Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/xFRqaQYdApkeDUaXIMTJII26F1g.roa
File: xFRqaQYdApkeDUaXIMTJII26F1g.roa (raw, json)
Hash identifier: nFyU/TUF1+bYNSsudd1XQ2/RNBviLNBezPqi+YJQVNY=
Subject key identifier: C4:54:6A:69:06:1D:02:99:1E:0D:46:97:20:C4:C9:20:8D:BA:17:58
Certificate issuer: /CN=9582A072805FF48C74231BB432D95ADE2256B886
Certificate serial: 03
Authority key identifier: 95:82:A0:72:80:5F:F4:8C:74:23:1B:B4:32:D9:5A:DE:22:56:B8:86
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lYKgcoBf9Ix0Ixu0Mtla3iJWuIY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/xFRqaQYdApkeDUaXIMTJII26F1g.roa
Signing time: Wed 09 Jun 2021 19:59:35 +0000
ROA not before: Wed 09 Jun 2021 19:59:35 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 131482
IP address blocks: 103.116.120.0/22 maxlen: 24
103.116.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9582A072805FF48C74231BB432D95ADE2256B886
Validity
Not Before: Jun 9 19:59:35 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=C4546A69061D02991E0D469720C4C9208DBA1758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:d8:24:cc:61:be:1e:23:c1:45:3c:4d:15:
17:d9:6f:df:26:99:2a:74:a0:40:b9:fb:ed:72:38:
b5:ef:73:d6:46:6e:12:14:d4:f6:4b:df:1b:37:cb:
80:5e:b1:8b:5b:d4:5f:8f:5c:ef:d2:09:4e:08:30:
fb:91:00:d2:f3:a5:e1:dd:0b:39:8d:9f:96:a5:69:
93:fd:4e:5c:f0:09:d7:f4:51:dd:8b:3f:05:f0:a1:
56:75:1b:3a:4d:7e:5c:11:39:ec:f6:03:f1:78:81:
4f:99:68:f4:92:54:9b:41:52:97:82:8c:fc:49:63:
f0:a1:f0:5a:b4:cb:cc:d9:7a:b5:4e:73:3f:bc:bb:
50:6a:64:75:5c:1c:8b:8a:59:5c:a0:99:62:5c:2f:
4c:c0:81:86:85:dc:be:f2:05:e2:9f:c4:64:cf:23:
ed:c5:0e:4f:e4:ee:0d:6f:67:7e:5e:3d:d3:82:6b:
31:44:b9:b0:87:8d:01:70:ad:06:2f:06:a1:7f:86:
3e:04:a4:04:b0:7b:83:f3:6a:8d:77:f3:73:0b:29:
37:84:aa:23:a2:60:6f:f2:3c:4f:f3:c5:f2:58:9b:
df:ea:81:39:1e:5e:e7:08:e6:ea:ca:33:4e:0c:c7:
4a:06:6a:00:d4:ea:97:50:97:44:db:4b:42:b3:ac:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:54:6A:69:06:1D:02:99:1E:0D:46:97:20:C4:C9:20:8D:BA:17:58
X509v3 Authority Key Identifier:
keyid:95:82:A0:72:80:5F:F4:8C:74:23:1B:B4:32:D9:5A:DE:22:56:B8:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/lYKgcoBf9Ix0Ixu0Mtla3iJWuIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/lYKgcoBf9Ix0Ixu0Mtla3iJWuIY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/xFRqaQYdApkeDUaXIMTJII26F1g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.120.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:f1:b1:72:d6:1b:10:ea:32:04:e5:c2:b1:b8:c0:51:9b:76:
78:8c:81:d8:65:63:a5:5c:cf:40:f5:e6:75:cd:0b:85:01:b8:
3c:8e:ad:a8:6f:2c:c7:51:7f:bd:eb:56:ce:df:07:ca:22:92:
d8:6c:1d:0c:cc:d0:bb:77:82:73:4c:5e:cf:ed:79:26:ce:32:
ec:d6:c1:1d:6e:e4:ea:f2:78:1a:5a:1b:30:fe:12:0c:07:06:
48:4e:eb:fe:0b:71:ac:e5:91:24:ae:1a:6a:58:8d:74:1d:b2:
32:7c:6e:2b:e8:41:cd:50:2f:ce:70:ec:f7:1e:a7:2e:3b:35:
e2:d8:c2:47:2a:fa:e3:79:45:7b:2d:79:a3:4f:8b:de:5b:04:
cd:bc:a7:4d:d0:3b:7a:e5:43:46:49:f5:2e:9e:b5:7c:8f:db:
01:67:43:92:b7:d9:62:ff:6e:67:d6:6c:a5:4d:6d:ad:ca:f4:
a8:ec:c9:cd:c2:e2:9d:05:a9:84:2c:d2:b7:bd:cc:75:b7:ef:
24:df:a1:c2:37:51:7d:ec:24:51:ed:d2:4a:f2:e8:a0:fd:06:
b8:39:ea:69:ea:16:41:f5:b9:87:f6:6f:c7:3b:a5:1b:16:28:
e8:63:d7:45:91:6d:fa:9d:49:3d:29:89:25:98:0b:b2:f2:14:
b4:19:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org