Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/1mfIMUUbP8uqHa5VnguAr-_s6Jc.roa
File: 1mfIMUUbP8uqHa5VnguAr-_s6Jc.roa (raw, json)
Hash identifier: PRIov5jNy0DhsNKCLuIcLLdpUesY2LJazxP7RuAxMsI=
Subject key identifier: D6:67:C8:31:45:1B:3F:CB:AA:1D:AE:55:9E:0B:80:AF:EF:EC:E8:97
Certificate issuer: /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Certificate serial: 03
Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/1mfIMUUbP8uqHa5VnguAr-_s6Jc.roa
Signing time: Wed 01 Jun 2022 07:08:22 +0000
ROA not before: Wed 01 Jun 2022 07:08:22 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 137798
IP address blocks: 103.116.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Validity
Not Before: Jun 1 07:08:22 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=D667C831451B3FCBAA1DAE559E0B80AFEFECE897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:2d:7a:e6:8d:22:84:97:62:5e:12:29:bf:
02:14:99:9d:c8:37:f3:b1:b6:37:77:42:c6:87:90:
46:83:87:99:16:fd:3f:19:de:2d:98:15:c0:d6:2d:
c2:1b:19:a9:ef:bf:49:52:0a:b5:ba:74:9f:76:b9:
fc:9f:de:2c:24:a3:93:12:a3:d5:4e:b8:68:8b:d4:
d3:85:31:d2:b6:ea:bc:f4:34:b2:51:45:5d:01:51:
48:3c:72:5c:be:e0:d6:2c:24:99:43:fb:5c:f9:f9:
a8:ff:79:9a:4e:8b:f4:20:0a:44:0e:cb:c1:79:c6:
7d:85:81:e0:10:82:d4:1f:eb:6f:07:e8:e2:70:73:
2e:85:c3:cd:36:e0:85:d3:bf:d3:7a:19:0a:34:df:
26:2e:ab:6c:31:87:d7:e7:e2:0f:ce:3b:8b:40:77:
03:5a:45:71:58:4d:1c:d5:aa:8a:e9:33:88:5d:8b:
d8:8b:15:73:f6:1a:3e:fb:e8:fc:dd:67:90:47:80:
b4:2c:04:e7:a5:ab:8f:25:60:f2:37:6c:d4:9e:e0:
ad:e0:61:e4:09:7c:ad:7c:87:21:63:20:25:e7:9c:
94:58:af:0d:07:21:0a:7d:54:c6:3b:03:59:f6:78:
63:16:2f:95:d6:d9:a5:1e:ac:1d:be:1b:e7:72:a6:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:67:C8:31:45:1B:3F:CB:AA:1D:AE:55:9E:0B:80:AF:EF:EC:E8:97
X509v3 Authority Key Identifier:
keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/1mfIMUUbP8uqHa5VnguAr-_s6Jc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.92.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7c:4c:8d:bd:a7:69:b8:bb:71:86:b1:84:f7:80:10:74:87:
23:95:aa:2d:b4:fd:44:d6:2b:3a:80:c4:5d:3c:b8:10:47:f0:
f4:7a:58:54:00:87:df:f1:41:f7:35:93:e3:16:20:96:79:20:
e3:70:5d:38:9d:23:e5:98:5b:b7:d5:20:d1:3d:c9:47:13:f1:
30:ff:46:28:99:22:3d:c2:ca:bb:bf:9f:90:3e:6b:e7:a2:40:
52:d2:aa:b5:77:77:71:60:3e:0e:a2:01:3b:45:5e:48:db:cb:
f4:83:c5:9b:e5:e9:25:fb:49:eb:7a:70:e0:6e:75:d5:3e:db:
a6:c4:03:e2:0e:5a:bd:55:f4:7b:ff:6a:28:ea:01:a8:e3:d6:
fc:1c:07:6f:c9:32:b0:44:2a:25:81:f2:2e:37:b3:42:21:2f:
38:aa:24:74:3d:68:c0:e7:ed:db:1b:65:cc:84:a1:60:22:ef:
28:e7:5f:35:2f:09:8a:30:e4:65:c8:21:bb:77:e1:cc:6c:18:
24:75:bc:7f:d6:30:63:89:41:b9:4f:16:18:6c:69:bc:42:89:
92:6e:da:60:ff:2b:46:44:75:13:fc:5f:d6:09:60:ba:32:c9:
7a:92:a1:e9:61:f8:aa:90:04:66:44:8b:ce:69:4d:32:54:49:
5f:a0:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org