Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/Nvk_ywxrwO6zDE298YEmTzmOL8k.roa
File: Nvk_ywxrwO6zDE298YEmTzmOL8k.roa (raw, json)
Hash identifier: 5BT2JLzgIdhNQsKg9yl60+U4j4Ew/8GDtb3rLGOMQDA=
Subject key identifier: 36:F9:3F:CB:0C:6B:C0:EE:B3:0C:4D:BD:F1:81:26:4F:39:8E:2F:C9
Certificate issuer: /CN=D1EA9A8B512505907299DA38CEA5BCCE610987CB
Certificate serial: 0D4E
Authority key identifier: D1:EA:9A:8B:51:25:05:90:72:99:DA:38:CE:A5:BC:CE:61:09:87:CB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0eqai1ElBZBymdo4zqW8zmEJh8s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Nvk_ywxrwO6zDE298YEmTzmOL8k.roa
Signing time: Tue 07 Jun 2022 10:07:17 +0000
ROA not before: Tue 07 Jun 2022 10:07:17 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 24424
IP address blocks: 103.104.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3406 (0xd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1EA9A8B512505907299DA38CEA5BCCE610987CB
Validity
Not Before: Jun 7 10:07:17 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=36F93FCB0C6BC0EEB30C4DBDF181264F398E2FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:34:9c:22:47:f7:fe:3a:a0:2b:9f:80:35:
78:6a:f1:77:ff:8e:15:7a:e2:3d:bc:1f:e8:ea:62:
4e:ca:5a:72:f0:45:ba:11:72:98:2e:2f:e1:02:d2:
d0:d0:da:f1:ac:08:14:10:ac:ac:b6:14:25:77:2d:
82:b5:9c:98:56:7c:83:d9:cc:8f:b5:0a:b7:6b:86:
cd:25:64:d7:06:98:b6:4d:4c:67:7c:b1:a6:ed:ed:
fa:92:c1:f2:82:aa:26:8d:58:49:f7:4f:20:80:cf:
b1:c9:b4:56:66:63:24:f3:fc:62:af:d5:95:d6:ed:
a5:95:9e:fc:9e:07:97:d1:40:d3:81:a4:9d:7d:80:
ba:f0:2e:0b:a3:64:33:5f:cc:b1:e5:e4:c2:bd:c7:
8e:ad:f1:69:ae:24:98:ad:03:11:fe:94:8d:d9:cf:
7f:23:e2:37:3e:94:f3:ac:30:c5:77:5d:04:2b:bc:
e6:92:19:8d:e5:05:51:89:d1:d3:17:59:28:8d:2e:
c4:d0:37:00:c6:75:63:37:4d:37:58:70:a3:9d:ac:
56:d4:97:32:a7:76:db:35:03:94:c0:f1:51:e6:12:
2f:49:97:9a:90:cb:51:8f:1f:10:0e:da:71:52:a8:
c0:e6:20:d5:49:5e:4d:aa:b7:88:ab:64:1f:8e:90:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F9:3F:CB:0C:6B:C0:EE:B3:0C:4D:BD:F1:81:26:4F:39:8E:2F:C9
X509v3 Authority Key Identifier:
keyid:D1:EA:9A:8B:51:25:05:90:72:99:DA:38:CE:A5:BC:CE:61:09:87:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/0eqai1ElBZBymdo4zqW8zmEJh8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0eqai1ElBZBymdo4zqW8zmEJh8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/Nvk_ywxrwO6zDE298YEmTzmOL8k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:3b:94:a8:1f:bc:55:f4:ae:a6:24:c1:1e:b0:1d:80:9e:65:
5c:23:29:1b:93:31:c6:84:43:42:95:37:52:55:30:49:d9:39:
92:4c:2a:cd:aa:cf:1c:9e:8c:53:d5:22:3d:06:3e:64:22:7e:
bf:98:9d:b7:2e:c3:d0:41:0b:82:e4:02:d8:79:9d:0a:45:ef:
24:f6:15:39:a5:72:26:4e:34:3d:2b:1c:4b:56:4d:8b:13:8f:
a8:9e:d2:a2:77:ad:c7:95:82:99:c4:76:84:8c:a8:a9:b3:5b:
7f:42:4f:f9:ea:74:9c:70:05:36:41:61:fc:97:92:da:de:01:
cc:f5:d6:62:3c:19:94:18:22:a7:92:88:e9:50:0a:e0:71:2f:
f2:f7:85:56:98:36:bc:5b:fd:fc:85:56:66:9d:7a:a5:01:2d:
b8:5e:78:e7:21:0b:26:3c:bb:2e:5d:51:60:e0:d9:cf:e1:e6:
57:b3:82:fe:bf:89:e1:5c:44:13:8d:61:87:2e:44:a9:4d:5d:
be:ae:1c:5d:0a:3c:b4:4d:b7:e3:d3:ff:a3:08:ff:4c:5d:37:
4a:aa:45:d3:a1:50:7e:92:88:70:19:10:f0:56:31:89:bf:05:
2e:4b:59:5d:a2:ad:05:6b:e2:bf:ac:3b:c1:ad:ca:4d:f4:1f:
89:7f:fa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:15 2023 by rpki-client on console-ams.rpki-client.org