Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/XmSIyamJUW5ymvDUUr8uCT3R2-Y.roa
File: XmSIyamJUW5ymvDUUr8uCT3R2-Y.roa (raw, json)
Hash identifier: r3uxkHcuqM8BiNtEdKFLH6z7uUrf+/mPYt2FUls1H28=
Subject key identifier: 5E:64:88:C9:A9:89:51:6E:72:9A:F0:D4:52:BF:2E:09:3D:D1:DB:E6
Certificate issuer: /CN=BFB8536CF70F41D00B32505B278CAFCB387116CA
Certificate serial: 03
Authority key identifier: BF:B8:53:6C:F7:0F:41:D0:0B:32:50:5B:27:8C:AF:CB:38:71:16:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v7hTbPcPQdALMlBbJ4yvyzhxFso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/XmSIyamJUW5ymvDUUr8uCT3R2-Y.roa
Signing time: Thu 27 May 2021 05:02:37 +0000
ROA not before: Thu 27 May 2021 05:02:37 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 131482
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFB8536CF70F41D00B32505B278CAFCB387116CA
Validity
Not Before: May 27 05:02:37 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=5E6488C9A989516E729AF0D452BF2E093DD1DBE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:99:70:c2:92:b6:aa:5f:e9:06:b9:e8:ba:
7d:00:22:9a:8b:81:b7:ce:6b:a3:89:7e:20:fc:b1:
46:ca:bc:25:91:f1:2f:22:22:39:ed:25:7c:b2:b1:
a4:8f:6d:99:01:c1:b4:e4:b1:4d:b7:46:86:0f:6d:
65:2a:99:7d:f1:91:e0:d6:9b:e8:db:86:ae:c4:94:
b1:b0:d1:56:4c:53:9b:5e:1c:7f:9b:3d:f0:c7:fd:
53:7f:9e:27:cb:71:e5:82:db:ef:3f:9a:da:d6:b9:
12:88:15:06:44:39:f6:2b:43:0d:c3:54:d6:75:20:
73:cf:2c:a3:4d:cd:07:40:14:c2:d0:a0:56:4a:d3:
8d:0f:d9:a6:63:e0:b8:5b:6d:f1:e2:50:d9:2c:3d:
e1:18:45:77:ec:1e:c9:42:8c:0b:ac:14:54:0e:45:
68:e1:a5:99:f3:53:8d:b4:d5:ae:18:06:ee:44:70:
55:99:1f:f4:b3:d6:d9:39:80:9f:a3:46:c1:bc:67:
16:82:d9:bf:4a:5b:c4:33:88:3c:32:40:5f:39:2c:
70:68:23:a7:90:92:dc:29:68:c6:11:59:ec:00:7c:
f4:d9:d0:b9:d2:51:c1:f1:37:7d:7e:e0:61:ba:08:
43:86:cf:e8:62:a8:8b:50:09:75:05:a1:a6:38:ac:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:64:88:C9:A9:89:51:6E:72:9A:F0:D4:52:BF:2E:09:3D:D1:DB:E6
X509v3 Authority Key Identifier:
keyid:BF:B8:53:6C:F7:0F:41:D0:0B:32:50:5B:27:8C:AF:CB:38:71:16:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/v7hTbPcPQdALMlBbJ4yvyzhxFso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v7hTbPcPQdALMlBbJ4yvyzhxFso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/XmSIyamJUW5ymvDUUr8uCT3R2-Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
32:d5:fa:f8:df:d1:be:ed:52:e5:25:9b:02:69:67:d6:b7:71:
41:bb:9f:d1:bd:99:27:47:ef:2f:ab:16:58:d6:88:c7:17:95:
65:b0:d8:ee:cf:67:71:5a:ef:31:55:83:d4:e3:2d:af:ff:51:
90:e5:7c:9c:19:cb:f8:a5:c4:1e:5f:5b:df:96:05:9b:46:1b:
60:8c:87:b0:44:41:54:55:0b:a1:f0:fd:4a:fd:e9:98:c2:aa:
63:75:00:d3:90:f8:9f:d4:46:0e:ab:e6:c7:ca:d7:b3:f7:a3:
bb:4e:c9:72:f1:8f:a9:cd:87:8a:eb:72:72:4e:63:12:2f:45:
0d:ad:ce:78:f0:22:09:1c:1a:cd:e3:7f:86:d0:e8:64:01:32:
3d:65:c9:b4:c4:bb:bd:c3:80:7f:b9:cd:93:71:ed:e5:5b:7d:
84:ee:e0:19:1c:9a:52:d9:e9:01:43:3b:9b:64:ef:5f:d2:1f:
a2:51:ec:fb:e8:5d:ee:b6:e1:be:62:5b:e9:e0:4d:18:e6:c6:
51:05:74:ea:50:99:17:27:f9:1d:6e:c7:27:38:37:ab:16:55:
bf:f0:f1:f4:e9:8d:a9:d4:8d:16:a9:75:a2:98:ba:ee:32:6c:
83:9e:55:c0:f9:92:a7:a4:5a:22:9c:4e:f6:4d:8b:cf:c4:aa:
e7:71:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org