Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/Evg5h8645yOrEdUeJmWUgGfJFoc.roa
File: Evg5h8645yOrEdUeJmWUgGfJFoc.roa (raw, json)
Hash identifier: PMFka/Bs+40xsLn0bNnJSk80P0tUFPH4zm5D/Rd/FY0=
Subject key identifier: 12:F8:39:87:CE:B8:E7:23:AB:11:D5:1E:26:65:94:80:67:C9:16:87
Certificate issuer: /CN=0016F4A41A27D6BAE9821D0E225506A1CB22BDFA
Certificate serial: 03
Authority key identifier: 00:16:F4:A4:1A:27:D6:BA:E9:82:1D:0E:22:55:06:A1:CB:22:BD:FA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ABb0pBon1rrpgh0OIlUGocsivfo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/Evg5h8645yOrEdUeJmWUgGfJFoc.roa
Signing time: Thu 27 May 2021 05:05:00 +0000
ROA not before: Thu 27 May 2021 05:05:00 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 131567
IP address blocks: 103.96.8.0/22 maxlen: 24
103.96.8.0/24 maxlen: 24
103.96.9.0/24 maxlen: 24
103.96.10.0/24 maxlen: 24
103.96.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0016F4A41A27D6BAE9821D0E225506A1CB22BDFA
Validity
Not Before: May 27 05:05:00 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=12F83987CEB8E723AB11D51E2665948067C91687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:7f:ed:92:d6:bb:e4:63:1b:96:83:6a:7e:
38:dd:15:70:c0:ce:90:64:8c:f3:fc:51:4a:a6:db:
40:db:8e:84:ab:00:55:3b:bb:a6:95:5e:99:d4:92:
8a:8f:34:3c:e3:f3:25:03:48:21:c4:a0:c2:7d:84:
83:12:22:93:44:31:4e:0e:ef:20:98:e3:26:c8:47:
46:72:61:3e:6d:67:59:df:8f:0f:31:7b:58:87:ee:
0b:07:fb:dd:cb:49:bb:fa:46:70:63:87:dd:5a:ed:
16:a0:f2:d5:d4:bb:a0:71:fc:be:b9:3b:b8:fd:d3:
b7:07:4d:73:3a:c7:81:24:04:dd:e4:e5:39:ff:14:
8d:80:ee:99:30:cf:11:09:38:c0:3f:0d:b8:8e:69:
24:ab:1c:75:a7:52:16:14:04:08:97:66:75:3d:3f:
98:cf:f6:10:dc:db:61:37:ac:0b:14:0a:96:44:33:
1f:c2:72:63:90:e0:45:2a:81:cd:98:38:a6:60:c5:
32:ad:d0:45:90:2c:e9:1b:f4:76:df:a1:0e:99:31:
0c:81:cb:af:49:ca:1b:dd:79:3d:3b:92:5a:86:13:
9f:39:e3:d7:13:15:2c:b9:35:1e:ce:09:21:c0:ae:
a1:05:19:c9:9a:ed:23:0e:d7:25:34:eb:87:e4:90:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:39:87:CE:B8:E7:23:AB:11:D5:1E:26:65:94:80:67:C9:16:87
X509v3 Authority Key Identifier:
keyid:00:16:F4:A4:1A:27:D6:BA:E9:82:1D:0E:22:55:06:A1:CB:22:BD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/ABb0pBon1rrpgh0OIlUGocsivfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ABb0pBon1rrpgh0OIlUGocsivfo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/Evg5h8645yOrEdUeJmWUgGfJFoc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.8.0/22
Signature Algorithm: sha256WithRSAEncryption
87:c1:69:a9:fa:77:c4:a2:1c:0e:46:dd:15:d9:19:b0:7a:1a:
79:d9:f3:e7:ba:a1:92:cc:16:23:a0:3d:e1:e8:5d:06:4c:38:
31:2d:a8:ce:19:da:ba:5a:b6:53:6e:32:73:3a:ad:1d:77:25:
0d:b5:b7:07:1f:7e:92:6d:1f:ec:2c:66:33:bc:cd:40:4f:9b:
c0:ae:36:d0:8e:ac:a6:fb:d4:44:19:c4:59:7e:d5:00:ae:b8:
ce:0b:a9:fc:e8:f8:c4:f0:a1:c3:11:89:48:bb:8d:e7:41:af:
64:2f:ad:cd:c6:21:b9:87:72:03:23:c2:87:8b:4c:bf:90:f6:
5c:90:05:20:25:e7:7e:e7:1e:6c:08:30:74:0b:26:23:f9:0d:
66:62:be:68:6b:48:5a:a2:f7:cf:2c:ac:47:62:75:f6:8a:6e:
28:fd:0f:a8:a2:70:ce:01:d2:08:89:1d:12:bd:fc:da:e9:56:
71:a0:3e:96:ac:b5:15:dd:76:73:f6:29:ac:29:24:ed:26:cb:
13:10:54:0a:cc:8d:fe:4a:16:e6:1f:02:a2:13:f7:73:72:30:
99:ac:ca:e8:80:3d:a8:0f:67:2c:3e:88:df:63:29:d0:60:c6:
f0:74:d1:b9:48:18:e2:62:f7:2e:af:e0:a5:cf:e2:34:2d:14:
bd:59:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org