Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2779/AFoYC7kS3mkPZ4TZOMri9d8Q92s.roa
File: AFoYC7kS3mkPZ4TZOMri9d8Q92s.roa (raw, json)
Hash identifier: RhtrWaM5L9cxUiirKuLP/Y3MLDSbLl8+5grxpHqUc6k=
Subject key identifier: 00:5A:18:0B:B9:12:DE:69:0F:67:84:D9:38:CA:E2:F5:DF:10:F7:6B
Certificate issuer: /CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
Certificate serial: 0BDA
Authority key identifier: 1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/AFoYC7kS3mkPZ4TZOMri9d8Q92s.roa
Signing time: Mon 14 Aug 2023 04:34:20 +0000
ROA not before: Mon 14 Aug 2023 04:34:20 +0000
ROA not after: Sat 10 Aug 2024 07:41:13 +0000
asID: 21859
IP address blocks: 103.119.28.0/24 maxlen: 24
103.119.29.0/24 maxlen: 24
103.119.30.0/24 maxlen: 24
103.119.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3034 (0xbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
Validity
Not Before: Aug 14 04:34:20 2023 GMT
Not After : Aug 10 07:41:13 2024 GMT
Subject: CN=005A180BB912DE690F6784D938CAE2F5DF10F76B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3b:69:44:6d:45:29:1e:8d:09:85:03:99:49:
1f:37:08:2b:b6:7f:ce:10:af:52:4b:b1:c1:0d:59:
13:5f:a4:ed:93:09:57:80:56:69:2f:bd:94:c0:97:
f1:cd:50:5e:68:7b:74:c8:2c:5c:50:aa:51:cb:51:
18:be:c5:c0:52:99:5b:c7:1d:40:ef:22:45:a9:9c:
a7:a0:7f:45:2d:8f:98:87:c8:4d:40:82:54:45:72:
23:ca:54:84:1a:ca:08:2f:9f:68:84:a8:46:1c:c3:
ec:ff:13:33:40:d3:aa:1d:43:62:fa:26:65:36:a7:
a2:d3:4f:6f:3f:3d:21:a5:0f:2d:4f:f3:b7:a4:33:
76:3f:96:6e:e4:e6:e6:db:80:e8:82:0d:27:2d:28:
0b:0b:ce:26:7c:9b:cd:55:ac:99:3d:99:a6:46:75:
8d:bc:02:ec:22:5e:05:ba:11:57:0c:cd:90:b0:4c:
b0:b8:98:c4:30:9b:b9:3c:bd:f2:a6:89:93:b8:90:
dc:6b:36:24:4c:08:3b:79:bd:47:dd:eb:e5:9e:af:
a4:6c:4d:25:9e:4d:67:1f:66:82:6d:ef:bd:bb:cf:
96:24:94:89:64:92:fd:bd:27:69:36:b1:b9:35:a9:
7d:25:cb:c7:65:12:12:b4:33:b3:c8:b0:99:d4:ae:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:18:0B:B9:12:DE:69:0F:67:84:D9:38:CA:E2:F5:DF:10:F7:6B
X509v3 Authority Key Identifier:
keyid:1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/AFoYC7kS3mkPZ4TZOMri9d8Q92s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.119.28.0/22
Signature Algorithm: sha256WithRSAEncryption
10:fe:a9:61:85:a7:6a:12:ed:4e:a4:8f:79:0b:0f:38:c5:2a:
2a:cf:df:5b:df:ea:b7:b3:20:ef:e9:e4:9c:c9:69:4a:92:c6:
2d:ad:dd:75:69:3b:b1:d3:e6:21:c4:ac:6a:c0:15:e9:c9:4f:
f2:51:cc:ce:08:f0:d6:92:0e:78:b3:57:5a:62:41:ec:66:09:
7c:5a:f5:61:9b:7c:a3:13:92:48:c3:3f:8c:4d:36:67:05:40:
8b:7f:b9:8c:f8:32:29:25:4f:5f:fa:11:32:79:52:fc:d6:3f:
1d:77:c0:ea:4d:5a:ce:e9:79:92:91:33:14:32:51:fe:d5:8f:
c9:91:30:11:73:8a:aa:ec:c1:46:d2:8d:6b:11:4f:4b:73:04:
44:81:a4:d5:87:9c:25:1a:86:69:6d:88:0f:ce:3f:eb:b7:0a:
68:a0:01:64:a4:38:40:5c:15:d2:18:37:e7:d0:c0:99:21:c5:
1f:f7:14:ed:0d:6a:93:0d:3c:e0:5c:ad:e8:c9:49:1e:0b:df:
ef:eb:70:86:3a:92:09:27:b7:cb:c2:4e:4b:5f:50:91:2c:27:
8c:c6:83:96:67:bc:95:64:a7:5d:a6:02:f1:0d:f1:ab:f9:09:
9c:43:e0:c1:bc:0b:40:11:b0:43:e3:65:ea:f4:c1:86:08:ca:
f4:da:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 08:02:23 2024 by rpki-client on console-ams.rpki-client.org