Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2694/QK2jnzsm4hQQnemOZowPDAke8vA.roa
File: QK2jnzsm4hQQnemOZowPDAke8vA.roa (raw, json)
Hash identifier: IgUJ8h8I6mjN309NnOuaQJceBTXxIKtQE+3Jxy8kIBs=
Subject key identifier: 40:AD:A3:9F:3B:26:E2:14:10:9D:E9:8E:66:8C:0F:0C:09:1E:F2:F0
Certificate issuer: /CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7
Certificate serial: 0959
Authority key identifier: 8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/QK2jnzsm4hQQnemOZowPDAke8vA.roa
Signing time: Tue 07 Jun 2022 10:07:30 +0000
ROA not before: Tue 07 Jun 2022 10:07:30 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 59024
IP address blocks: 103.111.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2393 (0x959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F7C9F24F16ACDFA29180B337F32136027CC34D7
Validity
Not Before: Jun 7 10:07:30 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=40ADA39F3B26E214109DE98E668C0F0C091EF2F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:18:bc:57:9a:96:d5:aa:10:86:4e:0b:2d:
74:0f:30:b6:70:b1:7a:d7:ae:fc:0a:73:69:e7:0d:
d0:5e:78:9a:de:ec:0d:76:fe:ff:ec:b7:21:15:ec:
49:3f:a0:5c:61:22:80:2d:ae:1f:83:5e:b1:4a:0f:
a2:f1:5a:37:67:55:87:e9:3a:43:09:96:72:87:df:
2c:07:8b:ed:70:60:c1:f3:27:af:bc:92:97:3a:45:
8f:83:53:31:32:64:df:ee:a7:47:aa:5d:ea:ad:11:
7e:60:dc:a7:1e:e5:77:88:6c:81:b2:80:75:a9:d0:
67:f0:e6:06:e9:33:b4:6a:fd:b9:08:11:f9:db:6d:
fe:f5:8f:1a:8c:86:09:9c:23:9a:08:d1:1c:b3:dc:
4b:2f:92:24:e1:cc:04:59:bd:22:90:24:e5:f7:13:
e4:bd:31:fc:9e:db:5f:4e:89:5f:a1:34:53:e2:3a:
12:bf:d5:77:76:14:96:1b:f8:11:fc:4e:bc:c1:f3:
c0:38:51:83:52:64:4c:6c:6b:ae:cb:8d:58:e8:7a:
c3:68:44:76:fc:8d:a6:c9:f3:44:0b:a4:03:a9:17:
f9:94:f3:45:94:24:fa:e6:08:89:12:4f:06:42:a1:
60:cc:fc:9f:25:ef:da:a9:cb:f1:c5:58:3e:f7:4c:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:A3:9F:3B:26:E2:14:10:9D:E9:8E:66:8C:0F:0C:09:1E:F2:F0
X509v3 Authority Key Identifier:
keyid:8F:7C:9F:24:F1:6A:CD:FA:29:18:0B:33:7F:32:13:60:27:CC:34:D7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/j3yfJPFqzfopGAszfzITYCfMNNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j3yfJPFqzfopGAszfzITYCfMNNc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/QK2jnzsm4hQQnemOZowPDAke8vA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.172.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ed:94:f1:b9:33:84:59:e5:5b:53:5d:d4:6f:8a:ca:d5:6c:
5d:37:9e:14:e0:57:da:dd:c7:fe:32:5a:a2:a3:cf:25:0e:dc:
23:b2:dd:62:d7:f9:56:e1:03:e5:b3:e2:92:8b:de:f6:0e:f2:
58:56:a7:58:ee:7e:3a:72:e6:73:42:8f:7a:c6:96:0b:54:8e:
51:a0:4b:99:df:9a:dd:0d:6f:74:5d:de:ac:06:6c:de:57:ed:
07:77:c2:7d:f5:39:71:7d:f0:1a:ce:d2:57:2b:93:e5:96:da:
30:19:4f:7a:d0:d1:07:f1:ef:a7:1a:3b:8a:a5:86:2f:99:2e:
3b:9e:16:c9:92:93:79:6e:2d:b0:68:b1:c2:d2:5b:41:44:9a:
be:47:17:c6:2b:bc:25:42:b7:5c:14:76:9a:89:8f:f6:67:96:
ae:b3:ae:d1:57:90:37:cc:63:2a:b6:04:15:77:54:ea:9e:73:
13:b9:60:09:47:ff:72:ba:33:dc:6e:02:26:92:32:06:97:50:
31:8b:61:fa:86:97:b4:1a:c7:25:5f:10:fa:30:db:c9:95:5f:
91:fe:66:be:3a:cb:ef:5b:2b:34:bd:1a:7e:29:c9:e9:06:dd:
fa:98:ea:7a:f8:e9:d3:1b:54:45:d0:c4:9d:2a:48:f9:f2:a8:
d1:12:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:15 2023 by rpki-client on console-ams.rpki-client.org