Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2816/A7_ahVLrGb6AbQvELGbS1Wl0fug.roa
File: A7_ahVLrGb6AbQvELGbS1Wl0fug.roa (raw, json)
Hash identifier: Z7XCSOuPYt1v+oUJDyLkBLI/H8xYTN2Th/RbTs8pNes=
Subject key identifier: 03:BF:DA:85:52:EB:19:BE:80:6D:0B:C4:2C:66:D2:D5:69:74:7E:E8
Certificate issuer: /CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA
Certificate serial: 03
Authority key identifier: 85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/A7_ahVLrGb6AbQvELGbS1Wl0fug.roa
Signing time: Wed 01 Jun 2022 07:09:08 +0000
ROA not before: Wed 01 Jun 2022 07:09:08 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 137768
IP address blocks: 103.131.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857BE9F90A5B737CA00E8E04B62C26E142D4A3BA
Validity
Not Before: Jun 1 07:09:08 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=03BFDA8552EB19BE806D0BC42C66D2D569747EE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:54:79:98:33:57:75:05:c5:ed:21:a7:52:
a3:6f:d7:ec:a4:15:a6:ab:b0:53:5d:c0:10:1d:fa:
7c:19:73:56:45:66:b0:9b:d8:d7:6a:12:92:8b:96:
1e:15:8e:b0:db:88:0c:f4:ed:89:d2:d1:0d:e2:83:
8f:2e:2e:d5:d4:4d:c2:44:f4:03:ad:76:fa:ac:65:
62:2f:6e:64:78:ee:df:1b:f6:53:06:cf:2b:80:d7:
8a:82:80:83:ee:84:3d:bf:d5:d9:bd:88:52:cd:a9:
53:d0:94:f9:62:f6:8b:7f:9d:34:72:7a:d4:03:a4:
9f:d5:46:74:99:a7:af:bd:e6:39:f9:45:e5:d1:4f:
be:cf:16:7b:1b:10:6f:14:66:be:b8:88:9b:84:e8:
0b:6c:02:70:ac:f0:e2:0a:8d:ab:1c:ce:31:29:1d:
69:fd:ff:ff:bb:ff:89:a8:21:71:ea:42:4e:84:2c:
7e:d3:95:a0:f2:b8:e5:94:ca:6b:74:14:53:6b:21:
97:40:17:0b:bd:04:e7:f8:40:87:d5:ce:51:ff:cc:
7d:17:bb:34:c7:3d:cf:1f:8e:33:d3:99:51:8a:a3:
c6:d0:9e:d8:f1:2f:dd:0a:17:82:3d:45:4f:6a:ff:
2c:a2:e8:13:68:17:bf:68:04:c9:74:44:aa:2f:99:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:DA:85:52:EB:19:BE:80:6D:0B:C4:2C:66:D2:D5:69:74:7E:E8
X509v3 Authority Key Identifier:
keyid:85:7B:E9:F9:0A:5B:73:7C:A0:0E:8E:04:B6:2C:26:E1:42:D4:A3:BA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hXvp-Qpbc3ygDo4Etiwm4ULUo7o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/A7_ahVLrGb6AbQvELGbS1Wl0fug.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.36.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:6b:c0:ef:32:63:fc:1e:84:b2:b7:33:e3:ca:2c:8f:87:58:
8b:50:1e:2c:e7:f6:8a:12:1c:dc:d9:95:0b:ba:6b:cc:33:03:
62:6e:3f:c7:a5:f3:b6:fa:83:a4:eb:f6:64:a5:c8:6a:c2:45:
df:4b:bf:30:26:3b:cb:1f:e3:fe:fe:c2:b4:86:6a:42:86:11:
32:5d:f8:9b:a6:86:92:2d:b9:27:40:3f:fe:5a:da:ac:31:df:
ed:fb:97:74:0c:c6:7f:72:0d:86:09:17:e7:83:b7:97:98:02:
89:ae:b0:eb:c1:0e:ce:75:18:4c:2e:c6:99:eb:5b:3d:6b:31:
c4:31:28:3d:dc:a6:e9:75:29:f9:99:93:e7:d2:60:d9:8a:cb:
7b:0b:dd:c2:ae:6c:dd:db:73:b0:9b:b9:fd:d1:9e:b3:d2:0e:
9a:a8:53:16:e9:52:cc:da:c4:f2:86:e0:86:0b:4f:fa:61:13:
2e:e2:66:1a:59:09:dc:34:3a:ec:b2:3c:f7:4e:56:85:bf:99:
76:14:8a:65:23:91:7b:33:06:c9:34:29:a5:3f:73:7b:f2:b3:
44:c6:5d:df:8d:d2:ab:0b:a6:7d:8f:6c:4c:b0:a8:aa:f3:c1:
88:47:18:ff:1c:cb:f6:8a:9d:84:f2:73:b5:73:ff:19:56:ca:
58:27:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org