58:c4:09:dd:ab:
9b:27:12:42:3f:9c:56:a1:09:6f:a4:19:3c:c5:de:ae:1a:0a:
d0:77:d9:cc:6a:91:95:89:77:a0:aa:38:c3:91:7b:65:d5:bc:
1a:bf:16:1a:37:74:bd:14:72:2c:ba:b0:6a:28:71:79:d8:77:
cf:16:e8:47:c6:f2:79:10:0f:b9:8b:89:7e:ff:f7:93:1a:8c:
0d:4a:06:82:3e:ad:3d:36:c8:9a:fa:86:b2:84:c2:95:61:3e:
6c:f8:59:e6:c6:c1:a3:7e:2e:5c:98:02:64:b3:93:0b:63:86:
b7:fa:be:54:29:ac:5e:50:c2:ce:75:36:08:85:a5:b3:d1:b3:
59:c9:3b:03:1c:34:18:1c:de:fd:f1:98:62:6b:c3:82:bb:8f:
46:64:06:4d:10:4a:20:4d:68:4c:02:63:d2:4e:23:c6:83:28:
b4:35:cf:69:e3:aa:3c:70:37:70:1f:66:11:b1:28:19:02:c1:
f1:ab:55:b5:0c:1b:e7:86:fc:8e:3e:51:6c:15:e5:55:72:2f:
43:57:a0:09:73:59:07:69:db:53:55:2f:77:b4:99:b2:6a:2f:
16:23:c6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org