Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/Q0mGCPgvb-n17WOJBdc-fksRWSw.roa
File: Q0mGCPgvb-n17WOJBdc-fksRWSw.roa (raw, json)
Hash identifier: zBrtT1R7F1IfNXV135M4lQRiUSvsg1zTyzCrSLBsO4g=
Subject key identifier: 43:49:86:08:F8:2F:6F:E9:F5:ED:63:89:05:D7:3E:7E:4B:11:59:2C
Certificate issuer: /CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Certificate serial: 0754
Authority key identifier: 98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/Q0mGCPgvb-n17WOJBdc-fksRWSw.roa
Signing time: Thu 20 Jan 2022 06:15:00 +0000
ROA not before: Thu 20 Jan 2022 06:15:00 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 34549
IP address blocks: 103.83.180.0/22 maxlen: 24
103.235.128.0/22 maxlen: 24
114.66.128.0/20 maxlen: 24
114.66.160.0/20 maxlen: 24
114.66.176.0/22 maxlen: 24
114.66.180.0/22 maxlen: 24
114.66.184.0/22 maxlen: 24
114.66.188.0/22 maxlen: 24
114.66.220.0/22 maxlen: 24
114.66.224.0/22 maxlen: 24
114.66.228.0/22 maxlen: 24
114.66.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981B38009AA03BEB91271B999DD751BEC8520FE3
Validity
Not Before: Jan 20 06:15:00 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=43498608F82F6FE9F5ED638905D73E7E4B11592C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:a0:15:fe:07:cd:8c:73:23:47:1c:15:bf:
09:e8:78:37:84:d9:4d:a1:49:cb:e9:70:7a:eb:dd:
07:4c:5a:40:a8:27:f0:02:68:3b:79:77:cf:8a:e1:
73:9d:7b:0b:a9:1f:f4:23:33:84:f5:ff:e8:d4:77:
cb:f0:51:dd:3d:a8:dc:33:cb:62:24:df:70:c7:b8:
cd:9d:7e:93:f8:db:05:03:fa:91:0b:92:16:ba:a6:
8c:cf:cf:81:20:db:1b:5f:f3:fb:3c:58:d4:a2:18:
e3:17:67:cd:16:2f:be:0c:99:87:be:ef:34:f1:b1:
7a:ef:38:23:df:c3:d0:63:c2:7b:fa:b7:fc:b8:68:
6c:da:b3:f1:d6:b3:dc:99:f6:62:c0:92:a9:ce:49:
d9:24:b9:5d:8d:f9:e6:52:8e:97:b6:4c:8d:08:87:
b2:1e:da:91:a3:80:d9:b7:7a:af:4e:be:57:4a:99:
2d:ef:6f:9d:ea:a4:6a:ac:cf:76:a3:f8:2b:95:7a:
c0:2f:8e:3a:b0:2e:31:76:9d:98:3e:7d:62:20:43:
db:7a:43:dd:91:51:fa:90:96:8e:3e:ef:dc:cb:76:
6e:06:9e:ea:5d:a5:46:20:50:cb:77:d7:7d:b7:59:
1b:47:bf:50:df:c2:31:a9:00:c5:e0:08:4e:77:16:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:49:86:08:F8:2F:6F:E9:F5:ED:63:89:05:D7:3E:7E:4B:11:59:2C
X509v3 Authority Key Identifier:
keyid:98:1B:38:00:9A:A0:3B:EB:91:27:1B:99:9D:D7:51:BE:C8:52:0F:E3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/mBs4AJqgO-uRJxuZnddRvshSD-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mBs4AJqgO-uRJxuZnddRvshSD-M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/Q0mGCPgvb-n17WOJBdc-fksRWSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.180.0/22
103.235.128.0/22
114.66.128.0/20
114.66.160.0/19
114.66.220.0-114.66.235.255
Signature Algorithm: sha256WithRSAEncryption
3b:ae:6a:85:75:61:58:65:2d:a0:7f:28:3e:16:11:3f:78:00:
47:a5:52:cb:93:e3:96:49:e1:d8:57:0c:0f:fc:c7:42:76:21:
9c:59:fc:b5:31:b5:3e:bd:eb:fc:66:6a:68:b0:a8:57:21:96:
35:04:ec:08:59:54:9f:20:f2:12:39:ad:2d:2c:54:f0:ab:1c:
14:cb:70:6b:86:b5:df:a8:92:ad:e0:eb:89:2e:49:5b:a0:3c:
b6:b8:a0:a0:a7:8f:5d:b4:f5:cc:49:28:b7:b0:04:bd:fd:8d:
a0:96:12:f6:07:5f:00:92:b9:a5:f7:08:00:b2:75:14:07:01:
f9:cc:a2:87:63:01:84:c5:96:68:5c:4f:4b:4b:72:6f:22:24:
b5:b6:e6:bb:6f:46:47:7d:50:32:15:ae:6f:c3:bd:99:a3:e7:
3a:ba:7f:56:d0:80:44:fd:80:80:6e:14:c3:e1:d4:7b:43:2f:
fb:91:2a:65:c4:a2:86:95:b7:d1:5c:76:c1:9b:d9:aa:dd:58:
20:de:1a:68:10:11:ad:a9:82:de:de:3a:ec:37:9f:f5:d6:5b:
1f:af:29:66:1d:28:32:38:e6:14:75:23:c9:87:1d:03:60:2c:
63:87:17:b4:9a:ef:95:b6:be:31:d9:01:82:e9:13:4d:50:c5:
1d:42:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org