Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/RjJYuJ81OlGeDT75jBTcAQIgaUA.roa
File: RjJYuJ81OlGeDT75jBTcAQIgaUA.roa (raw, json)
Hash identifier: TaUk2GYvPTeneugauJz69tAG9EWvtdsxZfF2PH5GXDU=
Subject key identifier: 46:32:58:B8:9F:35:3A:51:9E:0D:3E:F9:8C:14:DC:01:02:20:69:40
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 056D
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/RjJYuJ81OlGeDT75jBTcAQIgaUA.roa
Signing time: Sat 04 Mar 2023 03:04:56 +0000
ROA not before: Sat 04 Mar 2023 03:04:56 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 138645
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: Mar 4 03:04:56 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=463258B89F353A519E0D3EF98C14DC0102206940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:ce:c6:dc:a1:2b:00:81:55:c0:79:82:64:
9e:a2:76:e5:17:dd:24:a6:69:21:06:79:5d:4b:ac:
d1:f4:c1:e9:eb:62:90:14:1b:35:69:d3:ea:78:dc:
06:f3:de:5c:3e:77:8d:2b:de:da:96:5e:12:b7:3f:
11:c2:85:9d:28:07:87:1b:8f:a5:7d:89:46:cc:9c:
56:43:d1:70:cd:e5:72:29:eb:26:b7:a1:37:0a:34:
f3:25:dc:af:94:f1:de:2a:ef:5a:91:b2:92:2b:12:
6d:4c:a2:c9:22:23:8e:a8:2c:ba:98:e1:9d:c2:39:
45:3c:d0:c9:44:e9:f1:3a:e5:7a:62:c8:fe:ec:32:
4e:bf:5e:05:96:ef:5e:c6:3f:21:27:7c:b0:b5:98:
8b:07:cd:c1:f2:88:07:7a:d9:b0:4a:dc:0e:e4:ca:
f3:be:48:9c:8a:ae:d6:a5:c1:d4:eb:e7:5d:e3:a3:
ad:17:90:6d:e2:0c:ee:45:d4:03:9c:f4:d1:b0:45:
46:de:db:a0:c0:5d:9c:3f:d6:a4:0c:f5:9a:ca:f0:
13:fe:9d:cf:da:82:01:2b:c5:3e:91:49:76:22:8c:
77:99:bb:cf:14:ec:b4:15:6b:f7:a3:e5:d3:ca:7c:
48:e8:4b:a5:bf:2e:42:33:cc:33:ab:c4:fc:98:76:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:32:58:B8:9F:35:3A:51:9E:0D:3E:F9:8C:14:DC:01:02:20:69:40
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/RjJYuJ81OlGeDT75jBTcAQIgaUA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4d:fb:49:9b:7b:85:e1:cf:46:fa:31:d4:3f:8c:cf:13:f0:
f9:a1:81:a4:a9:df:2b:16:d4:67:b1:d8:31:a0:7a:37:c9:49:
d4:96:a3:70:2a:e8:9d:96:f2:df:08:8e:b8:0d:42:59:dc:9e:
e2:fa:f3:e8:5a:25:22:e5:88:2c:cf:41:9a:29:b0:da:5a:0e:
25:c4:b3:be:2f:2a:96:96:25:5e:20:ad:8e:a9:f3:42:3c:5e:
e0:44:08:be:39:8e:98:15:7e:85:37:1d:2e:9f:c6:e1:03:fd:
08:e0:66:c3:e9:81:65:3c:72:89:9f:c0:49:71:d8:91:5d:77:
74:7f:16:09:f3:05:ae:a4:41:8d:f7:b2:36:40:d0:55:bb:fe:
85:0b:b1:3c:9d:4f:e1:41:77:28:4b:38:e0:0b:6b:aa:d8:e8:
c0:b7:61:2f:21:47:aa:39:39:8c:c2:e1:c0:51:1b:11:4e:ac:
f9:4b:e8:b9:28:01:78:88:ae:c1:85:e1:59:1b:1b:a2:43:0a:
12:15:07:7e:ac:25:c1:8a:9f:ad:df:da:94:ce:7f:8d:a5:59:
36:da:42:6b:93:7e:2c:46:7c:39:4a:e3:30:03:f6:05:74:f9:
27:23:aa:07:c8:c6:e9:93:fd:77:44:98:2b:e0:0e:56:8c:b0:
77:06:1e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org