Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/aa4sV2l3_NTDedNFeEuHir64U60.roa
File: aa4sV2l3_NTDedNFeEuHir64U60.roa (raw, json)
Hash identifier: mLw0x6vRpVYxlk2OXYSiObsptTVFlagLZgNY+p9fz4Y=
Subject key identifier: 69:AE:2C:57:69:77:FC:D4:C3:79:D3:45:78:4B:87:8A:BE:B8:53:AD
Certificate issuer: /CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
Certificate serial: 0957
Authority key identifier: 75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/aa4sV2l3_NTDedNFeEuHir64U60.roa
Signing time: Tue 07 Jun 2022 02:16:08 +0000
ROA not before: Tue 07 Jun 2022 02:16:08 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 137806
IP address blocks: 103.114.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75637BADD837B67150E80F9C8E2F0C5AE551B791
Validity
Not Before: Jun 7 02:16:08 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=69AE2C576977FCD4C379D345784B878ABEB853AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:15:3d:30:e9:74:18:42:08:7b:77:88:1f:
cc:62:b0:1d:6d:de:cd:32:31:d4:c3:09:76:b4:4a:
5e:0c:13:24:e4:93:8b:0b:55:72:b7:a9:05:2c:fa:
bc:3b:0b:b4:f5:9f:5f:ff:c3:a9:77:6f:ce:94:02:
4e:23:08:31:95:ea:e5:62:71:2a:de:6d:94:ec:80:
91:d5:1f:dc:44:1d:fd:65:d2:06:68:d9:8b:7d:18:
58:2c:9e:48:1a:63:97:5e:1c:bd:7b:bb:3e:d9:00:
f0:85:94:4a:57:57:a8:35:9a:c5:1b:ea:29:e9:e5:
5e:42:88:b4:72:6c:0a:f4:4c:48:24:16:f3:6d:29:
fc:ca:de:3a:40:ec:41:d9:85:18:44:7d:07:98:85:
65:9c:70:6b:ba:50:c2:95:48:95:cf:f1:a9:7b:48:
b8:6d:b2:7b:50:52:08:31:22:0c:fd:04:cd:04:52:
38:59:c7:2e:92:7e:b2:90:9a:df:bc:46:55:83:27:
88:c9:a6:9e:88:ac:77:c6:89:2b:ac:7a:c9:f2:22:
aa:c6:80:4b:cc:40:c4:f1:5c:34:94:53:33:eb:a0:
d3:9a:d0:b5:4b:30:cf:b9:0d:40:42:ef:bf:23:68:
f9:a9:60:6c:c9:40:1a:70:83:ec:70:fd:4d:9b:b6:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AE:2C:57:69:77:FC:D4:C3:79:D3:45:78:4B:87:8A:BE:B8:53:AD
X509v3 Authority Key Identifier:
keyid:75:63:7B:AD:D8:37:B6:71:50:E8:0F:9C:8E:2F:0C:5A:E5:51:B7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/dWN7rdg3tnFQ6A-cji8MWuVRt5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dWN7rdg3tnFQ6A-cji8MWuVRt5E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/aa4sV2l3_NTDedNFeEuHir64U60.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.236.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1f:25:40:67:ea:b4:50:58:b1:50:d8:39:48:3f:84:63:eb:
2c:25:b5:87:cf:5e:8e:bc:fd:1f:5c:c0:c8:e7:11:5e:c6:50:
a6:b5:71:c7:2f:df:17:be:64:6b:51:d8:43:b6:9b:58:2d:30:
dc:1c:40:75:f3:d9:9e:7e:53:a9:f5:97:f9:c6:f7:8a:a5:bd:
37:6d:a2:c8:eb:40:40:4b:5a:eb:57:f4:9e:32:a0:64:2b:f0:
6e:4d:ba:21:16:3c:b5:e9:24:1e:d0:14:54:c9:bf:85:f6:d6:
84:13:09:cb:47:53:87:3c:bc:1f:b2:d3:54:05:82:62:d2:46:
b8:2b:4f:56:a0:a4:0e:b4:a8:18:72:7a:e7:bc:67:1c:92:5b:
0b:ca:a0:9c:e7:d1:80:43:3d:56:00:10:4e:34:f6:88:c9:cc:
46:77:b7:5c:d3:9d:03:a4:c6:4d:0f:b0:10:9c:ea:36:61:ee:
d5:76:1d:3b:ad:9b:63:57:84:e9:6e:cd:c7:61:e7:4c:4c:3c:
e5:98:1a:b0:17:f6:ee:db:3e:b3:b0:61:f1:fa:39:4f:3a:55:
9a:05:3a:d8:ec:a2:c9:7e:a4:1f:a6:e5:d8:50:c9:20:20:a5:
44:0a:36:18:2b:f4:47:e3:e7:96:1c:df:13:48:db:7a:5a:94:
0c:c7:ae:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org