Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2072/Tm6um95GNigvcWoIt1U0O8Y1iNA.roa
File: Tm6um95GNigvcWoIt1U0O8Y1iNA.roa (raw, json)
Hash identifier: oPH6raPPuhRv5cVQPl/hQ6mIfZ7NfeqxmG9n0vym81g=
Subject key identifier: 4E:6E:AE:9B:DE:46:36:28:2F:71:6A:08:B7:55:34:3B:C6:35:88:D0
Certificate issuer: /CN=BCF4017A6E2915F26147D419E5F7A7D164D04984
Certificate serial: 0952
Authority key identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/Tm6um95GNigvcWoIt1U0O8Y1iNA.roa
Signing time: Tue 07 Jun 2022 10:09:41 +0000
ROA not before: Tue 07 Jun 2022 10:09:41 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 133199
IP address blocks: 103.67.173.0/24 maxlen: 24
103.67.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386 (0x952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCF4017A6E2915F26147D419E5F7A7D164D04984
Validity
Not Before: Jun 7 10:09:41 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=4E6EAE9BDE4636282F716A08B755343BC63588D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:66:1a:8b:fe:28:8b:17:55:77:03:b0:22:
94:37:aa:32:07:f0:1a:05:24:9a:ce:ad:82:d0:95:
03:5a:65:83:b6:2c:b9:95:13:57:4f:92:9b:66:84:
d5:1e:b1:f3:15:f4:58:64:ad:28:0d:f2:d8:1b:dd:
78:22:22:fc:06:ab:f2:44:84:c0:71:d4:d5:7b:84:
04:87:0b:0d:a9:fc:b9:62:5d:25:5f:68:17:b1:12:
89:cf:5a:8d:74:91:7b:3d:2c:a4:19:04:c9:9f:08:
63:61:c6:7f:f6:c3:73:2f:5d:35:0d:92:ce:28:7d:
d9:70:8a:9a:cf:d1:17:07:f9:1c:7f:3b:b4:8d:3d:
2f:ce:6b:14:ee:4a:4b:78:10:02:be:cd:ee:dd:2d:
52:80:bc:71:5b:fd:80:fa:6d:46:57:22:9f:2f:55:
2b:47:f2:15:99:97:bb:f5:97:c4:03:4b:66:70:cf:
7f:06:f2:a6:3d:de:98:22:44:89:e6:c5:b4:f5:e3:
f0:50:ad:1b:1c:d7:39:f5:60:44:51:e6:63:3a:24:
a0:5e:16:56:a8:ec:19:cf:43:98:0f:06:08:b2:6a:
8d:2f:f5:c4:7c:64:ef:53:fe:76:0f:80:2b:26:36:
cc:52:f1:26:f7:c5:c2:17:78:50:2a:4f:56:92:9e:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:AE:9B:DE:46:36:28:2F:71:6A:08:B7:55:34:3B:C6:35:88:D0
X509v3 Authority Key Identifier:
keyid:BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/Tm6um95GNigvcWoIt1U0O8Y1iNA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.173.0-103.67.174.255
Signature Algorithm: sha256WithRSAEncryption
24:b2:58:bf:b0:66:78:4c:1b:23:bc:65:b0:64:66:2e:7d:fc:
23:79:70:6f:5d:5f:a4:6a:b1:20:35:fc:86:31:06:82:ad:5f:
c0:60:fd:a5:93:23:b9:be:79:66:00:a7:23:40:31:d7:45:41:
7a:e0:b6:1f:28:ac:7e:2c:b5:5e:4d:18:f5:cc:e4:03:5b:eb:
ca:34:10:86:ab:06:e5:2f:c1:97:23:e3:d6:af:3c:c1:08:4a:
2d:54:7b:35:37:85:98:75:96:d3:44:f4:e7:50:59:61:5c:72:
4b:3a:4f:59:08:f3:aa:1e:4d:df:43:e5:9b:58:bb:01:70:c7:
88:a7:5d:05:72:1d:61:88:9e:7b:4f:d7:52:2c:7c:42:1c:e2:
00:cb:2f:f0:65:c8:8e:6b:19:95:a2:c1:a5:d4:bf:03:93:e3:
fd:5d:de:39:e5:be:f5:28:a3:9b:36:18:eb:b6:75:fe:ed:eb:
ec:45:eb:a3:cf:4e:8e:75:5c:85:c1:c1:0a:0e:04:b1:95:f2:
88:76:6f:20:af:39:cc:5d:b2:8d:e1:28:a8:68:07:2d:22:35:
5f:27:ba:53:ff:de:24:6d:fc:aa:71:70:06:99:e2:26:1a:85:
11:03:35:ec:c3:12:6b:83:e4:a8:64:9c:82:4f:42:f4:cf:4f:
88:6a:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:10 2023 by rpki-client on console-ams.rpki-client.org