Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/YZC1J7snyYRNzqn87AytIyCXIQc.roa
File: YZC1J7snyYRNzqn87AytIyCXIQc.roa (raw, json)
Hash identifier: FBc+lxXaI0zrNx3PfCwugpwIzLxUxjkCDKOvcFxO75k=
Subject key identifier: 61:90:B5:27:BB:27:C9:84:4D:CE:A9:FC:EC:0C:AD:23:20:97:21:07
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 0949
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/YZC1J7snyYRNzqn87AytIyCXIQc.roa
Signing time: Tue 07 Jun 2022 02:11:22 +0000
ROA not before: Tue 07 Jun 2022 02:11:22 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 398704
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377 (0x949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: Jun 7 02:11:22 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=6190B527BB27C9844DCEA9FCEC0CAD2320972107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:29:24:6f:82:6b:c4:4f:a7:c7:97:60:66:
60:90:05:6a:90:9c:ad:a0:94:5b:00:04:0a:b7:f4:
32:16:d0:c6:4a:b7:3f:72:a1:50:30:29:39:f1:49:
cc:b3:2a:d0:9f:66:1a:37:43:eb:66:fa:5f:66:56:
87:3a:4c:27:df:4f:4c:90:2f:92:ca:28:7b:94:fd:
b8:a8:0a:9d:70:98:58:7e:bc:74:ae:35:19:14:9c:
ff:e6:b2:b5:3c:78:21:bb:c2:c0:59:3f:84:54:ea:
e4:f4:29:7d:fd:f4:9d:3b:3c:c8:a2:9c:11:e3:68:
48:5c:dd:ef:65:16:2b:84:66:f7:bd:5a:16:93:92:
43:43:55:d0:94:80:ba:16:56:03:cc:52:58:95:f7:
31:e1:4b:d9:39:89:f6:dc:0e:26:ef:26:3a:95:64:
af:43:71:dc:24:37:7e:9e:f4:d0:c8:22:00:67:11:
63:0d:6a:73:42:05:0e:ec:74:95:62:e7:51:62:54:
8f:96:c2:8a:7d:07:af:70:f0:57:4d:22:ca:25:62:
82:81:f1:03:b9:a3:4c:5e:f2:c3:5c:cb:7b:f7:fa:
34:d1:a8:91:92:b0:85:07:33:e4:5f:b8:77:86:6f:
88:c4:1d:4c:76:c1:02:c2:e4:97:20:0e:1a:20:41:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:90:B5:27:BB:27:C9:84:4D:CE:A9:FC:EC:0C:AD:23:20:97:21:07
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/YZC1J7snyYRNzqn87AytIyCXIQc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:74:fd:46:3b:5c:80:da:8c:99:76:6e:3b:c2:45:c4:8c:9e:
52:79:a9:3e:30:d3:a5:0b:ab:20:35:3d:33:27:b7:d4:ba:fb:
a8:b6:f3:d2:60:f5:89:69:cd:75:cf:02:11:a3:95:a6:2c:8e:
bb:e6:50:10:06:b3:aa:f8:03:aa:0f:03:75:f9:f2:28:15:09:
5c:07:ea:f8:29:c0:7e:1c:97:46:b8:3e:e3:33:b3:be:ba:5e:
97:0f:ec:22:b8:02:59:ee:c3:20:eb:7a:95:ef:aa:96:d0:d1:
c5:a8:07:8e:2c:c4:82:6b:40:99:92:3b:b7:c8:b1:31:57:ae:
ee:3b:ed:21:02:65:36:c7:56:62:af:b7:36:87:3a:1b:25:48:
aa:ce:50:bd:f2:03:9f:20:0f:8d:fd:ca:79:83:8b:d1:30:07:
85:b7:af:f0:aa:f8:4a:e9:ba:1d:47:0a:92:6a:44:b2:1b:c7:
65:1a:05:4a:1e:ca:dd:b5:90:b0:97:23:99:a9:88:fa:35:21:
8c:ea:7d:3e:28:6e:e5:cc:9a:91:7c:ed:b5:ac:8f:87:05:c3:
6a:4c:6b:50:49:e9:01:28:5c:80:0d:ec:d0:84:56:48:80:a8:
26:69:d8:22:f3:6a:be:df:f2:9e:dc:1a:3d:ad:7a:21:2a:cc:
1b:2d:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:10 2023 by rpki-client on console-ams.rpki-client.org