Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/QxfSiE7c7aQzWf1aK_wNGHu4A7I.roa
File: QxfSiE7c7aQzWf1aK_wNGHu4A7I.roa (raw, json)
Hash identifier: GQQ/P/KFbW4vdw7W2Wn3LqQFn9bjYYtoDTGG1peRg50=
Subject key identifier: 43:17:D2:88:4E:DC:ED:A4:33:59:FD:5A:2B:FC:0D:18:7B:B8:03:B2
Certificate issuer: /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Certificate serial: 0915
Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/QxfSiE7c7aQzWf1aK_wNGHu4A7I.roa
Signing time: Tue 07 Jun 2022 10:09:48 +0000
ROA not before: Tue 07 Jun 2022 10:09:48 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 137797
IP address blocks: 103.116.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2325 (0x915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Validity
Not Before: Jun 7 10:09:48 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=4317D2884EDCEDA43359FD5A2BFC0D187BB803B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:cf:c8:2f:5e:28:76:62:0f:c3:41:0c:4f:
48:53:f2:35:6c:aa:3f:6c:cf:fc:e6:88:7e:19:11:
18:5f:20:93:7c:fd:2d:23:f2:83:b6:8e:45:c3:83:
ef:f8:04:07:62:63:f3:dc:be:c8:5e:87:e4:4a:45:
82:e7:ec:e2:e5:d9:2a:f3:13:3c:7d:98:bd:24:e1:
5a:d1:eb:21:f0:f5:fa:17:59:d3:e1:69:3b:99:3b:
7d:66:0f:28:09:2c:90:32:a3:a1:b5:3b:b0:77:7c:
b5:6e:61:b1:31:a1:9d:b1:71:54:97:93:55:a5:b6:
15:fc:a4:e9:f3:54:67:4e:5a:b8:05:b1:f4:39:4b:
4c:82:42:70:67:30:86:d2:80:85:04:bf:f4:38:62:
cd:49:0f:36:5c:84:9d:12:f2:28:82:43:e8:dd:bd:
7e:e1:8f:cb:d3:68:71:de:c3:e8:2a:c8:8a:e3:26:
63:29:39:69:58:2a:75:2d:b4:71:01:e8:18:20:51:
76:cf:d0:ef:15:89:37:d2:04:bd:98:59:b7:7e:ea:
eb:2d:8c:2e:75:df:95:b0:f6:b8:d4:9c:09:61:91:
e0:51:89:cb:15:6f:3c:ca:7f:49:46:5e:88:79:a6:
b8:2d:78:8e:ef:e2:2f:a6:b5:3b:57:ec:35:19:02:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:D2:88:4E:DC:ED:A4:33:59:FD:5A:2B:FC:0D:18:7B:B8:03:B2
X509v3 Authority Key Identifier:
keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/QxfSiE7c7aQzWf1aK_wNGHu4A7I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.120.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:30:b0:b5:56:3c:96:97:6e:ba:4c:f4:5b:9c:cb:47:1b:17:
eb:dc:fc:38:88:67:5b:b5:db:ac:f4:15:29:33:21:3b:70:1a:
e0:62:ae:99:7c:7b:c6:57:42:8b:cd:7f:ff:04:f9:d6:6b:f2:
4b:a6:a5:14:24:54:75:35:6c:e5:05:d1:0c:e3:76:fd:b1:b7:
e6:ea:c1:bd:12:7b:3d:cf:81:86:19:8d:43:dc:4c:bc:53:ae:
24:e9:d1:9b:1f:f8:34:89:f5:51:ab:77:1c:e5:d6:5a:a1:81:
1f:a8:35:8e:fd:91:35:0d:03:88:68:31:f0:e1:8d:a5:5e:f8:
b3:09:d0:fb:07:42:d1:4f:52:6f:b7:3a:0e:9b:13:e4:ee:10:
54:09:38:69:c4:21:70:e8:88:e9:40:d0:e0:6a:83:95:f0:42:
c0:60:46:72:17:dd:c8:30:ed:02:4d:c5:c5:de:91:15:14:2f:
36:fa:6b:33:32:f9:99:a1:ca:36:9c:90:c7:75:1f:91:03:f6:
8b:4c:5a:d9:85:7c:33:ad:ef:c7:78:c1:7d:0f:e5:ce:c1:6e:
62:5f:32:34:fe:78:6b:40:f8:65:b0:91:93:92:10:b0:e7:7d:
07:7d:f5:2d:04:50:2b:98:f4:0c:24:b7:73:a1:4e:b5:39:3b:
be:a0:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org