Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2072/sDPdALys0nEHk_739MokRK1kHSo.roa
File: sDPdALys0nEHk_739MokRK1kHSo.roa (raw, json)
Hash identifier: Hnsiva0S9MvkDsJegp9Z1bIytwyrBf6m2c22y+UC2Po=
Subject key identifier: B0:33:DD:00:BC:AC:D2:71:07:93:FE:F7:F4:CA:24:44:AD:64:1D:2A
Certificate issuer: /CN=3235CF248FFD07619CC851AB5E6B49DDD9C5EAB5
Certificate serial: 03
Authority key identifier: 32:35:CF:24:8F:FD:07:61:9C:C8:51:AB:5E:6B:49:DD:D9:C5:EA:B5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MjXPJI_9B2GcyFGrXmtJ3dnF6rU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/sDPdALys0nEHk_739MokRK1kHSo.roa
Signing time: Thu 27 May 2021 05:04:42 +0000
ROA not before: Thu 27 May 2021 05:04:42 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 133199
IP address blocks: 103.67.173.0/24 maxlen: 24
103.67.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3235CF248FFD07619CC851AB5E6B49DDD9C5EAB5
Validity
Not Before: May 27 05:04:42 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B033DD00BCACD2710793FEF7F4CA2444AD641D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:a0:b9:94:c9:b6:65:9f:77:32:bb:ef:0b:
fa:01:70:8a:a4:2a:7b:85:ba:56:49:f9:f3:3f:7a:
9b:bb:be:d1:f9:0e:98:33:88:27:d1:6c:b9:11:d5:
68:12:b9:92:98:18:3a:a7:22:fa:f7:2f:3a:41:2d:
06:ff:8e:57:80:b1:fb:e2:fb:03:70:03:e3:8a:49:
85:91:da:eb:21:83:62:7a:e8:c7:fa:4a:c0:79:96:
77:e0:ec:e8:00:80:1a:02:c2:fc:fb:c7:ff:6b:94:
e6:0d:0c:c2:2b:85:a1:fb:4e:e8:21:25:1c:0b:ee:
d1:f5:51:99:0d:a7:c0:a5:96:4d:48:52:49:02:c9:
5b:55:42:4a:9e:d8:84:19:a2:b9:94:7b:0c:4d:92:
4d:54:63:9c:ca:3a:ee:05:3b:b6:9b:a2:21:84:22:
a0:75:a6:de:00:d0:1c:d4:65:84:ad:14:e9:4c:79:
d0:66:74:d4:d7:68:4d:ed:b7:1a:37:38:f5:46:1a:
61:93:83:62:25:8c:69:8d:90:0c:ae:fa:0e:a3:9c:
05:2b:55:e2:09:22:85:58:34:20:94:f4:cb:12:eb:
bd:9c:37:d0:02:12:d8:46:16:51:db:2e:a2:93:69:
11:5f:e4:1e:91:9c:b0:76:a8:18:8c:fb:8d:84:2c:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:33:DD:00:BC:AC:D2:71:07:93:FE:F7:F4:CA:24:44:AD:64:1D:2A
X509v3 Authority Key Identifier:
keyid:32:35:CF:24:8F:FD:07:61:9C:C8:51:AB:5E:6B:49:DD:D9:C5:EA:B5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/MjXPJI_9B2GcyFGrXmtJ3dnF6rU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MjXPJI_9B2GcyFGrXmtJ3dnF6rU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/sDPdALys0nEHk_739MokRK1kHSo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.173.0-103.67.174.255
Signature Algorithm: sha256WithRSAEncryption
99:81:9b:d6:d5:11:d0:f3:b7:62:9a:6b:5a:ee:64:1f:be:36:
49:7a:10:c2:4f:31:62:16:5a:79:a0:7a:f8:50:12:5e:42:c6:
28:d9:09:0f:b7:af:e7:8c:36:4a:d9:58:99:c2:d2:17:02:d7:
27:79:c2:92:4b:02:2f:73:cd:b4:cf:e6:36:6c:83:96:a5:e3:
5d:c4:06:b1:be:8b:66:a5:42:e0:73:f0:e4:9d:de:cc:e6:2e:
08:2c:d8:6e:24:92:06:e6:cf:36:ec:10:05:5e:87:44:06:67:
1c:f3:ed:70:96:73:1a:04:6f:6e:6d:fe:c8:91:12:53:23:83:
5a:26:c4:16:c5:60:00:8b:59:be:af:6d:4c:bb:0e:79:bb:24:
7b:75:ec:68:5a:50:df:86:a1:ce:7e:01:9e:11:3e:eb:28:4e:
fa:47:36:b8:85:47:e9:57:1f:49:1b:4c:ee:f4:58:8d:70:46:
47:2a:8b:df:dc:5d:f8:11:6f:3d:ca:94:e3:57:7d:e5:5e:0d:
b0:e2:47:85:d8:ca:dd:be:60:68:48:cc:35:a1:75:f7:78:e5:
2d:27:10:46:6e:df:15:19:66:76:8c:5a:06:e2:98:34:65:b3:
f8:8e:a3:ef:05:d4:12:34:22:9a:51:c6:fb:88:04:f0:73:df:
b0:e6:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org