Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/bDYvhNGFMLXmDt3OgApsWFgcXEE.roa
File: bDYvhNGFMLXmDt3OgApsWFgcXEE.roa (raw, json)
Hash identifier: sTulPYOPhapYe7QUHCtWxDc+aj7xqooIWz+r0iUzicE=
Subject key identifier: 6C:36:2F:84:D1:85:30:B5:E6:0E:DD:CE:80:0A:6C:58:58:1C:5C:41
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 100E
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/bDYvhNGFMLXmDt3OgApsWFgcXEE.roa
Signing time: Fri 19 May 2023 05:53:58 +0000
ROA not before: Fri 19 May 2023 05:53:58 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 131530
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4110 (0x100e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: May 19 05:53:58 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=6C362F84D18530B5E60EDDCE800A6C58581C5C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:9d:18:78:b9:25:a6:ad:c0:6d:be:71:60:
7b:22:91:0b:fd:49:32:b1:0b:72:9a:66:1f:ce:4f:
f4:d5:b2:71:cc:bd:2e:bf:1f:6c:8b:8b:17:81:dc:
35:c5:52:18:28:e0:06:4b:ec:b3:6e:97:88:41:9c:
f6:e7:f3:a5:73:b3:e0:ad:81:d1:7f:e9:ba:29:f9:
46:98:69:d5:a4:55:9e:48:bb:d1:84:af:97:f0:ff:
b0:09:50:f5:45:55:d6:39:8c:ef:46:c8:71:d6:44:
b1:87:02:d8:c9:3e:31:99:73:1f:ea:35:97:84:a7:
bc:98:3a:5b:4b:c2:8a:c7:a1:c2:38:e0:a9:84:17:
58:2e:a4:96:1d:7d:51:6f:ef:ec:7e:a3:ba:0b:7d:
3f:be:b1:4c:d2:0a:2c:c3:1b:df:59:6e:0b:c0:fb:
da:e1:40:78:c5:d5:ba:95:29:d5:85:da:a6:fe:cc:
47:d0:14:7c:c7:21:21:2d:06:8e:98:62:8a:29:99:
fd:11:e1:55:0b:ed:a4:43:cf:26:c3:28:ad:c3:e7:
7d:a7:6e:0a:7c:33:a7:40:e2:77:43:ca:28:84:a6:
ad:d8:fb:59:c5:f9:d9:97:04:f0:e7:4d:58:f4:a8:
15:0f:8b:6d:7d:e5:fd:94:32:f9:ab:7f:6e:ea:02:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:2F:84:D1:85:30:B5:E6:0E:DD:CE:80:0A:6C:58:58:1C:5C:41
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/bDYvhNGFMLXmDt3OgApsWFgcXEE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
21:87:c8:10:92:63:0d:04:d2:ff:3e:c8:07:70:a9:c0:35:fc:
97:78:d8:fe:f7:17:9f:94:ff:cc:1f:2a:6c:3d:3d:08:1a:7a:
1d:72:14:21:80:66:d9:72:e7:91:2c:bb:d7:f4:a7:26:da:fa:
d3:4c:35:a5:02:e7:37:0f:35:62:1b:5f:c7:06:7b:97:53:8e:
20:40:f9:6e:cc:76:48:11:d5:c0:31:5e:1a:6b:6c:de:c8:17:
91:a2:c9:24:b4:02:0b:eb:c7:f6:ee:ce:d9:4b:b3:55:60:c6:
cc:1b:e2:0e:90:1a:9e:c8:24:41:b2:3d:ef:9f:86:4d:e7:42:
74:4d:ef:09:19:49:87:54:e5:05:7f:2d:be:9a:9b:b2:9b:e7:
2b:66:6d:9c:54:86:2a:d9:c9:c7:38:a1:56:e5:79:71:38:bd:
68:83:26:36:98:d6:1e:17:e2:3d:78:6f:02:82:69:5e:7d:2e:
f2:5d:60:04:58:1e:eb:c0:a7:a5:85:59:7b:f5:5f:9e:4b:7f:
c7:03:2b:27:d2:2b:b6:e1:8f:d4:df:b7:28:df:a3:09:d4:43:
4d:9e:f3:d5:26:75:e6:9b:2e:d8:1c:1d:0f:bf:d3:bf:89:17:
a5:1c:87:08:26:9a:21:85:aa:51:64:d1:e6:52:6d:81:52:29:
2d:a9:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org