Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/pWiCyl0UZS6AOFqWsjJPTdTUcCw.roa
File: pWiCyl0UZS6AOFqWsjJPTdTUcCw.roa (raw, json)
Hash identifier: xQQjT8pZnqLYAaOjnvBS6MS1DzLP12u0PPGuphRH4dI=
Subject key identifier: A5:68:82:CA:5D:14:65:2E:80:38:5A:96:B2:32:4F:4D:D4:D4:70:2C
Certificate issuer: /CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Certificate serial: 0B96
Authority key identifier: 75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/pWiCyl0UZS6AOFqWsjJPTdTUcCw.roa
Signing time: Tue 09 Jan 2024 07:14:55 +0000
ROA not before: Tue 09 Jan 2024 07:14:55 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 152320
IP address blocks: 103.223.120.0/24 maxlen: 24
103.223.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2966 (0xb96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75324D3B8F1D5EBA5770E661EE16AF24A750554F
Validity
Not Before: Jan 9 07:14:55 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=A56882CA5D14652E80385A96B2324F4DD4D4702C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:cd:76:36:1c:e3:fc:8e:57:df:e3:0f:b5:
a4:20:d4:c7:f3:59:d3:b6:eb:14:8c:fa:af:42:a9:
aa:ce:83:d4:2c:84:04:6e:7a:ad:08:d7:1a:28:59:
dc:48:61:f2:82:51:e5:9e:85:10:21:64:56:4a:f8:
96:c4:cd:44:4e:44:0e:f5:af:ec:9d:4c:89:28:dc:
6a:9a:94:d4:a7:45:d9:a5:5c:b8:2f:db:79:0a:7e:
50:0e:87:a7:a8:02:a2:7f:ed:fe:42:75:46:cb:eb:
1b:c0:f1:d7:ae:ae:f8:fd:85:a0:7a:dd:4b:96:a1:
c0:e0:64:d7:54:cc:70:88:5c:71:39:84:05:25:9f:
f3:9f:62:ee:85:d8:77:dc:a1:73:50:40:83:2f:96:
ca:fd:8d:a9:3f:88:77:13:95:ab:a9:60:6a:93:6e:
79:95:4f:3a:f1:3e:d2:28:cf:66:b4:f8:cf:4a:98:
49:0b:c1:93:3a:8e:d5:2d:40:60:b1:1b:35:e6:24:
68:03:c8:6f:3e:cd:01:34:a5:2e:b4:60:70:33:31:
df:58:dd:49:a1:e3:22:9f:ac:46:63:44:18:45:a6:
2d:87:68:57:9e:d5:e3:48:04:2f:56:43:ea:f5:b2:
ca:99:01:ac:65:8e:f0:ad:60:f6:2c:bf:ef:27:bd:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:68:82:CA:5D:14:65:2E:80:38:5A:96:B2:32:4F:4D:D4:D4:70:2C
X509v3 Authority Key Identifier:
keyid:75:32:4D:3B:8F:1D:5E:BA:57:70:E6:61:EE:16:AF:24:A7:50:55:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/dTJNO48dXrpXcOZh7havJKdQVU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dTJNO48dXrpXcOZh7havJKdQVU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/pWiCyl0UZS6AOFqWsjJPTdTUcCw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.223.120.0/23
Signature Algorithm: sha256WithRSAEncryption
28:25:5a:1a:7d:55:dd:e5:fc:9d:b6:24:b5:ff:da:0c:b1:bd:
61:f5:a9:c4:1e:61:85:0f:cb:fa:00:43:45:c8:00:56:2a:fb:
6a:43:6d:16:1e:0d:96:0b:a1:7c:ac:26:79:2b:d7:ae:91:a9:
b5:5a:b0:94:2d:4d:43:5e:7c:af:88:31:66:bb:06:0f:e4:d7:
ec:f1:88:12:d1:57:de:e7:e7:80:ce:37:2e:f8:c2:84:85:38:
3b:91:db:4d:40:c9:17:95:a6:e4:18:5a:a0:da:fb:e0:d7:be:
68:44:9e:aa:5e:48:05:75:ac:44:c0:d4:35:b1:3c:47:56:ba:
10:5e:f1:46:fb:3d:b7:11:d1:bf:6e:0a:be:76:3a:05:69:c2:
73:6c:d9:90:62:8b:b8:97:d8:0e:81:69:09:7c:42:3b:da:f9:
71:bb:56:e3:12:81:5d:8e:01:c3:40:03:15:31:de:4f:78:49:
6a:c9:70:a1:41:ef:a3:4d:fd:6f:25:d2:d1:47:e2:6c:cd:1f:
92:cc:01:81:17:5b:f0:66:57:79:bf:7d:fa:99:6b:89:02:8b:
d9:db:51:8c:e4:fd:28:56:3d:36:25:ee:50:40:8b:38:a6:d3:
36:17:03:4a:7f:98:88:3e:1c:76:7b:70:0a:98:16:aa:4a:f2:
be:02:48:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org