Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/NNlskendJWt6Y2pUMf6VGMnJ4lg.roa
File: NNlskendJWt6Y2pUMf6VGMnJ4lg.roa (raw, json)
Hash identifier: Ds+q4it4jQRwaRmScapbbcWT3LIPdQ+YZ+DgiEyPF0Q=
Subject key identifier: 34:D9:6C:91:E9:DD:25:6B:7A:63:6A:54:31:FE:95:18:C9:C9:E2:58
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 3854
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/NNlskendJWt6Y2pUMf6VGMnJ4lg.roa
Signing time: Mon 06 Jun 2022 20:03:49 +0000
ROA not before: Mon 06 Jun 2022 20:03:49 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 63603
IP address blocks: 103.102.196.0/24 maxlen: 24
103.102.197.0/24 maxlen: 24
103.102.198.0/24 maxlen: 24
103.102.199.0/24 maxlen: 24
163.53.44.0/24 maxlen: 24
163.53.45.0/24 maxlen: 24
163.53.46.0/24 maxlen: 24
163.53.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14420 (0x3854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Jun 6 20:03:49 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=34D96C91E9DD256B7A636A5431FE9518C9C9E258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:34:42:89:90:e3:52:6d:ee:9e:66:ce:96:
50:06:e8:c4:0d:97:14:c1:6f:80:63:7d:45:a4:93:
1e:13:00:07:48:db:99:46:a2:fe:5e:7a:33:01:bd:
fd:e3:56:f8:7e:fb:3f:b5:d2:84:4e:51:11:97:6a:
a5:53:81:53:8b:a8:58:c9:d6:61:b5:be:6b:5f:51:
98:52:7f:ba:48:5b:d4:2b:32:0b:99:ab:39:1a:92:
8f:a2:e7:c4:8b:53:c9:ac:61:41:0a:d7:8b:42:82:
73:02:5a:9d:eb:2b:9f:97:81:c7:8a:64:3d:0c:1d:
1c:ab:d5:ae:29:2c:ea:69:f4:29:74:d3:f2:a5:70:
bf:bd:38:de:d8:91:ec:58:3f:73:d6:63:e0:b1:f2:
57:5b:9a:0d:88:91:5a:45:08:ce:04:65:2a:0e:34:
1e:69:ef:1b:82:25:d2:80:53:69:87:c2:50:67:f2:
26:1b:8e:01:a1:a8:f3:86:0f:b3:23:10:94:22:f7:
d6:2e:f1:2d:5c:96:d8:a9:fd:6b:60:36:05:23:ca:
ee:33:96:6c:57:5e:97:a9:56:9d:6a:31:eb:f6:00:
5d:eb:fd:f8:35:44:73:ba:7c:23:9c:67:ce:b0:fc:
8d:b7:ef:ed:b3:0a:df:01:d3:ab:e7:1c:f1:e4:0b:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:6C:91:E9:DD:25:6B:7A:63:6A:54:31:FE:95:18:C9:C9:E2:58
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/NNlskendJWt6Y2pUMf6VGMnJ4lg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.196.0/22
163.53.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:d4:5c:fc:5c:f3:c9:0a:0c:7b:66:46:9c:a0:8e:fe:77:93:
e5:b1:df:55:85:da:f1:fe:b9:05:51:14:52:b7:6f:01:4e:ae:
5a:8d:31:10:27:84:76:32:21:3a:d5:b1:cc:67:32:23:3b:f3:
55:3a:d1:40:33:80:08:5d:08:f7:a9:50:40:23:b3:c4:e1:d0:
0a:d4:a7:10:f3:0e:8a:b9:4b:66:a7:a7:70:ba:0e:63:17:8f:
6c:84:76:f4:64:ca:df:57:7c:68:8a:b8:7b:40:c3:99:f4:b8:
b8:7e:ed:c0:33:b0:af:72:d6:26:0c:60:33:ac:ef:ae:1b:1c:
4c:67:42:6a:f6:21:ec:cd:7a:79:6a:68:58:d3:1b:73:7d:e3:
e7:1c:ea:7f:c9:af:06:d6:c1:0a:29:5f:fe:2d:b8:a5:81:0e:
48:25:64:9e:7b:61:fd:ca:39:37:cd:cd:e2:95:bd:ec:78:22:
d5:94:5b:ac:91:a7:e9:81:c4:6d:81:69:35:ed:c5:84:b9:b1:
46:13:8f:e9:0b:29:06:a0:9f:d0:b2:6c:25:cc:6e:af:bf:4d:
b8:70:8f:dc:3c:5c:c9:a1:ee:16:d7:28:25:51:fb:48:99:84:
66:00:6e:32:d9:2d:43:26:fb:ae:e7:7c:21:20:7b:98:3a:76:
33:61:f5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org