Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/xWaNtOeJeH4oa5WrMfn_winAc60.roa
File: xWaNtOeJeH4oa5WrMfn_winAc60.roa (raw, json)
Hash identifier: TI8r43q9URZB+jxKHCI532i7PE8kw0Wd2tMMiRfpjVU=
Subject key identifier: C5:66:8D:B4:E7:89:78:7E:28:6B:95:AB:31:F9:FF:C2:29:C0:73:AD
Certificate issuer: /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial: 100C
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/xWaNtOeJeH4oa5WrMfn_winAc60.roa
Signing time: Fri 19 May 2023 05:53:57 +0000
ROA not before: Fri 19 May 2023 05:53:57 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 131482
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4108 (0x100c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Validity
Not Before: May 19 05:53:57 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=C5668DB4E789787E286B95AB31F9FFC229C073AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:cd:ee:06:10:fa:b9:8d:13:0d:af:25:7c:
8e:54:e7:05:90:4f:a4:f2:58:db:8b:2f:c1:78:d6:
9c:2a:01:f4:9c:11:4a:5e:6f:07:6a:5e:bc:ff:af:
f2:fc:66:a7:43:e8:84:e2:55:c1:65:96:8a:a4:61:
7e:3d:35:87:26:75:27:49:3c:d4:d7:cc:fb:4c:14:
51:ff:5a:67:42:f6:01:e2:85:49:fe:77:b5:6e:12:
e7:f3:e4:42:bd:db:d3:25:15:d7:0e:ba:73:7d:43:
1b:cb:b4:51:5c:5f:47:52:b5:ea:28:2b:3c:34:10:
4e:36:70:21:80:ce:8b:f4:dd:ed:9f:34:24:94:cc:
31:44:0f:51:e2:b7:84:40:57:96:f8:e4:6d:c1:f6:
ed:43:2b:3b:79:28:8f:b2:da:b7:a4:d0:87:ef:96:
d9:79:9b:9f:8d:7e:b5:7a:d1:34:df:27:0f:76:18:
15:1a:f0:e1:f5:d1:0f:c2:db:cd:09:7b:de:f6:d2:
2a:98:39:0d:31:9a:ac:48:1e:ad:56:8f:ec:3b:2d:
23:d1:0c:58:f3:04:7a:2a:02:5e:8b:0c:ef:6c:b7:
3e:d3:fb:71:b9:c9:f8:32:90:89:81:f2:10:24:fb:
94:5b:16:3d:1c:f9:9e:a4:26:a4:15:9f:56:b2:89:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:8D:B4:E7:89:78:7E:28:6B:95:AB:31:F9:FF:C2:29:C0:73:AD
X509v3 Authority Key Identifier:
keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/xWaNtOeJeH4oa5WrMfn_winAc60.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:a2:ee:52:88:29:57:00:4e:84:b4:4d:3a:d9:26:3f:0a:95:
c2:4d:51:29:50:30:8e:7c:0d:fb:71:e7:74:5c:a6:d4:90:97:
62:55:35:b8:58:18:94:0b:09:e4:22:d5:aa:0f:46:3d:5e:32:
c7:28:c4:d4:9e:2c:e6:b4:c6:68:d1:48:ff:53:01:17:19:b3:
3a:4a:cb:cb:d7:02:37:40:c9:ef:c5:0c:86:50:ee:2d:5f:aa:
41:ba:67:4a:ca:0d:f8:e8:aa:96:fc:56:e0:db:73:95:72:1d:
d1:16:c9:99:b7:1c:ee:e6:0c:58:00:0a:1a:80:7d:7c:e0:2c:
e2:db:f0:4b:c6:93:72:37:fe:40:c7:a5:7f:45:81:7d:ce:13:
2f:49:8c:9b:fe:21:24:39:84:4f:5d:51:d9:ce:48:6e:28:1a:
64:5d:41:35:41:95:e7:22:e8:10:8e:6c:49:7c:11:c7:e3:e6:
4a:e5:6b:7e:74:5e:00:04:45:5c:fc:c7:38:1b:18:a1:71:4b:
22:58:c7:39:a3:a6:66:52:6b:5b:08:cd:2a:d6:57:02:8c:c0:
97:62:87:7e:9c:27:ce:86:43:d6:8f:91:f9:d3:cd:14:79:73:
22:7d:a0:48:ab:7b:1c:a7:6d:e8:04:35:61:fd:aa:c4:c7:62:
76:98:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org