Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/sNzzzJcwuxkTbzeax068iM4e360.roa
File: sNzzzJcwuxkTbzeax068iM4e360.roa (raw, json)
Hash identifier: WzjP3nzUd8eOOk+inGDe7mMECdFRpWCmDNB2qOkxZzE=
Subject key identifier: B0:DC:F3:CC:97:30:BB:19:13:6F:37:9A:C7:4E:BC:88:CE:1E:DF:AD
Certificate issuer: /CN=2F70C7AF02972BFC70BCFF5950843E42ADC052EC
Certificate serial: 31E4
Authority key identifier: 2F:70:C7:AF:02:97:2B:FC:70:BC:FF:59:50:84:3E:42:AD:C0:52:EC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L3DHrwKXK_xwvP9ZUIQ-Qq3AUuw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/sNzzzJcwuxkTbzeax068iM4e360.roa
Signing time: Fri 15 Oct 2021 20:06:42 +0000
ROA not before: Fri 15 Oct 2021 20:06:42 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63603
IP address blocks: 103.102.196.0/24 maxlen: 24
103.102.197.0/24 maxlen: 24
103.102.198.0/24 maxlen: 24
103.102.199.0/24 maxlen: 24
163.53.44.0/24 maxlen: 24
163.53.45.0/24 maxlen: 24
163.53.46.0/24 maxlen: 24
163.53.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12772 (0x31e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F70C7AF02972BFC70BCFF5950843E42ADC052EC
Validity
Not Before: Oct 15 20:06:42 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B0DCF3CC9730BB19136F379AC74EBC88CE1EDFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:07:35:ad:56:d8:1e:87:f7:1e:86:0a:12:
07:9e:85:42:de:55:42:b6:c9:43:ef:2d:07:c8:f4:
6a:67:71:65:86:15:de:b0:8d:fe:44:99:56:3c:a0:
aa:97:57:02:55:43:5b:bb:c3:26:da:80:7f:b5:a0:
08:d6:02:78:d8:ae:52:43:67:d2:19:ac:54:ca:7c:
33:5b:27:82:a5:65:0e:d9:c9:c3:95:a6:b1:6a:f0:
61:97:55:a9:f5:65:26:1d:da:9b:9c:f3:d9:db:87:
b3:91:41:94:d4:73:7f:83:b3:c4:dc:a4:37:73:f4:
5e:2a:5d:9d:15:99:69:d5:91:b3:8a:31:d2:be:15:
34:67:d7:98:b6:08:b0:9e:b3:33:b5:3f:09:bf:9c:
fc:92:bf:90:ec:f3:57:a1:4b:dc:d3:0c:19:da:48:
ae:cd:18:fb:3c:78:06:a9:55:f9:d2:0c:f4:27:46:
89:56:df:81:32:92:30:5e:a4:4d:95:2c:25:c6:e5:
d9:ea:6e:dd:d1:9f:06:62:59:ee:46:73:8a:e0:ad:
45:b3:3b:ab:72:c3:dd:8d:a9:87:f3:f6:1f:79:89:
e0:ae:c6:2e:b1:ef:25:7e:b9:a9:90:0a:37:ae:1d:
ac:82:94:33:2c:29:f4:66:ae:92:1c:dd:7e:b1:a0:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:F3:CC:97:30:BB:19:13:6F:37:9A:C7:4E:BC:88:CE:1E:DF:AD
X509v3 Authority Key Identifier:
keyid:2F:70:C7:AF:02:97:2B:FC:70:BC:FF:59:50:84:3E:42:AD:C0:52:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/L3DHrwKXK_xwvP9ZUIQ-Qq3AUuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/L3DHrwKXK_xwvP9ZUIQ-Qq3AUuw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/sNzzzJcwuxkTbzeax068iM4e360.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.196.0/22
163.53.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:e3:e9:b0:b0:cb:b3:aa:99:24:95:1a:9e:f4:d8:c8:d0:a9:
a2:81:24:b4:c9:11:d8:a5:67:33:41:e5:12:7a:93:ed:9f:e0:
e5:25:9a:97:1b:16:9f:75:7e:f6:a3:70:aa:fd:a3:4e:db:f3:
1d:70:22:45:97:93:64:70:db:a0:97:96:05:5a:0d:32:1e:b9:
fa:bf:bc:fa:d5:54:2e:d4:f7:13:8e:3c:b7:17:e6:ed:c8:00:
1e:83:70:0f:3a:26:da:9e:48:23:73:4d:a9:6c:28:cd:94:4e:
b8:e3:e5:18:18:33:e7:38:c8:b3:00:b6:4c:31:a8:e6:45:24:
90:e2:63:64:59:b8:9b:b0:48:93:01:74:25:5e:d6:bf:65:dc:
ff:7b:73:9d:9a:93:73:32:67:ee:a1:20:4f:eb:d9:6b:8d:88:
2d:40:00:ed:1e:80:50:4b:f4:fd:1a:14:d2:56:04:4a:39:ef:
6d:e3:2f:67:9b:5e:85:c4:26:d2:28:53:59:21:fe:83:a1:98:
2c:ad:b2:47:ba:6a:45:dc:dd:cc:02:50:ac:79:e4:4a:a4:50:
7a:87:d1:2a:81:a0:e6:37:dd:6c:26:53:b2:54:3d:ec:c0:ea:
18:91:85:b2:66:90:8b:81:45:6e:fd:d5:f9:c6:5d:0a:3f:8a:
81:80:7b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org