Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2722/mFomTJT9D4wL9FFcrK857gKOihw.roa
File: mFomTJT9D4wL9FFcrK857gKOihw.roa (raw, json)
Hash identifier: 1YktrU7GBAFyspjblA+ZMGfTjfWLn/faOMMDecevnDg=
Subject key identifier: 98:5A:26:4C:94:FD:0F:8C:0B:F4:51:5C:AC:AF:39:EE:02:8E:8A:1C
Certificate issuer: /CN=BF88BBAE2E4C2BC185EAE32C805A7782CCEDF225
Certificate serial: 03
Authority key identifier: BF:88:BB:AE:2E:4C:2B:C1:85:EA:E3:2C:80:5A:77:82:CC:ED:F2:25
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v4i7ri5MK8GF6uMsgFp3gszt8iU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/mFomTJT9D4wL9FFcrK857gKOihw.roa
Signing time: Thu 27 May 2021 05:04:48 +0000
ROA not before: Thu 27 May 2021 05:04:48 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 137806
IP address blocks: 103.114.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF88BBAE2E4C2BC185EAE32C805A7782CCEDF225
Validity
Not Before: May 27 05:04:48 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=985A264C94FD0F8C0BF4515CACAF39EE028E8A1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:c5:4f:cb:bd:0d:57:18:a1:1a:3e:46:b1:
43:93:8d:40:1f:48:eb:a9:d6:6a:14:aa:a5:79:a9:
92:e1:af:c1:e3:81:79:50:aa:57:52:b8:1e:fa:d2:
23:3b:dc:49:1b:73:f6:7a:5a:a2:ab:21:b4:af:d0:
18:41:1d:88:3e:42:9e:bd:50:98:fc:59:67:ce:4d:
43:87:72:3c:58:c6:bb:ee:a9:15:01:56:b7:bd:d8:
8b:14:8f:2d:11:8b:19:39:64:0c:83:03:68:dd:26:
ba:2f:ab:96:49:91:ca:59:9d:43:9b:56:7f:0a:01:
27:f6:8e:d8:24:c4:19:85:c2:8c:b4:0f:62:dc:4e:
fa:05:83:03:ec:97:31:d3:53:71:d6:58:cb:81:3c:
e3:43:2e:9a:44:99:2f:03:0d:ce:c1:c5:19:ec:77:
2c:a4:28:f3:bc:06:cb:a9:fb:b5:bb:cc:a6:61:b1:
f3:7a:a9:a7:b5:20:b9:2d:31:01:f1:24:66:1b:fc:
3c:c7:e6:7a:db:b0:44:f1:28:b2:14:09:ea:2c:8c:
ed:54:b9:9a:c6:8f:59:81:14:f7:ea:97:04:f8:ae:
19:8e:f9:9c:e1:27:0b:9d:57:ef:2c:1b:88:d5:b7:
d6:b5:b1:23:63:ab:07:7a:e6:9b:03:5e:61:cd:9d:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:26:4C:94:FD:0F:8C:0B:F4:51:5C:AC:AF:39:EE:02:8E:8A:1C
X509v3 Authority Key Identifier:
keyid:BF:88:BB:AE:2E:4C:2B:C1:85:EA:E3:2C:80:5A:77:82:CC:ED:F2:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/v4i7ri5MK8GF6uMsgFp3gszt8iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v4i7ri5MK8GF6uMsgFp3gszt8iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2722/mFomTJT9D4wL9FFcrK857gKOihw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.236.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3c:95:96:de:f6:fb:a8:e2:40:00:82:55:97:1c:d0:f8:59:
1f:a2:d0:06:c2:9f:ab:1a:4f:d4:9d:c2:59:ee:65:74:90:0f:
d3:58:fb:2b:2d:c0:e1:9e:09:e8:d2:2e:c3:94:e9:43:9b:61:
52:5b:ab:bb:ce:93:ec:9a:67:4d:5e:6c:72:99:ac:f6:a0:e1:
cc:27:42:02:f7:0f:f1:2e:6d:da:08:6f:13:df:45:15:98:ea:
af:89:3a:ce:24:f5:e4:26:83:08:c5:5d:b0:aa:63:03:23:4f:
cf:11:d4:09:23:b1:4e:f2:9f:30:52:fa:3d:90:f8:64:f2:70:
74:19:6e:48:27:bd:02:bf:ec:9e:af:60:25:56:3f:1f:c1:49:
6f:67:6f:46:54:a8:1c:c2:b8:a1:12:e7:e2:f5:90:a1:83:a5:
a9:f6:6e:1a:9a:13:ee:e6:1b:ce:fe:91:79:0b:e1:a6:01:b1:
51:cf:16:11:f7:d0:a3:db:c4:e8:4d:00:97:0c:7d:a8:28:fe:
26:90:a6:46:04:0a:3c:67:f5:f6:5b:0a:de:ce:8b:be:64:50:
12:da:0d:37:f9:bb:f3:49:00:15:ad:a2:3a:85:18:bd:2e:f5:
02:e4:cb:69:09:e7:d4:9e:2e:4e:71:9e:18:a9:30:4d:dc:da:
ae:f1:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org