Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/p5xdiv3P4fqRC-po9BIG56Fun1s.roa
File: p5xdiv3P4fqRC-po9BIG56Fun1s.roa (raw, json)
Hash identifier: 8LVuGcT4MIqBTYNsDCfB8/A8fhr18Se56TeSre4iO2g=
Subject key identifier: A7:9C:5D:8A:FD:CF:E1:FA:91:0B:EA:68:F4:12:06:E7:A1:6E:9F:5B
Certificate issuer: /CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177
Certificate serial: 094C
Authority key identifier: 6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/p5xdiv3P4fqRC-po9BIG56Fun1s.roa
Signing time: Mon 06 Jun 2022 20:07:37 +0000
ROA not before: Mon 06 Jun 2022 20:07:37 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 131530
IP address blocks: 103.98.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177
Validity
Not Before: Jun 6 20:07:37 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=A79C5D8AFDCFE1FA910BEA68F41206E7A16E9F5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:1c:e2:0e:f7:5f:3e:2e:92:e0:dc:75:ad:
ab:12:60:be:d2:4a:ae:69:a4:8f:ed:39:1c:4e:a8:
3f:3b:f8:f4:81:6c:2b:e4:9a:6a:ef:38:97:5d:eb:
0b:34:b1:fe:d8:3a:88:f6:37:25:31:1f:46:b8:fe:
83:f6:fb:fe:f2:e7:69:06:f9:bc:44:74:5f:94:e4:
39:9e:c3:8f:f3:33:7a:be:0f:9e:49:47:9f:22:84:
d2:a8:25:87:5f:2b:13:84:96:c4:3d:fd:63:ea:5c:
98:7e:1c:73:a5:71:a3:10:1d:70:d9:26:15:6b:7c:
49:76:87:6d:44:dc:e0:b2:02:3a:44:62:7e:5f:a6:
23:2b:6d:a5:f8:f8:f7:e8:4a:d5:69:fc:c5:0c:59:
be:74:d3:ea:20:be:d9:08:ed:0d:06:5a:03:66:c0:
2d:29:7b:fd:d2:50:57:44:61:9d:d4:40:63:2e:c5:
d0:fa:fa:ed:14:b7:2a:9e:47:5f:a8:c2:4b:f4:28:
1b:96:1a:d0:d0:67:b4:ce:23:87:03:07:a3:04:c2:
68:6a:8e:dd:d6:d9:20:8f:df:6d:1e:f2:c3:b0:b6:
b3:e3:c8:a9:0c:22:85:47:f1:2a:a5:95:e6:71:0a:
64:55:87:5a:cf:38:89:69:0f:bd:21:6a:71:e8:87:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:5D:8A:FD:CF:E1:FA:91:0B:EA:68:F4:12:06:E7:A1:6E:9F:5B
X509v3 Authority Key Identifier:
keyid:6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/p5xdiv3P4fqRC-po9BIG56Fun1s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.164.0/22
Signature Algorithm: sha256WithRSAEncryption
89:87:a0:cf:3a:f6:81:0a:01:7a:6d:a2:3c:12:66:fe:d1:b3:
5b:95:53:9b:61:92:6b:1c:35:5a:fa:ed:88:5a:74:61:f1:4b:
f1:17:ed:73:a8:c8:54:6c:71:f3:01:42:42:cb:ec:d2:d8:ef:
f6:e3:43:3d:6c:92:9c:3c:92:e6:8d:0c:aa:62:d7:a3:c1:ff:
7a:cd:83:9f:da:dd:db:6f:e5:6c:12:a7:ca:c7:b6:c5:b7:eb:
86:81:dd:f5:17:af:9c:96:0c:f4:79:b1:a9:ac:e4:26:06:8c:
df:e3:87:bd:7c:6f:32:28:9a:2c:f8:65:88:9e:44:48:0e:35:
2b:30:9d:16:1a:c1:5e:c9:69:24:c4:8e:2f:10:6d:cd:73:02:
ac:7e:19:6d:b0:7f:b2:48:7d:71:40:d8:5b:71:a5:07:bd:5a:
0b:ab:51:2b:22:3e:46:ad:64:8f:ff:f3:d0:25:c1:36:22:81:
d2:97:8c:cb:ff:a9:13:77:ec:c2:d9:09:ad:46:f5:cc:0a:93:
f7:40:ae:d2:2b:67:6b:95:4b:8b:49:22:0d:8b:c7:92:fc:7b:
77:74:2e:44:2d:82:31:f9:12:a9:b5:24:aa:4b:65:48:9a:6e:
6f:a9:f0:60:76:3b:55:2a:a5:76:31:92:e6:08:1e:0c:eb:12:
45:af:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org