Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/u2KC6x8E-hhMgffv80_kKryTTnQ.roa
File: u2KC6x8E-hhMgffv80_kKryTTnQ.roa (raw, json)
Hash identifier: hxPekeCrUyqEYdWUBDpqaZbLzi/77lQxlU53AL1FbqE=
Subject key identifier: BB:62:82:EB:1F:04:FA:18:4C:81:F7:EF:F3:4F:E4:2A:BC:93:4E:74
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 072E
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/u2KC6x8E-hhMgffv80_kKryTTnQ.roa
Signing time: Fri 02 Jun 2023 10:26:32 +0000
ROA not before: Fri 02 Jun 2023 10:26:32 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 140292
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: Jun 2 10:26:32 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=BB6282EB1F04FA184C81F7EFF34FE42ABC934E74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:b8:45:bd:50:5f:e0:08:8d:74:f5:c4:40:
7f:13:4c:e5:b4:17:d6:5a:fe:83:a7:8e:79:37:d1:
52:bb:59:84:18:0e:20:e8:25:92:31:df:b4:65:6d:
17:26:dc:2b:f2:06:29:ea:fa:71:77:58:d3:82:dd:
91:87:6d:94:43:2f:c6:d9:50:1b:e9:f4:7d:00:73:
de:fb:c3:da:07:8e:d2:bf:72:ad:14:34:5e:22:cc:
cc:5e:85:1d:7d:c3:19:30:13:ea:23:99:67:87:df:
36:d0:04:52:9a:f0:af:ea:e0:f9:9b:86:58:80:0e:
b9:65:5e:a4:44:67:77:60:2a:32:7b:df:49:d2:ec:
db:88:76:c9:aa:0e:4e:75:aa:c1:0b:5a:0f:0e:58:
53:d4:40:b3:69:f4:a5:11:7b:0a:7c:41:ca:4b:c9:
27:cf:2e:f6:f8:69:41:c5:df:e4:49:3c:7d:40:04:
6d:f9:ab:6e:8c:74:39:ea:bf:dd:5b:de:c2:df:1a:
9f:d3:02:65:92:19:29:9c:f0:2f:86:b3:be:23:f3:
db:26:cf:42:bb:db:38:19:83:07:9b:ef:dc:f3:43:
42:7e:5f:79:d7:8f:1d:52:71:6a:1b:9a:da:16:a4:
d1:c6:85:c4:7e:3b:f8:cd:f1:48:73:f7:19:6d:59:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:62:82:EB:1F:04:FA:18:4C:81:F7:EF:F3:4F:E4:2A:BC:93:4E:74
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/u2KC6x8E-hhMgffv80_kKryTTnQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e8:78:58:dc:06:79:8b:d3:ca:1b:2c:8e:4e:1e:4b:26:ff:
5e:4b:2b:c5:3f:f0:84:f3:19:f7:84:7f:05:d5:cf:c7:33:ba:
f4:59:e5:04:6b:76:e7:92:8c:46:c0:2d:ab:5e:da:1b:5c:85:
fc:ee:85:a9:90:62:48:58:85:af:22:03:21:a2:dc:d1:6b:4d:
31:01:e5:0b:91:18:bc:9b:69:80:74:0a:e6:ae:ce:de:92:83:
4b:ff:e1:6b:22:d5:23:3f:cc:1e:0a:8b:eb:8a:75:a6:fc:d6:
81:b4:64:ed:38:04:90:ed:5c:11:ec:3e:eb:02:d9:83:5a:d0:
8a:9b:78:43:1b:a3:c1:fe:4c:46:3d:a1:7e:d5:70:51:ef:d1:
70:b1:d8:de:b0:00:15:b6:18:9e:21:21:4c:3e:8c:fc:41:cd:
ec:1a:de:6c:57:d7:c3:12:e2:42:fa:54:e1:db:61:72:c0:09:
f0:2a:1f:af:ce:8a:de:5c:47:cf:15:26:43:5c:96:64:41:ed:
a2:06:3c:f1:68:07:81:1d:17:c7:70:c0:7d:5a:98:3e:53:5f:
58:56:c5:49:df:a2:1d:25:64:1a:89:7e:da:f3:93:9a:61:54:
b9:e0:27:e4:2f:ae:cf:6b:40:62:0c:b6:3e:0c:24:56:74:c8:
8a:03:60:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org