Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/CBpUPhvwzUKl1OdYWYeZieeY64c.roa
File: CBpUPhvwzUKl1OdYWYeZieeY64c.roa (raw, json)
Hash identifier: 33Apxo6J1nOFSoN7G4eeEWg3vfg04soI8j5fXfZhT+o=
Subject key identifier: 08:1A:54:3E:1B:F0:CD:42:A5:D4:E7:58:59:87:99:89:E7:98:EB:87
Certificate issuer: /CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Certificate serial: 07E7
Authority key identifier: 98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/CBpUPhvwzUKl1OdYWYeZieeY64c.roa
Signing time: Thu 17 Feb 2022 02:45:55 +0000
ROA not before: Thu 17 Feb 2022 02:45:55 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 34549
IP address blocks: 103.83.180.0/22 maxlen: 24
103.235.128.0/22 maxlen: 24
114.66.128.0/20 maxlen: 24
114.66.160.0/20 maxlen: 24
114.66.176.0/22 maxlen: 24
114.66.180.0/22 maxlen: 24
114.66.184.0/22 maxlen: 24
114.66.188.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Validity
Not Before: Feb 17 02:45:55 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=081A543E1BF0CD42A5D4E75859879989E798EB87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:5e:78:f0:2e:12:01:eb:c7:3a:6c:e3:f0:
b8:14:e1:b4:7f:22:e3:08:8a:5b:6e:a1:33:b3:93:
c0:35:68:53:61:d2:3d:63:32:6a:38:2d:74:50:e8:
09:ec:11:71:a1:33:58:b4:90:59:00:c0:07:58:19:
18:b3:98:b0:43:5d:1e:cb:58:62:e9:bd:e1:16:c9:
1d:ba:c8:57:52:8e:7f:84:c8:b8:85:58:9c:13:99:
68:d2:5a:89:53:f4:12:3c:ce:ab:2e:f8:3a:a4:0a:
d1:c5:b3:0e:c4:bc:5a:e6:1e:61:17:2b:ab:2e:0c:
c2:a9:ab:b5:6d:4c:15:3b:6f:fd:e9:bc:ae:20:42:
2f:00:7e:b4:2b:a9:a1:68:ce:a6:0e:19:b0:ec:1a:
30:71:c5:0c:9b:9c:dc:8d:25:0a:a1:08:40:72:5f:
c5:a3:ad:26:03:ae:a9:cd:ca:3f:26:fd:8b:02:1a:
04:19:1f:0c:3a:6c:48:b6:80:8b:82:30:19:eb:fe:
59:9a:09:52:f7:b3:a6:50:a6:a4:fb:ff:f0:50:81:
82:0a:05:b4:fa:1e:86:2a:ed:ba:55:18:a3:99:1c:
b1:29:91:92:70:0e:ee:14:16:79:9f:a5:90:0c:3b:
d1:36:b1:0e:75:3e:72:97:ed:2b:d8:c5:81:ab:da:
eb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1A:54:3E:1B:F0:CD:42:A5:D4:E7:58:59:87:99:89:E7:98:EB:87
X509v3 Authority Key Identifier:
keyid:98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/CBpUPhvwzUKl1OdYWYeZieeY64c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.180.0/22
103.235.128.0/22
114.66.128.0/20
114.66.160.0/19
114.66.224.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:12:49:bf:21:5c:6a:2f:2d:64:1d:00:92:42:6f:73:4a:0a:
47:ab:8f:5e:f3:a7:06:d0:77:bf:96:41:b2:2a:89:a2:50:08:
be:e4:ec:a4:f7:dc:13:88:d6:17:8c:bd:58:9a:86:7d:2a:bf:
69:dc:42:b5:76:62:4c:1c:f2:c2:8d:39:78:15:6f:f1:00:ba:
8c:55:4d:08:75:45:b3:e6:3c:42:73:0e:42:ed:18:27:dd:b1:
21:3c:6f:f4:8a:4d:86:50:04:46:da:2e:36:83:9a:db:cb:4a:
fd:24:d1:ac:ef:ab:89:e8:58:6e:85:ea:17:c9:79:dc:74:40:
c2:7e:de:3f:f8:72:a3:ab:1f:9b:fb:4e:9f:e8:e3:a9:81:30:
11:f5:69:66:de:d5:90:4e:10:a4:8d:a2:b7:2a:15:8b:63:f3:
6d:4c:70:ad:ee:7e:56:e1:a4:4c:64:1f:6a:96:80:03:6e:78:
b1:1d:58:52:1c:63:92:3b:2e:cb:13:31:63:b8:3b:6c:2c:1b:
e7:1f:4b:91:fc:de:ec:4d:df:fd:39:7a:a9:ac:af:9e:95:aa:
d7:6e:6a:f1:76:62:50:94:7e:a5:07:82:a4:6d:a7:62:71:17:
d1:1a:39:bc:40:d3:42:db:46:27:b8:79:2e:92:37:77:48:85:
94:02:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org