Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/247/PhZac8X3YuIB5YFCccBr9D1U0Qo.roa
File: PhZac8X3YuIB5YFCccBr9D1U0Qo.roa (raw, json)
Hash identifier: D/Xer9/ZPLCgngVIcdzXieJX0zZJo61A7HMoaTlFKBU=
Subject key identifier: 3E:16:5A:73:C5:F7:62:E2:01:E5:81:42:71:C0:6B:F4:3D:54:D1:0A
Certificate issuer: /CN=23320A4BAF0AF9313530EC99D3686433703E071F
Certificate serial: 133D
Authority key identifier: 23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/PhZac8X3YuIB5YFCccBr9D1U0Qo.roa
Signing time: Wed 24 May 2023 03:54:17 +0000
ROA not before: Wed 24 May 2023 03:54:17 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 54994
IP address blocks: 203.130.50.0/24 maxlen: 24
203.130.52.0/24 maxlen: 24
203.130.63.0/24 maxlen: 24
220.243.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4925 (0x133d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23320A4BAF0AF9313530EC99D3686433703E071F
Validity
Not Before: May 24 03:54:17 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=3E165A73C5F762E201E5814271C06BF43D54D10A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:b7:4a:8a:1b:25:a4:31:32:0d:80:4e:10:
b1:90:83:07:e6:21:c1:47:cd:52:22:63:ae:96:7b:
7f:97:13:b3:a5:38:81:24:b0:73:2a:81:a7:16:e3:
ec:2e:f9:6a:2c:f2:24:a3:12:99:2e:e1:fd:f6:bd:
1a:33:ac:0c:d5:eb:bc:01:a5:1c:33:a2:94:e5:ce:
f4:fa:a2:95:02:a9:01:20:3e:04:e1:81:94:9f:e5:
be:ee:57:ac:ab:ee:8a:9a:5a:af:a5:10:d1:d0:da:
d7:8b:b9:02:2a:73:40:b8:9f:cf:d8:45:91:f4:52:
f4:f5:2e:2a:cd:07:da:38:2c:37:ea:77:5f:9d:19:
c6:ce:74:d6:c8:9f:0f:da:16:73:0c:66:bc:95:12:
8f:23:7d:19:83:e1:e2:74:fa:7b:16:8e:08:27:5b:
cb:9a:5a:36:54:46:61:ab:60:a0:d8:da:de:eb:68:
6c:2b:d4:5e:8a:b4:23:9f:4e:b4:81:cd:13:b6:ec:
2f:89:ad:20:69:ad:1c:6a:55:77:0d:30:e0:30:16:
67:fd:d7:f5:74:7e:e6:03:6d:d3:6f:51:9d:ec:d2:
ed:53:39:82:66:bb:4b:23:76:29:d9:84:88:3c:a1:
96:73:32:99:1c:fe:10:dd:38:db:84:20:d3:a9:4d:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:16:5A:73:C5:F7:62:E2:01:E5:81:42:71:C0:6B:F4:3D:54:D1:0A
X509v3 Authority Key Identifier:
keyid:23:32:0A:4B:AF:0A:F9:31:35:30:EC:99:D3:68:64:33:70:3E:07:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/IzIKS68K-TE1MOyZ02hkM3A-Bx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/IzIKS68K-TE1MOyZ02hkM3A-Bx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/247/PhZac8X3YuIB5YFCccBr9D1U0Qo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.130.50.0/24
203.130.52.0/24
203.130.63.0/24
220.243.248.0/24
Signature Algorithm: sha256WithRSAEncryption
58:57:e9:89:c1:42:89:30:28:c8:30:d5:86:5a:7b:47:bf:b7:
c6:89:46:51:11:ec:30:5b:25:b4:54:33:63:9d:0a:0f:4d:5c:
fe:7a:7b:ff:7e:4f:47:33:0a:58:7e:d0:3a:fa:3b:75:8a:fe:
06:d5:f5:c1:de:16:72:21:2a:63:54:e5:d1:cf:d1:2d:5f:6c:
e0:1c:54:8f:07:aa:19:1f:3e:95:48:16:28:1f:b4:22:91:82:
b2:47:d9:0c:b6:d9:1f:e6:83:f3:65:f9:5f:e8:27:6f:9e:63:
3f:44:67:de:9f:dd:3f:5c:60:97:c0:a9:53:86:65:84:83:45:
39:b2:e4:54:38:b7:3e:35:dc:94:bc:d4:31:3e:7c:87:b8:0d:
45:36:f0:7f:a5:7a:30:85:3d:4c:00:50:e4:87:b8:3c:3b:48:
2e:09:d7:13:f7:68:86:e4:34:ff:24:1f:02:9d:7e:19:9e:39:
2e:c7:d8:c3:66:44:8d:a1:88:69:ca:bf:88:71:a2:72:84:5e:
fe:64:c9:1e:26:ac:be:bb:0b:b3:dc:ef:bd:dc:ee:1a:ca:66:
c6:15:09:47:85:10:0b:01:b5:be:b6:8e:f0:24:e3:1e:7c:9b:
54:e4:cc:3a:b2:78:19:96:32:f6:5c:e8:f2:ed:b1:8c:da:75:
2f:20:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org