Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2785/kOPctMd4BK575JqD6VY5eH_ZJGI.roa
File: kOPctMd4BK575JqD6VY5eH_ZJGI.roa (raw, json)
Hash identifier: x+40DHAhR6FkML+sPRx8R+nEwDi/FPiax67GnPG8bf4=
Subject key identifier: 90:E3:DC:B4:C7:78:04:AE:7B:E4:9A:83:E9:56:39:78:7F:D9:24:62
Certificate issuer: /CN=DEE08F5287F669313CE6990F117401B179848AE1
Certificate serial: 0943
Authority key identifier: DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/kOPctMd4BK575JqD6VY5eH_ZJGI.roa
Signing time: Tue 07 Jun 2022 02:10:20 +0000
ROA not before: Tue 07 Jun 2022 02:10:20 +0000
ROA not after: Tue 06 Jun 2023 03:43:24 +0000
asID: 137720
IP address blocks: 103.120.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2371 (0x943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEE08F5287F669313CE6990F117401B179848AE1
Validity
Not Before: Jun 7 02:10:20 2022 GMT
Not After : Jun 6 03:43:24 2023 GMT
Subject: CN=90E3DCB4C77804AE7BE49A83E95639787FD92462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:8b:d6:f9:8d:b8:bc:5f:c7:1d:37:a4:59:
bc:3c:ab:1e:c7:3f:80:bb:7b:a0:5a:63:d3:f2:ac:
32:6d:10:6c:b7:6d:45:77:11:2a:cc:59:7c:8c:4b:
10:c2:49:12:dc:c3:f6:58:31:cd:a5:a6:de:79:50:
31:3f:b3:ce:62:d2:a3:76:ed:7e:5c:95:c9:f4:52:
c8:c3:58:f4:e8:d8:3d:8b:f4:08:e5:14:4f:a4:8a:
85:44:25:37:bc:7d:db:b0:e2:9a:53:53:3d:0c:61:
75:00:ef:78:51:78:ae:6b:0d:ff:d2:81:61:29:9d:
d2:3a:21:b0:bf:9d:a0:d3:3a:db:61:a8:ed:59:48:
97:47:12:c4:f5:65:14:ae:66:4a:9f:60:e8:cf:cf:
9a:0c:8f:40:68:44:d5:f7:60:e5:39:9c:25:9f:20:
01:2b:fd:37:8d:75:fa:f1:67:aa:1e:b3:bc:b4:17:
2c:9f:93:34:4a:bd:63:31:56:a2:01:fe:be:78:a7:
0f:05:57:79:d7:2e:1a:b5:9c:bf:a8:95:e0:db:cb:
a2:8c:35:89:80:e9:93:7c:1b:a6:b7:01:88:2c:69:
1d:59:1c:8d:b2:01:d9:f6:85:10:9b:be:62:5c:20:
e7:e3:de:31:6f:16:f2:b0:e3:02:e5:a6:60:d5:71:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E3:DC:B4:C7:78:04:AE:7B:E4:9A:83:E9:56:39:78:7F:D9:24:62
X509v3 Authority Key Identifier:
keyid:DE:E0:8F:52:87:F6:69:31:3C:E6:99:0F:11:74:01:B1:79:84:8A:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/3uCPUof2aTE85pkPEXQBsXmEiuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3uCPUof2aTE85pkPEXQBsXmEiuE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/kOPctMd4BK575JqD6VY5eH_ZJGI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.96.0/24
Signature Algorithm: sha256WithRSAEncryption
29:10:1d:e4:15:4b:b5:87:a1:77:2c:0c:6d:4b:dd:a8:ac:0d:
e2:9c:56:ee:d1:40:89:2e:95:53:9c:67:fa:d8:6d:9b:3a:43:
b7:de:d5:3f:0b:a3:9b:92:c4:f3:c1:b0:2a:f4:06:be:03:56:
8a:71:b2:41:a0:b1:61:23:3f:84:dc:b0:9d:09:81:51:5c:22:
71:38:42:f0:1e:c2:f2:24:e5:2f:4b:3c:1d:31:06:71:7a:c5:
54:0e:e5:e9:22:f5:c2:ed:19:57:68:f3:9c:89:d5:f6:e6:7d:
e0:ac:71:9e:52:69:e9:3f:c5:74:79:9a:6b:e6:9c:aa:c4:c9:
48:04:e4:b5:31:a0:8b:5f:63:a6:b5:f8:d3:70:b1:ea:01:0c:
0b:a7:e2:b0:d5:57:ed:da:72:c3:35:29:d4:dd:2f:02:94:ce:
3e:1c:f1:29:f7:32:ff:f3:2c:58:bb:ce:51:0b:9c:22:cd:fb:
84:0e:16:21:39:63:aa:b9:5f:72:7c:26:97:e9:3c:71:4f:31:
04:33:68:d4:19:2a:dc:19:c1:40:56:07:3b:17:df:23:49:93:
5c:6d:24:22:ee:11:1e:3a:a6:f3:7c:22:1a:58:ba:43:f1:8d:
8a:b8:1b:c6:db:ca:9c:44:83:d7:e5:35:25:4e:25:54:e4:0e:
69:15:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org