Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/813lLAE_MLGi-pHfq6j51H6Lr_I.roa
File: 813lLAE_MLGi-pHfq6j51H6Lr_I.roa (raw, json)
Hash identifier: kAxoi+VxCP/LTWUBB7Gq6zKzLEnN3Be1hSMSlM2Mczk=
Subject key identifier: F3:5D:E5:2C:01:3F:30:B1:A2:FA:91:DF:AB:A8:F9:D4:7E:8B:AF:F2
Certificate issuer: /CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Certificate serial: 08FD
Authority key identifier: 98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/813lLAE_MLGi-pHfq6j51H6Lr_I.roa
Signing time: Sat 09 Apr 2022 10:37:50 +0000
ROA not before: Sat 09 Apr 2022 10:37:50 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 34549
IP address blocks: 103.83.180.0/22 maxlen: 24
103.235.128.0/22 maxlen: 24
114.66.128.0/20 maxlen: 24
114.66.144.0/22 maxlen: 24
114.66.152.0/22 maxlen: 24
114.66.156.0/22 maxlen: 24
114.66.160.0/20 maxlen: 24
114.66.176.0/22 maxlen: 24
114.66.180.0/22 maxlen: 24
114.66.184.0/22 maxlen: 24
114.66.188.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301 (0x8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Validity
Not Before: Apr 9 10:37:50 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=F35DE52C013F30B1A2FA91DFABA8F9D47E8BAFF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:e4:67:7e:9f:4e:eb:72:88:2f:a1:12:af:
f9:5a:f1:7f:82:20:19:ee:c4:6a:cc:94:b5:45:07:
5c:4b:df:8e:c2:f1:3c:29:38:4e:39:a4:54:e6:25:
be:ae:ef:31:5b:02:75:ac:63:4e:d8:b9:0b:6a:48:
a1:26:9c:1e:ea:5e:8b:e4:2d:63:8c:60:46:75:76:
6f:4d:7a:20:b2:5d:93:cd:29:5f:90:35:13:27:9a:
04:3d:64:d0:cf:7e:c9:9a:81:16:53:64:fd:e0:8e:
2f:ad:44:d8:42:c3:63:d0:b6:86:24:25:70:ee:0f:
a9:18:20:68:ca:bc:f3:4d:e2:bb:e2:01:fc:c4:74:
19:a7:55:56:b7:66:36:fb:43:24:c5:88:be:81:61:
69:43:19:b8:2a:60:4d:34:f3:af:95:0d:0b:10:0e:
dc:1a:d8:d3:7b:ab:ae:7e:49:85:c3:3b:7f:d1:e5:
46:ca:6c:72:3a:a0:4f:9a:97:e7:c7:6f:dc:c7:17:
aa:57:f3:71:d8:2e:e4:72:a0:a2:26:a7:2d:de:32:
7c:7a:f8:2d:1f:1e:31:8c:a6:04:08:ba:e7:e9:00:
b7:12:d6:3d:f2:1d:f8:63:d5:f9:bf:51:d7:6e:80:
1c:f8:ef:8d:91:c3:e5:86:3a:b6:a1:84:f5:3a:22:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5D:E5:2C:01:3F:30:B1:A2:FA:91:DF:AB:A8:F9:D4:7E:8B:AF:F2
X509v3 Authority Key Identifier:
keyid:98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/813lLAE_MLGi-pHfq6j51H6Lr_I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.180.0/22
103.235.128.0/22
114.66.128.0-114.66.147.255
114.66.152.0-114.66.191.255
114.66.224.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:66:d7:b8:8d:73:4a:15:cc:e6:85:21:46:0c:b7:c0:05:49:
02:4b:49:c1:22:6f:5b:08:82:c7:29:58:7a:82:aa:2d:d2:ae:
4a:82:5b:6b:51:de:97:cf:e6:82:cc:78:2c:91:25:3a:1a:dd:
e2:b2:bb:7a:1a:e8:12:a7:ba:00:74:f6:73:e4:9a:93:4d:16:
dc:94:2a:84:61:e1:65:3f:aa:54:39:ac:f0:7c:b9:a2:fd:41:
a6:4f:ba:76:aa:1a:c4:e0:a5:d4:ce:12:e7:2f:5a:b3:db:4d:
25:85:48:fa:e8:22:a4:3d:8a:19:27:6b:fd:99:75:4b:c1:f3:
4d:92:a7:58:a8:10:21:d3:ed:f2:a5:63:fd:3d:d2:6a:37:60:
71:27:4b:bf:15:f6:d9:d9:ab:2e:4c:82:67:68:f8:5c:92:aa:
29:a2:59:2a:53:b0:e2:08:a4:58:fd:42:fa:af:d4:54:6e:6e:
52:62:07:6e:e2:f9:e2:0d:3a:9b:0f:13:98:41:0e:4d:b5:3d:
ef:51:a6:f7:4a:9d:cc:40:77:44:22:73:ca:81:16:b4:0c:79:
2a:f3:29:e1:36:a6:d5:d9:85:d5:4a:52:b8:28:85:ea:3a:4d:
9d:87:5f:a4:84:b1:ed:2c:4e:90:f0:b0:b8:27:b4:80:e0:d4:
23:60:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org