Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/0T1I0RH1kolxO5PMFRdWQHSgSW8.roa
File: 0T1I0RH1kolxO5PMFRdWQHSgSW8.roa (raw, json)
Hash identifier: W6NRB0A8J8stC5KgkqNM2mTYwy9aodLMAowOPW3zcHU=
Subject key identifier: D1:3D:48:D1:11:F5:92:89:71:3B:93:CC:15:17:56:40:74:A0:49:6F
Certificate issuer: /CN=9E65AA3E39C79F5FC6B8A062084B5888270FF915
Certificate serial: 05
Authority key identifier: 9E:65:AA:3E:39:C7:9F:5F:C6:B8:A0:62:08:4B:58:88:27:0F:F9:15
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nmWqPjnHn1_GuKBiCEtYiCcP-RU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/0T1I0RH1kolxO5PMFRdWQHSgSW8.roa
Signing time: Thu 27 May 2021 05:03:03 +0000
ROA not before: Thu 27 May 2021 05:03:03 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 131530
IP address blocks: 103.98.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E65AA3E39C79F5FC6B8A062084B5888270FF915
Validity
Not Before: May 27 05:03:03 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=D13D48D111F59289713B93CC1517564074A0496F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:ce:b9:dc:29:f0:57:1d:b1:65:3b:f0:d8:
72:fb:49:6e:71:a4:6b:75:37:ea:3e:79:ac:e6:79:
7d:03:3e:4b:3c:7f:44:1a:14:e4:2e:e8:31:8b:ad:
9d:7e:9f:eb:9d:c4:81:14:0a:05:c3:e0:e4:e7:70:
f5:52:00:8d:c7:f4:68:22:f9:fc:88:12:eb:d7:f6:
c7:d5:bd:0e:69:2d:85:db:7a:69:3e:d9:33:53:01:
b4:38:47:f5:17:19:82:65:26:fc:3c:4f:fd:d4:aa:
4d:7c:ac:9e:8d:af:d5:68:6c:3b:0f:c9:0a:60:ff:
78:51:78:a9:f2:91:38:21:21:55:63:9b:f8:a9:6f:
fd:e7:a6:44:b2:07:63:63:d5:d5:e3:1a:8c:c5:7a:
e8:ae:07:68:a0:60:b5:b9:ef:3a:ce:a1:30:15:8c:
b6:f8:ae:a3:da:35:de:c3:91:64:81:50:34:34:08:
57:2c:07:66:2f:07:b0:4b:f1:75:29:df:e2:b3:cd:
be:aa:92:81:7d:3a:03:45:5e:bf:38:d7:a0:09:66:
30:67:2e:49:6c:53:d0:a5:91:da:18:4f:e7:d4:f4:
d1:c3:bd:d3:2e:f5:0d:11:b3:c8:b4:ff:3c:da:0f:
55:a5:85:1f:75:5d:d7:35:01:ff:a8:db:67:e9:d9:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3D:48:D1:11:F5:92:89:71:3B:93:CC:15:17:56:40:74:A0:49:6F
X509v3 Authority Key Identifier:
keyid:9E:65:AA:3E:39:C7:9F:5F:C6:B8:A0:62:08:4B:58:88:27:0F:F9:15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/nmWqPjnHn1_GuKBiCEtYiCcP-RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nmWqPjnHn1_GuKBiCEtYiCcP-RU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/0T1I0RH1kolxO5PMFRdWQHSgSW8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.164.0/22
Signature Algorithm: sha256WithRSAEncryption
71:d4:2e:b4:2b:90:3e:20:41:a6:5f:0d:17:e3:90:10:d1:7c:
84:cd:db:ef:01:d7:fa:0e:ff:c2:37:3d:7e:04:a0:21:5b:1b:
76:60:bc:ba:b6:52:06:f6:73:1d:df:af:57:90:ae:91:52:23:
22:97:b5:f0:ee:b3:83:d6:82:2c:b4:9b:6e:08:7d:3b:74:ac:
06:df:69:94:d7:32:15:81:c5:1b:49:e3:90:0a:34:c2:d1:66:
b7:e6:13:6d:ed:da:90:75:6b:8d:5c:f6:b6:13:a0:69:45:27:
58:09:d4:b1:34:5d:fa:f0:bf:36:55:5f:09:b3:07:92:bb:f9:
09:8c:c8:95:18:df:5e:ef:f6:c8:42:d5:db:31:c2:b7:41:cf:
20:d7:f9:35:dd:40:64:b1:f7:76:87:9c:7c:86:19:e5:94:05:
77:66:ca:bd:e8:c0:42:df:03:cd:f6:6e:23:e0:e1:8a:24:60:
59:56:9f:46:ee:a2:b2:b3:33:cc:06:6c:89:07:dd:70:f9:d6:
8c:39:fa:21:13:f8:21:fb:0a:22:b3:bf:0c:7b:ab:c0:a2:b8:
cd:b6:3b:aa:59:b4:c8:c4:5f:83:b7:58:47:b3:3b:e4:6b:7d:
b1:6a:0d:c2:d6:97:f5:03:be:2d:bf:66:89:1b:e6:a1:04:93:
ee:10:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org