Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/UjSUPB2w_WjezvpJDvzUuf6NM1M.roa
File: UjSUPB2w_WjezvpJDvzUuf6NM1M.roa (raw, json)
Hash identifier: 57hpbRsZFqpUNxh4hEciwULQlJssZzoFkFnB4xQpNB8=
Subject key identifier: 52:34:94:3C:1D:B0:FD:68:DE:CE:FA:49:0E:FC:D4:B9:FE:8D:33:53
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0708
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/UjSUPB2w_WjezvpJDvzUuf6NM1M.roa
Signing time: Tue 23 May 2023 02:40:49 +0000
ROA not before: Tue 23 May 2023 02:40:49 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 58466
IP address blocks: 103.41.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: May 23 02:40:49 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=5234943C1DB0FD68DECEFA490EFCD4B9FE8D3353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:00:db:31:ea:37:30:35:b8:ad:97:50:f0:
ff:8f:b7:c0:cf:bc:07:a0:49:a1:74:f3:92:1a:d9:
40:cc:26:18:38:ce:9d:62:17:7d:61:a3:47:a9:20:
f8:77:ae:b9:ce:15:61:d9:24:b0:db:ae:fe:52:82:
5d:8b:be:40:af:3b:1f:64:c5:35:83:a9:8b:43:59:
8c:22:70:0a:46:fc:94:c4:80:69:c5:70:2a:d9:75:
b2:65:ca:24:10:9c:49:1c:56:bf:00:74:9a:a6:79:
dd:db:b0:f9:cc:5d:79:dd:57:a4:d2:31:61:1a:74:
77:f9:d4:78:d3:b5:95:e3:83:51:2e:59:27:38:32:
2a:2d:4d:bf:53:1e:17:b4:8c:78:dd:2b:bd:82:e2:
44:47:0d:03:6e:72:fc:d7:ae:7f:5c:9d:9e:1a:20:
13:80:6c:a0:d3:4a:7c:35:bd:af:dc:67:21:c3:fa:
f6:39:99:e5:ad:16:e4:0e:15:c4:7c:7f:f7:53:47:
47:f3:3a:f7:1f:83:9b:59:9c:b5:6d:a9:bd:e1:2a:
ee:d2:71:45:58:c6:06:7c:06:5b:56:0e:db:7e:ca:
46:a0:c3:2b:44:3f:6c:c0:4a:d1:e6:d9:0c:fe:95:
c5:44:05:08:8a:61:20:2f:69:4d:6e:b6:93:78:3f:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:94:3C:1D:B0:FD:68:DE:CE:FA:49:0E:FC:D4:B9:FE:8D:33:53
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/UjSUPB2w_WjezvpJDvzUuf6NM1M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.232.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:92:2e:c7:3b:0e:96:a6:14:07:a4:cc:40:6a:59:a8:d8:22:
d0:51:28:7b:40:43:c1:a8:ff:32:c8:bf:82:04:62:dd:fe:b7:
58:c6:1a:86:7e:37:01:a7:c4:83:7c:55:27:8c:83:73:f6:1f:
a5:45:18:51:11:05:52:c0:8d:dc:0b:63:2b:30:ee:ec:04:b2:
77:f2:f2:1c:c8:60:af:6b:66:1e:85:1a:7b:d6:cb:1f:26:34:
38:9d:a1:e5:be:36:d5:12:e0:c4:b1:b0:44:c4:e3:14:e1:2d:
d1:99:f8:76:9c:b7:19:e8:fe:00:22:f8:ae:0d:c2:b5:2c:c8:
cd:d2:c1:bd:7b:7c:e1:64:eb:f5:f6:be:78:69:cd:46:75:c3:
cf:90:72:25:08:c5:2d:e5:1d:4a:89:6a:7d:9f:23:0a:42:8b:
25:b1:0a:8f:f6:a3:98:f7:3c:ae:bb:73:e4:ef:3b:34:47:f6:
9b:53:82:eb:35:ae:27:8c:8f:9b:5e:c7:4a:f9:db:4b:ed:26:
ae:9e:1c:f3:93:b5:b6:c0:f1:21:6d:f9:29:dd:73:79:0e:6a:
45:45:2d:82:fa:3a:de:e0:a8:7e:2c:34:3d:d7:9f:35:17:85:
50:7e:6c:07:35:cc:83:80:c3:f0:35:f4:d8:97:3b:ed:93:ec:
f5:05:cd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org