Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2802/rQB1BZ5vUzufMkaJdhwxTNkuDPY.roa
File: rQB1BZ5vUzufMkaJdhwxTNkuDPY.roa (raw, json)
Hash identifier: pw714zOIB/jgROvrZjvDYMhGF57UdBn9reL7qLbGAgI=
Subject key identifier: AD:00:75:05:9E:6F:53:3B:9F:32:46:89:76:1C:31:4C:D9:2E:0C:F6
Certificate issuer: /CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Certificate serial: 378B
Authority key identifier: FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/rQB1BZ5vUzufMkaJdhwxTNkuDPY.roa
Signing time: Tue 07 Jun 2022 02:13:01 +0000
ROA not before: Tue 07 Jun 2022 02:13:01 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 9392
IP address blocks: 103.122.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14219 (0x378b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFC0255DBE0663C1594BCEED37FA796BFDF3DD98
Validity
Not Before: Jun 7 02:13:01 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=AD0075059E6F533B9F324689761C314CD92E0CF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:69:d0:e8:6b:36:f6:49:e3:f2:6c:27:8f:
4a:e4:8a:cd:20:0d:ac:6f:ff:54:83:30:60:78:47:
31:88:aa:09:31:b8:1c:8f:95:c3:fd:33:bd:c2:20:
c9:71:7a:f1:9d:60:f0:ce:25:49:68:76:45:86:ea:
85:31:88:ba:5b:cf:03:f0:80:1a:da:47:d5:45:40:
fc:32:cf:91:23:61:6b:a1:f2:b7:4a:2d:66:dd:07:
55:9d:b7:35:b6:e6:8f:c5:e7:cd:4c:3c:6a:cc:ec:
c7:01:ed:2d:9f:6f:ce:09:1b:ea:75:af:5e:6f:a8:
88:b9:de:4f:28:c9:9e:37:33:17:12:20:3b:ec:45:
0d:4f:f6:39:50:d9:00:6a:63:41:c5:40:2c:b4:f0:
47:12:fa:83:d9:e8:c9:f4:04:ea:fd:15:18:46:68:
79:ae:22:a2:bd:c2:7b:86:44:dc:e8:48:da:b3:ec:
2c:e5:22:0d:0e:a6:cd:e3:de:4b:aa:f4:5a:64:64:
ce:bd:51:e4:b6:43:86:6d:b3:75:98:28:f8:63:54:
dc:10:bf:76:8c:bd:dc:bc:a6:45:fe:60:a0:86:0d:
e1:70:69:12:e0:fd:a5:e6:0e:47:99:6b:84:72:b8:
b9:bf:31:05:b7:14:24:9d:99:48:e7:a6:93:b0:5b:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:00:75:05:9E:6F:53:3B:9F:32:46:89:76:1C:31:4C:D9:2E:0C:F6
X509v3 Authority Key Identifier:
keyid:FF:C0:25:5D:BE:06:63:C1:59:4B:CE:ED:37:FA:79:6B:FD:F3:DD:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/_8AlXb4GY8FZS87tN_p5a_3z3Zg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_8AlXb4GY8FZS87tN_p5a_3z3Zg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/rQB1BZ5vUzufMkaJdhwxTNkuDPY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.240.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ff:7a:68:43:46:f3:d4:63:25:76:a3:4f:6c:74:0d:91:8e:
0b:77:8e:e9:8d:1a:e3:a4:84:f5:d8:24:5b:9f:4d:0c:77:c9:
73:97:c7:90:d8:6f:ef:d1:e5:a9:b0:8f:75:f7:ca:58:0d:ee:
b6:29:be:0c:4a:b7:68:94:1c:25:b7:96:01:16:d9:ac:db:11:
f9:3d:ba:d9:c4:68:18:9b:b5:76:a7:ed:db:99:06:1d:ec:b4:
3b:9e:c9:21:67:26:a5:07:19:62:d3:e6:8e:b3:08:b8:50:ad:
84:91:2a:1c:de:0b:5e:5b:60:8f:ae:de:29:a1:5a:5f:f7:78:
1b:d3:9a:2b:c3:a3:da:b2:e2:c3:b1:f9:ea:28:e5:1a:bc:19:
d8:7a:3c:21:12:95:8c:58:79:37:98:43:70:6a:6f:0a:74:c7:
80:b1:d6:30:7f:8b:94:ce:9e:12:9d:0d:d6:0e:24:13:62:2b:
f6:27:0c:6e:a9:f6:b0:bc:68:b7:a7:8d:9f:cc:08:fe:5b:53:
ad:b4:d7:c8:9a:cc:66:65:ec:a9:6c:b6:08:dc:1c:ef:e4:1d:
80:a3:20:58:34:a8:1d:53:5e:60:07:9f:40:3d:e4:23:0e:2c:
13:fa:a7:75:16:c6:8e:55:9f:cd:5c:e0:fb:bf:84:f2:76:ba:
36:29:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org