Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2742/R1CadH3oUhTAHhQGE6ChMHmTYpM.roa
File: R1CadH3oUhTAHhQGE6ChMHmTYpM.roa (raw, json)
Hash identifier: YySdw6U/p+WKyVV9WuQALnm6cAMqktXbRWbP2jdBUQ4=
Subject key identifier: 47:50:9A:74:7D:E8:52:14:C0:1E:14:06:13:A0:A1:30:79:93:62:93
Certificate issuer: /CN=AB551610BB1463A62C3984009548848F74F998F6
Certificate serial: 03
Authority key identifier: AB:55:16:10:BB:14:63:A6:2C:39:84:00:95:48:84:8F:74:F9:98:F6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q1UWELsUY6YsOYQAlUiEj3T5mPY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/R1CadH3oUhTAHhQGE6ChMHmTYpM.roa
Signing time: Sun 13 Jun 2021 19:31:00 +0000
ROA not before: Sun 13 Jun 2021 19:31:00 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 56005
IP address blocks: 103.22.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB551610BB1463A62C3984009548848F74F998F6
Validity
Not Before: Jun 13 19:31:00 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=47509A747DE85214C01E140613A0A13079936293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:42:aa:59:f3:99:df:03:97:65:25:a9:f5:9d:
62:30:f6:0a:a7:08:ea:ce:be:61:57:d0:02:7e:c9:
25:f4:6d:e5:0f:e9:37:ad:d9:77:59:77:db:26:f1:
67:99:3a:7d:5e:82:43:b8:9c:d2:da:5a:0a:79:fc:
60:06:cc:33:45:da:ab:f3:3a:0e:fa:3a:3e:65:ab:
e7:27:a0:e6:1a:da:af:3a:2b:77:a9:48:d7:97:d6:
c3:56:bf:f2:ee:ea:21:fa:72:2e:80:2d:12:c9:26:
72:6f:d5:7f:96:28:3d:af:d6:52:60:91:f4:c4:97:
47:2a:7a:30:ec:62:41:56:a4:fd:9f:19:4f:29:84:
03:6d:a4:11:f8:cf:44:86:dc:07:86:bd:54:b6:41:
4c:76:8c:04:f1:67:22:42:ce:8a:25:71:7f:55:b9:
c2:0f:94:91:b3:80:4a:f8:4b:2e:58:c7:b0:9e:6e:
13:97:9e:17:dc:f0:52:10:a9:d7:2b:a6:d7:3d:b3:
d7:fe:54:d9:e7:f7:fe:0b:f1:63:3d:3a:d7:38:01:
fd:7b:b4:c7:3b:35:41:4f:66:0c:98:11:d7:d6:00:
e8:8b:49:2f:56:47:2b:e8:11:ce:98:96:65:b7:d6:
17:b2:9a:02:8d:3d:98:6e:df:fc:a2:14:6d:bd:1f:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:50:9A:74:7D:E8:52:14:C0:1E:14:06:13:A0:A1:30:79:93:62:93
X509v3 Authority Key Identifier:
keyid:AB:55:16:10:BB:14:63:A6:2C:39:84:00:95:48:84:8F:74:F9:98:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/q1UWELsUY6YsOYQAlUiEj3T5mPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/q1UWELsUY6YsOYQAlUiEj3T5mPY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/R1CadH3oUhTAHhQGE6ChMHmTYpM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.22.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7c:33:65:da:19:c2:02:06:36:22:d7:90:43:e9:88:bc:28:
38:46:99:0b:86:77:b7:68:0d:d8:7f:ac:7d:3a:c9:40:a9:1f:
75:04:7f:29:35:de:b9:8d:4e:70:39:32:e0:82:60:b4:8e:91:
4e:43:ef:b1:19:db:94:7f:25:b3:a3:80:52:89:97:2c:79:11:
72:83:e0:94:ce:3b:2f:3c:36:8e:0c:f6:bd:c7:0d:8e:18:9d:
4a:c4:aa:06:6e:3c:87:b0:49:52:49:50:a2:f9:99:ca:de:74:
02:d0:a5:11:c1:cf:fd:43:67:49:2d:a0:dd:07:ae:41:8b:d9:
5d:d0:77:75:63:64:76:f3:2b:eb:1f:15:bd:72:bc:0e:51:79:
5d:be:68:26:5d:42:ba:11:ae:49:f5:ca:88:8e:63:5d:81:d3:
b5:1f:9f:7c:f4:d5:d3:ec:a0:df:7b:ee:fc:1f:f8:97:f8:af:
a5:2f:81:6e:25:ee:7f:98:5c:47:3b:ef:a1:88:61:c2:33:ae:
c1:eb:f6:11:88:25:32:7e:14:ed:6a:91:ef:39:b2:0d:91:4d:
32:d1:7c:40:3d:6d:e9:02:b5:c4:a8:d2:00:69:11:a1:55:df:
73:6a:36:ea:6e:58:f5:4e:92:5a:6f:fe:fc:5b:1a:7d:e9:eb:
e6:0b:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org