Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/FZBj5-aoXUwlr2Tx6XVRwLkjRzo.roa
File: FZBj5-aoXUwlr2Tx6XVRwLkjRzo.roa (raw, json)
Hash identifier: XNMBQ1Ze0pegL1HCrTN5P7yAanjgFLjywMsu2xiLmX0=
Subject key identifier: 15:90:63:E7:E6:A8:5D:4C:25:AF:64:F1:E9:75:51:C0:B9:23:47:3A
Certificate issuer: /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Certificate serial: 0913
Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/FZBj5-aoXUwlr2Tx6XVRwLkjRzo.roa
Signing time: Tue 07 Jun 2022 10:09:48 +0000
ROA not before: Tue 07 Jun 2022 10:09:48 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 131482
IP address blocks: 103.116.120.0/22 maxlen: 24
103.116.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Validity
Not Before: Jun 7 10:09:48 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=159063E7E6A85D4C25AF64F1E97551C0B923473A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:c2:6c:dd:a6:ca:1b:07:ca:fb:ae:84:7e:
b4:f5:60:e0:a8:84:b1:55:f5:4b:47:cb:32:21:45:
e5:8a:9a:ae:f1:f0:ce:c6:66:db:f7:09:86:e8:88:
47:9a:ba:a1:2b:bd:a1:d7:fe:a8:1d:83:d5:05:13:
b8:ee:7c:8b:f7:57:3a:93:55:ec:95:e0:23:3d:fb:
99:20:24:30:87:44:c8:3d:e6:91:eb:d1:cd:64:7b:
ff:c5:b9:df:ea:ab:e1:bc:a8:2c:87:f6:13:3c:f3:
70:94:ad:bd:00:0b:c8:fb:36:64:0a:cf:e2:45:12:
0a:fd:f4:91:35:19:0c:40:35:0c:fa:d3:6b:c9:30:
c6:6c:e5:5d:ef:ca:f5:a8:0f:34:e4:52:de:fb:65:
2b:da:69:cf:2b:ce:07:df:fd:dc:6e:2c:f6:19:ca:
5c:2a:a0:6c:e6:81:ef:d5:c8:37:eb:a1:95:fb:32:
28:96:30:5f:fb:13:48:01:8a:a5:7b:5a:af:db:26:
dc:be:28:c9:52:05:ae:e3:97:cf:22:50:5a:41:e1:
68:a1:92:05:be:65:6f:6c:9d:12:61:ca:61:73:3c:
4f:55:f6:5e:ce:cf:c0:57:a0:cd:60:86:86:2f:f9:
09:b8:da:25:bf:3d:ad:9f:05:be:de:16:21:37:13:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:90:63:E7:E6:A8:5D:4C:25:AF:64:F1:E9:75:51:C0:B9:23:47:3A
X509v3 Authority Key Identifier:
keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/FZBj5-aoXUwlr2Tx6XVRwLkjRzo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.120.0/22
Signature Algorithm: sha256WithRSAEncryption
60:8b:5d:78:0c:be:ac:ee:49:86:82:1c:a7:22:62:4e:a0:47:
58:78:b1:3b:90:3f:58:b9:71:66:5f:27:76:3d:84:3d:d8:c3:
65:aa:bb:c7:08:9f:06:13:ac:90:96:f6:26:95:9a:8c:d3:6b:
db:ee:8d:09:83:a2:05:50:64:92:8e:7f:4d:43:76:d1:86:5b:
d6:f6:1e:54:f7:a7:a4:e9:40:0a:f2:90:e3:53:18:cc:93:c6:
64:36:b9:a0:7e:96:1e:1e:48:6b:2c:24:b1:04:7c:b9:0a:1f:
ec:34:81:67:49:0a:ea:06:b3:33:49:b5:36:69:54:87:bd:cc:
b1:3e:7e:6e:3f:a9:96:2f:94:73:6a:34:b9:ea:ca:69:6a:4c:
ee:eb:d6:f3:c4:86:12:d4:69:1a:26:ff:f3:b1:d4:ac:25:0e:
45:da:b2:17:94:a2:de:97:60:e9:b4:56:ef:dd:e6:84:ef:7e:
7a:ec:c7:96:3e:ff:fd:75:6f:3e:df:8d:04:ce:7b:ac:a5:ef:
36:83:ba:09:ef:a4:74:56:c8:4a:6e:c5:27:88:f8:59:c4:7b:
3a:0f:4b:5f:ed:5a:ba:cb:e0:cb:01:8b:9b:1e:e2:48:25:f9:
54:3c:cd:2c:31:56:2e:48:12:78:3b:20:a0:42:b0:22:60:0a:
44:f1:11:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org