Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/B2Sh_72sLNk85g78pRUoz-D6wTQ.roa
File: B2Sh_72sLNk85g78pRUoz-D6wTQ.roa (raw, json)
Hash identifier: qW+y95lAluSeCmHQek2u6u5JgM/oEkd+pc7wKu+Afn4=
Subject key identifier: 07:64:A1:FF:BD:AC:2C:D9:3C:E6:0E:FC:A5:15:28:CF:E0:FA:C1:34
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 0948
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/B2Sh_72sLNk85g78pRUoz-D6wTQ.roa
Signing time: Tue 07 Jun 2022 02:11:22 +0000
ROA not before: Tue 07 Jun 2022 02:11:22 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 131482
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: Jun 7 02:11:22 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=0764A1FFBDAC2CD93CE60EFCA51528CFE0FAC134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:5f:f5:6b:3f:8d:7c:22:51:88:3c:ff:35:
f1:f3:d3:40:5f:94:66:81:15:8a:a6:54:d6:6c:23:
d5:92:45:6c:1c:e2:a6:62:e5:7c:2d:0f:18:02:1c:
6a:fb:4c:68:52:6d:d5:0f:6a:6a:2b:2c:73:6d:6a:
d1:a1:dc:b2:49:5d:65:22:18:2e:fc:69:60:fb:7e:
37:8f:fe:b4:84:28:89:a7:a3:d0:a3:99:c6:28:c5:
3a:16:3d:fc:0b:1a:d5:9e:b5:14:bd:87:39:18:4b:
cb:79:90:6c:e3:20:55:e8:65:74:cd:79:bf:7e:46:
db:52:18:e5:62:1d:e3:e8:6a:af:92:c9:a7:84:f7:
55:ae:76:a8:32:54:e5:43:1c:5a:36:a6:3f:4f:0b:
35:70:a4:f4:cf:32:6b:f4:96:b9:3b:85:ae:2c:dd:
cf:fd:f4:47:1c:08:45:a3:f1:40:64:cc:68:12:ce:
52:74:ad:a5:d6:3e:d3:ec:f8:1f:22:c4:d6:80:0e:
bf:66:8d:7d:97:f9:76:5c:fb:0f:0d:80:25:1d:fd:
0b:b0:4e:0e:e6:ae:70:4f:c4:04:6f:44:fb:8e:c9:
21:35:06:c0:da:6a:cc:61:ea:e8:0c:ac:bd:53:09:
bf:a5:26:73:f7:47:a0:e3:ae:e3:d8:28:67:8b:b5:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:64:A1:FF:BD:AC:2C:D9:3C:E6:0E:FC:A5:15:28:CF:E0:FA:C1:34
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/B2Sh_72sLNk85g78pRUoz-D6wTQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:bf:dd:d4:cb:eb:c0:b5:a8:86:8b:95:0c:8d:1a:e0:e5:e8:
e5:db:60:53:b8:02:e3:e7:5b:c8:a2:26:fb:4c:9a:fc:b4:2f:
9e:25:19:9e:f3:ab:b9:b0:ae:1e:5e:f6:fa:70:db:d6:a2:0b:
aa:9e:6a:a4:ff:df:5a:1b:df:4d:e4:c0:66:a8:b4:c1:b1:e2:
85:3e:22:d6:1b:52:fa:56:0d:1a:fd:1c:30:f2:b8:a0:5b:e2:
ae:87:5a:0d:60:2f:6a:fc:99:49:fc:6b:87:ef:a9:70:b0:e2:
a1:1b:4c:34:60:88:e9:1e:7e:70:42:35:65:bd:74:6f:c1:ec:
a9:a9:40:49:79:a6:84:bc:de:81:3a:ad:34:e6:81:22:7b:d8:
57:83:6d:6c:57:70:46:95:7b:e4:06:e5:d5:6f:9b:bc:7b:db:
4d:6e:3d:01:88:c4:63:76:39:64:0f:c4:d5:36:b7:88:9d:34:
25:40:a2:d2:06:aa:b7:b0:33:8c:19:2c:de:64:1a:19:f3:2f:
43:ac:d0:eb:f7:2c:b5:43:ce:f5:60:b4:80:c0:47:d1:3c:76:
cd:64:e6:fa:a4:da:f5:47:47:e7:f2:af:c9:b4:50:95:c6:ee:
99:68:91:47:39:f2:a0:ae:0c:cd:ca:e4:bd:fc:b0:d7:2f:a3:
0c:80:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org