Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/z9zIqVCtXZAxlYsLPMklBlcBv-M.roa
File: z9zIqVCtXZAxlYsLPMklBlcBv-M.roa (raw, json)
Hash identifier: FjNI4ZRkYQ/baRKb4xjJ0pmcPGgj/dp2a7fZ3ZreJzA=
Subject key identifier: CF:DC:C8:A9:50:AD:5D:90:31:95:8B:0B:3C:C9:25:06:57:01:BF:E3
Certificate issuer: /CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177
Certificate serial: 094A
Authority key identifier: 6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/z9zIqVCtXZAxlYsLPMklBlcBv-M.roa
Signing time: Mon 06 Jun 2022 20:07:35 +0000
ROA not before: Mon 06 Jun 2022 20:07:35 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 131482
IP address blocks: 103.98.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177
Validity
Not Before: Jun 6 20:07:35 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=CFDCC8A950AD5D9031958B0B3CC925065701BFE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:02:35:15:7d:26:13:de:28:1c:8a:22:ba:
41:4d:7e:68:f7:45:1a:57:fd:0b:0c:7d:79:b8:ce:
92:dc:a0:83:48:26:f5:f4:c8:d1:4c:9d:5d:6f:f6:
f9:ab:69:a1:23:80:63:aa:e7:52:97:6d:47:41:f5:
c9:b7:d9:be:ba:f8:da:bc:7b:c1:18:fb:56:98:37:
a4:02:7c:de:80:28:20:1d:27:7d:55:47:10:04:43:
a0:4f:c2:24:b5:32:e2:21:29:6c:8d:cd:83:f6:ca:
6e:9c:b3:cf:8b:1c:5f:60:ef:17:d9:49:33:d0:11:
58:19:99:6f:5d:f7:cc:4a:de:93:b7:cf:ca:50:c1:
25:fd:ed:cd:60:87:dc:29:36:69:48:3a:fd:cb:20:
2a:44:d5:ac:17:d1:30:fc:66:53:54:d7:04:57:be:
69:22:2a:bf:9d:70:ba:d2:22:c2:d8:77:b2:3a:9c:
9c:c3:82:df:5c:30:17:85:0b:2d:fe:04:2e:55:e2:
be:f3:82:d5:40:12:ce:17:7d:fe:48:2f:e0:0a:3c:
d7:fe:c0:fc:67:a6:be:ab:22:1d:71:63:72:ad:ba:
bc:1b:64:11:2f:ae:81:68:20:46:19:a9:64:14:79:
b0:3a:8e:ab:97:65:ca:81:0a:95:fd:37:7d:ff:f2:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DC:C8:A9:50:AD:5D:90:31:95:8B:0B:3C:C9:25:06:57:01:BF:E3
X509v3 Authority Key Identifier:
keyid:6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/z9zIqVCtXZAxlYsLPMklBlcBv-M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:71:8a:ff:32:6a:2a:65:ab:01:11:70:cd:5a:31:15:76:3e:
2d:93:fb:9a:21:b4:3e:b3:56:37:5a:7c:23:02:9b:47:ba:8d:
c4:4b:00:06:0d:cf:53:b4:ef:46:9a:24:8a:d0:39:b0:cb:89:
ff:84:f2:0a:32:5c:74:1d:f7:db:d6:b3:64:c0:6e:e2:fd:fc:
87:c9:52:a5:32:97:40:20:d4:5c:14:e0:c2:7f:01:28:b8:4d:
2e:13:9d:2c:e1:bb:cd:d7:5b:8b:68:39:43:a6:58:c7:d1:d5:
9a:01:67:fe:61:c7:93:c6:c1:02:19:48:20:ce:1c:1a:b6:39:
5d:44:d1:ff:fc:e4:fa:c2:2c:07:94:e7:2e:9c:1e:e2:b8:34:
f7:b4:e8:0e:aa:49:07:2c:8e:64:1a:4a:fc:f9:71:13:1e:1d:
8e:14:c0:e0:b7:38:ae:44:f3:13:ae:b1:90:1b:d2:ec:64:d1:
33:bf:c9:b2:07:6c:5d:68:22:15:f4:3b:44:19:94:b1:55:0c:
16:c2:b6:d9:9f:7f:c0:8b:de:85:91:df:09:cd:5d:bb:82:b8:
39:c3:40:96:a7:dd:7f:d2:2d:fa:73:01:cc:25:47:dd:02:67:
2d:0a:4f:75:38:05:73:d9:4d:1c:13:91:e6:82:db:8f:f5:75:
fd:69:5a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org