Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2742/yODXsVYSAc0Ei255K_4FwHTpes4.roa
File: yODXsVYSAc0Ei255K_4FwHTpes4.roa (raw, json)
Hash identifier: HZobvK27IVveqAneZVbjF+iXD1C6c1+3LyHNjVtsemo=
Subject key identifier: C8:E0:D7:B1:56:12:01:CD:04:8B:6E:79:2B:FE:05:C0:74:E9:7A:CE
Certificate issuer: /CN=D6DD0B467EE8D75B15146628C991AC3140558F94
Certificate serial: 08E2
Authority key identifier: D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/yODXsVYSAc0Ei255K_4FwHTpes4.roa
Signing time: Tue 07 Jun 2022 02:12:03 +0000
ROA not before: Tue 07 Jun 2022 02:12:03 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 56005
IP address blocks: 103.22.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274 (0x8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6DD0B467EE8D75B15146628C991AC3140558F94
Validity
Not Before: Jun 7 02:12:03 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=C8E0D7B1561201CD048B6E792BFE05C074E97ACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:aa:0a:b3:d7:20:5f:94:d7:36:41:88:26:
3f:d7:cc:b1:6e:70:79:f4:b3:d5:b9:24:f7:f9:0a:
26:b3:53:fe:43:bb:30:6b:83:4d:4f:80:fb:77:95:
88:3a:fc:38:03:c0:83:00:de:0a:a2:3a:38:2b:d2:
a4:a7:4b:79:ed:51:2c:03:c0:dd:eb:a0:06:fc:dc:
9a:25:c7:aa:a5:16:ab:9c:0f:04:2d:8b:5d:3d:03:
4a:33:1b:f2:49:6e:a8:bb:e5:9f:2b:db:9a:d7:c2:
9d:38:c1:4e:98:45:22:62:f7:50:0b:48:f6:e0:7f:
ab:3d:d7:d7:f6:88:34:1b:b6:16:32:94:dc:b6:d8:
1f:eb:74:2b:7b:56:ca:0b:5d:9e:97:00:5d:80:4d:
19:b3:97:a0:a0:58:cb:b3:01:2c:96:76:43:f7:d5:
5a:a7:57:42:b5:10:aa:39:00:b4:36:6f:3c:f5:9e:
77:af:1f:42:fc:69:f2:17:32:ce:5c:95:3e:d2:56:
6d:66:dd:cb:2a:29:89:8b:e9:18:4b:95:3a:d3:5b:
0a:63:fb:4a:1c:45:6a:96:0a:08:dd:a2:60:66:ca:
34:bd:96:5f:f4:a0:e5:a7:44:82:b9:cc:67:10:b5:
9b:5f:48:ba:91:c1:ad:8c:e4:ca:fe:43:b9:60:2e:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E0:D7:B1:56:12:01:CD:04:8B:6E:79:2B:FE:05:C0:74:E9:7A:CE
X509v3 Authority Key Identifier:
keyid:D6:DD:0B:46:7E:E8:D7:5B:15:14:66:28:C9:91:AC:31:40:55:8F:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/1t0LRn7o11sVFGYoyZGsMUBVj5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1t0LRn7o11sVFGYoyZGsMUBVj5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2742/yODXsVYSAc0Ei255K_4FwHTpes4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.22.188.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7d:b9:62:71:1f:57:17:3d:87:49:dc:8f:b5:bd:9d:a6:d2:
8e:3a:d7:43:e7:2a:58:8e:22:e5:84:27:91:de:29:6e:66:b0:
3c:43:9f:a5:7b:87:26:1a:02:64:ad:4c:8e:ee:60:f1:57:06:
07:52:50:7b:3e:19:5c:16:e9:8e:d5:ae:54:74:0f:fe:b7:03:
5b:85:2f:9a:cb:b2:4f:df:7b:75:ae:f6:dd:36:41:62:7d:d0:
c8:a8:a2:b3:50:e8:e4:96:96:d5:07:de:53:42:9f:55:d4:21:
e8:9a:9b:a6:9d:b2:dc:2b:33:e6:ae:e1:f2:f8:bf:3a:74:33:
6e:b1:03:2d:e6:51:90:5e:01:62:48:b9:2f:81:f1:93:f5:1c:
49:58:ac:c5:3d:ba:86:c4:39:e8:4f:ba:fd:b2:f7:6b:cd:a6:
c5:64:00:5b:bb:2b:6e:7e:57:0f:f2:d3:62:38:ab:9b:5d:c8:
60:e7:8d:18:2e:c2:60:f6:c8:c7:30:8f:68:c0:a9:bc:68:00:
c3:6b:6d:70:ec:9b:8c:fe:ce:96:6b:62:14:f7:c5:b6:90:99:
3e:45:5d:44:83:3b:60:49:20:bc:f9:3e:17:58:ff:8c:a6:58:
84:e7:63:9a:20:fc:86:9c:64:68:66:64:c2:b2:12:07:c2:27:
84:04:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org