Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1826/wMbCEjZA8sBORCYZFswflfN8Wfg.roa
File: wMbCEjZA8sBORCYZFswflfN8Wfg.roa (raw, json)
Hash identifier: wKQkyM00+/M+J5aF5W3HkkeDONBoK2GpKCrJp19HlaU=
Subject key identifier: C0:C6:C2:12:36:40:F2:C0:4E:44:26:19:16:CC:1F:95:F3:7C:59:F8
Certificate issuer: /CN=FC32874486AB02DC0D291866E4759AE26C6067AA
Certificate serial: 0290
Authority key identifier: FC:32:87:44:86:AB:02:DC:0D:29:18:66:E4:75:9A:E2:6C:60:67:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_DKHRIarAtwNKRhm5HWa4mxgZ6o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/wMbCEjZA8sBORCYZFswflfN8Wfg.roa
Signing time: Wed 18 Aug 2021 02:37:55 +0000
ROA not before: Wed 18 Aug 2021 02:37:55 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 133551
IP address blocks: 45.254.24.0/24 maxlen: 24
45.254.25.0/24 maxlen: 24
45.254.26.0/24 maxlen: 24
45.254.27.0/24 maxlen: 24
103.223.120.0/24 maxlen: 24
103.223.121.0/24 maxlen: 24
103.223.122.0/24 maxlen: 24
103.223.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC32874486AB02DC0D291866E4759AE26C6067AA
Validity
Not Before: Aug 18 02:37:55 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=C0C6C2123640F2C04E44261916CC1F95F37C59F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:c1:e4:b0:56:bc:db:09:8c:d8:a3:a5:7f:
9a:dd:75:a6:dd:21:9c:90:cd:8a:bf:9b:0e:0f:68:
bd:c1:d8:3d:f1:6d:7e:07:03:82:46:12:87:18:98:
6d:2e:3c:df:ce:8b:c0:85:e4:56:f8:84:dd:57:f4:
73:b2:db:b6:9c:c4:1a:e1:de:2f:29:c0:dc:e2:be:
6e:5b:8a:30:1b:9b:c0:e0:67:e2:cb:61:25:2b:c4:
e9:89:57:5c:d0:0c:af:0c:23:b5:a5:89:b5:90:77:
08:8f:e2:f8:eb:45:cc:73:cf:50:c6:13:79:1c:05:
90:a8:59:e7:b7:4c:e1:c5:68:1f:da:a9:b1:79:a2:
9f:ff:84:64:2d:ce:1b:54:a2:43:a7:ae:af:49:5d:
ef:04:30:da:e5:48:77:de:a1:97:c6:64:74:9c:d1:
44:af:e7:e9:a1:9d:ff:34:9e:0f:e2:4b:3b:5b:ea:
79:38:65:d9:5a:88:79:05:e1:75:38:76:0c:50:79:
62:14:25:58:43:97:76:d3:30:17:a2:ba:30:2b:ab:
e4:ac:a7:6b:e7:3b:14:fc:21:0b:41:3a:8d:1d:24:
4a:7d:1f:64:e0:65:2f:05:a4:dc:56:f0:2b:83:53:
92:2d:47:69:1c:7b:88:41:d4:d0:0e:b1:4c:f7:b1:
40:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:C2:12:36:40:F2:C0:4E:44:26:19:16:CC:1F:95:F3:7C:59:F8
X509v3 Authority Key Identifier:
keyid:FC:32:87:44:86:AB:02:DC:0D:29:18:66:E4:75:9A:E2:6C:60:67:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/_DKHRIarAtwNKRhm5HWa4mxgZ6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_DKHRIarAtwNKRhm5HWa4mxgZ6o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1826/wMbCEjZA8sBORCYZFswflfN8Wfg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.254.24.0/22
103.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:d4:ca:00:11:93:de:d2:9c:72:e1:4e:c3:fd:b4:47:d7:8e:
92:55:4e:9f:e6:45:31:9f:5f:b9:c5:de:d1:ea:58:33:9a:59:
14:0e:66:d1:53:a5:d4:bf:39:44:ee:2d:4e:9f:08:3b:80:6b:
85:0a:2e:41:8b:d3:ac:3a:94:88:80:ac:a3:da:72:d0:a0:f2:
59:8b:c8:e2:0b:1e:21:9b:1b:58:c1:3d:3e:10:9c:2a:a5:3e:
cb:13:58:6f:f8:2a:22:71:25:ec:fc:00:9d:08:94:1e:97:5e:
d3:cd:c2:ed:c6:4d:fd:0d:36:ff:bc:53:c5:d0:78:16:ed:e7:
6a:c5:1f:7d:00:a3:93:47:8f:1f:39:0d:a1:a5:f5:53:95:39:
57:cc:58:e7:9d:3e:b3:1e:d7:8d:b4:53:a0:ab:39:06:5d:6c:
2d:97:bc:6b:52:02:7d:fa:2c:7d:82:11:f1:95:c6:dc:80:53:
7d:e5:e5:47:30:65:31:19:de:5e:f5:fd:fd:b8:43:32:1e:51:
3f:a1:d4:dd:b2:43:4c:ea:63:38:00:b9:e1:b9:0c:26:f8:bf:
21:bd:19:fa:76:8a:f4:f3:62:ec:03:ca:be:dd:a2:2e:d3:c9:
27:17:93:cf:a5:21:b8:fe:dc:1e:0f:12:15:a6:c1:11:a5:ae:
11:71:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org