Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2776/7Z1yEaSxZ4w5H8d8FUU9o-aETps.roa
File: 7Z1yEaSxZ4w5H8d8FUU9o-aETps.roa (raw, json)
Hash identifier: NMjUsdmkL6ws/9a0b7lZfFzOiWug/+j1+dDNigo6H2Q=
Subject key identifier: ED:9D:72:11:A4:B1:67:8C:39:1F:C7:7C:15:45:3D:A3:E6:84:4E:9B
Certificate issuer: /CN=75CDE13C83CCF31AB75DDDBD3E40007DB9B136DB
Certificate serial: 022B
Authority key identifier: 75:CD:E1:3C:83:CC:F3:1A:B7:5D:DD:BD:3E:40:00:7D:B9:B1:36:DB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dc3hPIPM8xq3Xd29PkAAfbmxNts.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/7Z1yEaSxZ4w5H8d8FUU9o-aETps.roa
Signing time: Fri 16 Sep 2022 09:17:59 +0000
ROA not before: Fri 16 Sep 2022 09:17:59 +0000
ROA not after: Fri 09 Jun 2023 06:51:49 +0000
asID: 63566
IP address blocks: 103.252.248.0/24 maxlen: 24
118.194.59.0/24 maxlen: 24
122.11.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75CDE13C83CCF31AB75DDDBD3E40007DB9B136DB
Validity
Not Before: Sep 16 09:17:59 2022 GMT
Not After : Jun 9 06:51:49 2023 GMT
Subject: CN=ED9D7211A4B1678C391FC77C15453DA3E6844E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:7f:68:10:dd:b6:36:28:4c:86:78:85:4c:
17:80:fa:11:69:14:8b:9a:b4:b2:6e:5f:f6:08:59:
f4:4d:05:e8:1b:04:f6:53:48:11:83:76:c5:b7:f2:
bf:34:01:44:d0:ea:e1:da:fd:aa:f0:58:66:57:92:
50:f3:25:83:ed:ea:0c:10:fa:44:90:29:3d:37:f6:
57:79:24:40:77:d9:f7:f1:07:fc:2d:8e:60:2a:31:
64:1a:58:bb:71:93:ff:06:b2:cf:40:d8:2b:00:b5:
0e:0b:29:9b:d7:d4:60:c5:5f:cc:95:54:01:de:90:
e2:bd:3c:db:4e:7f:b8:51:2d:a5:7d:94:b8:25:c9:
2e:ca:d4:69:f6:93:27:42:71:d1:d0:81:03:c7:96:
f0:03:12:0d:bf:4c:ed:66:ea:d9:1d:e4:ef:ca:58:
28:82:4b:33:d8:89:6d:da:d4:12:29:1d:08:29:10:
62:36:bf:b9:46:05:c2:c7:22:70:5d:44:4a:7b:07:
97:d1:5f:cf:42:a1:69:61:1d:dc:bb:30:93:17:3e:
f0:ed:bb:e6:49:11:b9:01:ab:80:3f:b7:bc:b6:c2:
29:a8:d6:79:ae:e6:c1:5b:ef:a4:8f:9d:ff:73:c0:
2b:c8:38:dd:79:32:14:79:27:d3:ee:c1:db:68:ea:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:72:11:A4:B1:67:8C:39:1F:C7:7C:15:45:3D:A3:E6:84:4E:9B
X509v3 Authority Key Identifier:
keyid:75:CD:E1:3C:83:CC:F3:1A:B7:5D:DD:BD:3E:40:00:7D:B9:B1:36:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/dc3hPIPM8xq3Xd29PkAAfbmxNts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dc3hPIPM8xq3Xd29PkAAfbmxNts.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/7Z1yEaSxZ4w5H8d8FUU9o-aETps.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.248.0/24
118.194.59.0/24
122.11.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:fb:43:49:48:26:76:37:78:2e:5d:04:55:a6:fa:0e:91:e4:
64:31:37:8a:ea:0a:47:67:45:0d:b8:50:e3:46:bd:85:04:5e:
6a:52:1a:4b:95:be:98:60:e8:95:ee:82:9d:6e:e5:3b:f9:b6:
47:ae:d7:57:d8:7b:41:33:76:46:8c:a3:7f:29:17:85:8f:0e:
88:15:0b:66:8a:6a:82:64:57:24:7c:95:2c:95:ce:b4:68:71:
02:e2:fe:83:83:be:ef:8e:25:86:78:1a:e0:3e:7d:2f:31:c2:
9c:b9:d4:96:7d:c7:21:d5:77:42:b8:1f:0b:aa:9c:27:85:47:
a0:c2:42:7f:32:73:c0:af:3b:da:09:fa:62:dc:eb:f6:25:3f:
43:cf:93:96:17:2d:fa:4b:fc:fc:be:f8:73:4c:95:f2:cc:7e:
f8:df:59:fb:72:9d:9b:00:e2:0a:b6:9b:4d:90:eb:24:9b:f4:
bb:f0:65:cb:38:b1:a7:2d:a2:4b:a6:75:6b:e2:13:fd:38:cc:
97:17:6b:50:18:47:14:9b:64:8d:ff:e1:df:a2:26:04:a6:b9:
23:ea:e4:d9:c1:19:a8:d1:7c:4a:27:dd:bc:12:3b:a3:ac:ce:
3c:e1:77:4f:30:e1:c5:23:d8:c7:24:7e:7e:3b:8c:32:55:41:
06:31:c5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org