Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/JvNpOrIMz5MQHTSHEtN_uDLp5o8.roa
File: JvNpOrIMz5MQHTSHEtN_uDLp5o8.roa (raw, json)
Hash identifier: b26J7DdeveWtsv9wjcIcOqmdJE1WTjGeqJXzgVN/ee8=
Subject key identifier: 26:F3:69:3A:B2:0C:CF:93:10:1D:34:87:12:D3:7F:B8:32:E9:E6:8F
Certificate issuer: /CN=BFB8536CF70F41D00B32505B278CAFCB387116CA
Certificate serial: 04
Authority key identifier: BF:B8:53:6C:F7:0F:41:D0:0B:32:50:5B:27:8C:AF:CB:38:71:16:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v7hTbPcPQdALMlBbJ4yvyzhxFso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/JvNpOrIMz5MQHTSHEtN_uDLp5o8.roa
Signing time: Thu 27 May 2021 05:02:38 +0000
ROA not before: Thu 27 May 2021 05:02:38 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 398704
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFB8536CF70F41D00B32505B278CAFCB387116CA
Validity
Not Before: May 27 05:02:38 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=26F3693AB20CCF93101D348712D37FB832E9E68F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:2e:97:6f:92:97:47:15:dd:b8:08:05:2c:
fe:71:e5:e6:50:18:41:0a:2e:3c:51:f0:6c:6e:f3:
8e:c1:cb:eb:9c:21:dd:0d:c2:da:d4:9f:26:4b:cb:
dd:b7:21:9a:9f:67:82:16:67:28:98:19:c2:fc:04:
82:ae:ce:b3:69:d9:7e:52:6d:ce:db:ab:64:d1:76:
79:cd:9d:b4:14:6e:77:8a:7c:a1:46:e6:15:f8:1a:
dd:16:9b:ec:e7:f7:db:43:9e:a0:f5:16:8e:38:5d:
b6:ec:0c:b3:b9:2b:32:2d:75:ea:f5:57:f5:e4:d2:
0d:2b:e7:63:ec:06:fa:21:d9:23:43:27:d3:54:03:
a2:44:13:7a:7d:24:86:e7:3a:4d:b4:13:f9:f9:89:
4a:69:ea:e0:7f:9b:e8:db:40:75:82:58:54:37:2d:
5f:5c:4c:7e:f6:46:b2:a7:e4:38:22:d7:5b:a5:25:
8c:fa:68:3d:5d:ed:f9:75:d7:59:c3:75:03:11:a9:
f4:5a:bd:13:9d:67:a5:f3:6a:69:8d:b2:96:d6:4e:
11:3b:c1:3d:39:67:18:66:ff:0a:aa:ce:ea:b2:a0:
50:c2:61:05:38:ee:ed:44:59:12:91:f7:7d:17:84:
dc:df:7c:eb:d8:f4:e0:8d:39:03:33:d1:45:48:5d:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F3:69:3A:B2:0C:CF:93:10:1D:34:87:12:D3:7F:B8:32:E9:E6:8F
X509v3 Authority Key Identifier:
keyid:BF:B8:53:6C:F7:0F:41:D0:0B:32:50:5B:27:8C:AF:CB:38:71:16:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/v7hTbPcPQdALMlBbJ4yvyzhxFso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v7hTbPcPQdALMlBbJ4yvyzhxFso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/JvNpOrIMz5MQHTSHEtN_uDLp5o8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:01:f6:1a:d7:33:17:c4:4d:6f:a9:5f:5e:7e:b1:e2:72:e9:
c6:6e:5d:4b:ef:39:8e:bf:73:0e:f3:0f:f7:77:3f:a9:33:3f:
77:49:05:3d:a2:e7:36:e1:ee:60:b5:37:8e:83:f2:01:1e:90:
f0:34:b6:43:78:df:c7:41:5f:96:25:73:fe:79:d9:7d:d6:ab:
d1:fa:9b:72:fc:aa:05:33:80:6b:39:80:19:e9:e8:08:2c:51:
e8:0f:e6:ba:9b:e1:b0:73:ec:84:bc:f0:c1:a0:d4:2a:cf:fb:
60:c2:70:0f:9e:dd:2d:21:6b:e9:d8:86:eb:ee:7f:f6:34:11:
cc:2d:ee:3f:2c:66:ac:5c:e0:7c:bf:42:6a:18:18:2d:ba:66:
c8:ad:d8:dc:37:7f:1b:95:f0:d2:e4:4a:75:62:51:db:42:77:
e8:c2:1d:f3:5a:e8:45:4f:86:f4:f5:38:92:6c:83:1d:9b:09:
72:3e:86:03:ec:ba:9d:ee:d9:2d:1d:2b:44:b4:9d:b9:40:0e:
2f:26:96:05:ca:a8:0b:fc:ab:c2:bf:a4:42:1c:a9:6a:d3:56:
e4:4e:33:2e:5c:3b:16:86:5a:24:1c:f0:07:c2:54:26:25:87:
4a:ac:5a:c2:08:bd:2e:96:ea:ff:a0:d9:1b:14:e0:7e:70:6e:
c2:52:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org