Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/tKjqzpKJjmnqWZoDWHxrCBhQqK0.roa
File: tKjqzpKJjmnqWZoDWHxrCBhQqK0.roa (raw, json)
Hash identifier: Dfdo8TVJui2Ok9Lsqh665b1i6xrWJA3KmUX387uAPIQ=
Subject key identifier: B4:A8:EA:CE:92:89:8E:69:EA:59:9A:03:58:7C:6B:08:18:50:A8:AD
Certificate issuer: /CN=63A0F163884E4E0EA98C0ED1ECFB6CBD41F66C19
Certificate serial: 06DB
Authority key identifier: 63:A0:F1:63:88:4E:4E:0E:A9:8C:0E:D1:EC:FB:6C:BD:41:F6:6C:19
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/tKjqzpKJjmnqWZoDWHxrCBhQqK0.roa
Signing time: Thu 03 Jun 2021 08:47:31 +0000
ROA not before: Thu 03 Jun 2021 08:47:31 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 58593
IP address blocks: 42.159.0.0/16 maxlen: 24
42.159.0.0/18 maxlen: 24
42.159.64.0/18 maxlen: 24
42.159.128.0/18 maxlen: 24
42.159.128.0/24 maxlen: 24
42.159.192.0/18 maxlen: 24
103.9.8.0/22 maxlen: 24
103.9.8.0/23 maxlen: 24
103.9.8.0/24 maxlen: 24
103.9.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63A0F163884E4E0EA98C0ED1ECFB6CBD41F66C19
Validity
Not Before: Jun 3 08:47:31 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B4A8EACE92898E69EA599A03587C6B081850A8AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:50:f7:c4:86:69:32:0f:ce:73:01:c6:b2:
b0:7c:db:70:af:b1:f5:1e:4f:4a:13:0f:b7:46:bf:
ca:fd:2d:e0:ce:21:23:0c:c3:c4:a3:19:bd:54:96:
b3:01:5d:ca:b6:25:23:b8:9a:0e:54:59:a9:80:c1:
ea:e3:3e:d1:b6:03:14:6a:84:35:19:2a:12:d5:c7:
d2:bb:12:18:21:b1:3d:15:8a:ad:c0:13:c6:19:ac:
12:e2:be:84:23:79:ca:cf:94:27:fc:9a:de:4b:a3:
77:54:f8:6b:b9:6a:9f:c5:9e:7d:7d:64:44:8d:89:
d5:ad:ee:7e:a1:e4:8d:91:8f:68:5f:1d:c3:46:fc:
86:4e:c6:fe:c5:55:2c:e0:73:f8:8a:7a:56:78:31:
5e:88:3e:46:a4:44:08:e1:65:28:67:9b:37:54:dd:
5b:6e:7c:92:46:4f:2d:cf:5c:81:b2:f2:9c:99:29:
1c:23:e4:72:70:1c:fe:13:b6:2f:be:94:9b:81:a3:
2b:5f:6b:ca:85:3c:51:4a:07:a8:79:0c:fb:1c:8e:
1b:27:30:9a:0c:26:77:6d:15:cc:21:54:5c:fd:ce:
1e:04:ee:66:47:b3:ab:4b:f5:85:f4:2c:61:de:7f:
34:16:8e:c9:db:11:49:44:88:67:fc:cb:36:42:8d:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A8:EA:CE:92:89:8E:69:EA:59:9A:03:58:7C:6B:08:18:50:A8:AD
X509v3 Authority Key Identifier:
keyid:63:A0:F1:63:88:4E:4E:0E:A9:8C:0E:D1:EC:FB:6C:BD:41:F6:6C:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/tKjqzpKJjmnqWZoDWHxrCBhQqK0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
42.159.0.0/16
103.9.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:2b:8e:76:30:16:fe:c2:7a:70:50:fd:54:88:1f:e7:cc:b9:
1e:b2:91:d2:9a:f6:3b:d4:c7:77:b2:26:6c:d5:c2:24:bf:d4:
f6:2b:a6:b9:9e:0a:4d:93:44:34:08:e4:3f:33:d3:90:6c:a9:
d2:52:6d:7f:6c:fc:67:49:05:be:6d:57:dd:21:2e:16:26:da:
be:06:19:b4:fb:83:b1:94:e6:5f:f1:4c:3e:0e:ba:f7:d0:0e:
ba:12:df:b3:ed:d6:f3:20:a5:6c:df:a7:8d:10:57:6e:46:f6:
19:1a:7d:62:eb:12:c8:41:85:57:78:3d:30:9f:7b:0e:24:f6:
6d:78:9e:b1:79:18:2d:35:d8:3c:7d:5e:b8:f2:41:d7:78:74:
ef:b9:72:7d:6f:29:97:4e:00:2a:c8:65:ba:66:99:4f:a6:39:
38:71:ae:a6:4c:9d:f5:ac:4e:ca:68:ec:ff:c7:a6:5c:b9:38:
e8:34:fb:88:05:5f:af:5c:92:f4:57:be:a3:38:5b:12:57:72:
56:46:af:82:f6:4c:90:71:8e:7d:f6:4f:a6:27:3f:81:ae:a6:
0a:13:7a:13:ad:60:f2:59:95:2c:30:d1:d4:69:c6:27:f2:2c:
c4:3c:3c:26:72:f4:f6:9d:84:ed:8d:ea:8c:96:ad:6e:09:1d:
41:7d:b6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:15 2023 by rpki-client on console-ams.rpki-client.org