Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2526/zfsS1432mqDkzIA66txr5WlXon0.roa
File: zfsS1432mqDkzIA66txr5WlXon0.roa (raw, json)
Hash identifier: YvNg0TTX2slrYOeYxuyT74zJubsqaXJ8Nz2yA7JM2A8=
Subject key identifier: CD:FB:12:D7:8D:F6:9A:A0:E4:CC:80:3A:EA:DC:6B:E5:69:57:A2:7D
Certificate issuer: /CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Certificate serial: 0569
Authority key identifier: B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/zfsS1432mqDkzIA66txr5WlXon0.roa
Signing time: Sat 04 Mar 2023 02:26:31 +0000
ROA not before: Sat 04 Mar 2023 02:26:31 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 138645
IP address blocks: 103.96.214.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1385 (0x569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1D844B1986E736466F5A18FF06B298EFCBBD6ED
Validity
Not Before: Mar 4 02:26:31 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=CDFB12D78DF69AA0E4CC803AEADC6BE56957A27D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:91:b5:e4:b4:5c:43:4a:0a:05:07:5d:22:
83:57:66:c2:44:4d:f5:5a:88:e1:bc:f2:c9:6e:a5:
05:42:1a:fc:ca:2b:95:78:89:17:99:9a:2d:5a:9e:
85:f9:c0:65:60:45:75:10:0d:0a:34:24:a3:93:da:
c1:c2:fe:b9:38:3a:fa:1e:7b:46:7b:41:d7:86:42:
49:93:f2:dd:ab:85:0f:da:19:c7:c4:c6:82:e0:c3:
50:41:69:e2:16:6a:f1:9b:39:94:8e:89:80:48:32:
c8:29:78:3d:f0:da:7f:d7:5e:b3:09:38:f5:68:23:
b8:e5:f6:74:14:db:a3:b9:0e:32:b3:a2:bf:3b:12:
00:a1:2e:9d:0a:c4:25:b0:f6:77:f1:8e:f6:c1:aa:
a0:2a:08:ed:42:0d:07:0f:b6:9a:d1:f9:f4:af:18:
b2:d6:1c:4e:15:ae:87:3b:c8:11:b8:36:21:83:b8:
53:1f:86:98:42:2c:4e:6b:f7:df:1f:15:7d:46:d4:
8c:26:a8:7a:99:46:21:3e:8c:2d:06:d6:93:43:9b:
3e:ea:39:b0:9e:c4:ed:6a:50:1f:fb:e7:70:82:ba:
b5:ca:27:a9:67:48:a0:3f:6c:5f:15:90:7d:e9:60:
88:21:9f:87:86:15:78:4c:d3:57:42:4b:7f:0e:c4:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FB:12:D7:8D:F6:9A:A0:E4:CC:80:3A:EA:DC:6B:E5:69:57:A2:7D
X509v3 Authority Key Identifier:
keyid:B1:D8:44:B1:98:6E:73:64:66:F5:A1:8F:F0:6B:29:8E:FC:BB:D6:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/sdhEsZhuc2Rm9aGP8Gspjvy71u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sdhEsZhuc2Rm9aGP8Gspjvy71u0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2526/zfsS1432mqDkzIA66txr5WlXon0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5b:fd:de:0c:ba:7e:72:4c:b2:5b:a8:57:19:32:49:e2:a0:
e3:c6:c6:95:3e:68:6f:03:cf:22:de:75:3b:74:a0:be:f7:cd:
1f:e0:c7:2a:c8:6f:76:1e:b4:70:e4:e3:b4:72:02:89:ab:eb:
6a:24:30:00:aa:22:6e:d2:ab:eb:d3:ca:a7:09:59:83:b6:7e:
74:8f:21:8a:0d:48:c5:a9:29:ed:7d:a8:10:52:39:83:38:29:
e2:61:c0:9d:d5:cc:0d:a9:a2:63:38:a3:24:bc:44:50:06:4b:
78:c1:0a:a8:29:c2:2c:a7:14:9a:a3:97:c0:2c:ab:f5:94:f8:
f8:6b:66:19:23:77:b5:d9:92:07:df:f1:9d:17:a4:34:70:25:
b9:24:93:fd:dd:f1:e2:48:f7:d7:98:2d:8f:33:8e:67:7c:c2:
a1:c9:c4:c2:9c:ac:5f:61:44:d9:93:4e:1b:71:6d:ed:1a:f4:
48:14:21:70:58:55:65:62:1f:44:a9:56:b7:8f:9b:85:b9:7e:
4e:7d:b8:41:37:a5:8a:74:a5:d1:aa:c2:39:e7:cc:af:12:f3:
a4:c3:91:a4:15:38:c3:e1:df:7b:e0:8f:a5:9c:60:61:f1:1b:
41:9e:15:77:0b:97:c8:bc:37:0f:1a:73:a8:ee:96:13:77:5a:
72:6a:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org