Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2816/cqNxiTaSeLTeOnLxfHmEF2ipC_0.roa
File: cqNxiTaSeLTeOnLxfHmEF2ipC_0.roa (raw, json)
Hash identifier: esdPSyKjrc3cdlwJWTJMyFVbYYg+O3LBqfNCp9W9y+E=
Subject key identifier: 72:A3:71:89:36:92:78:B4:DE:3A:72:F1:7C:79:84:17:68:A9:0B:FD
Certificate issuer: /CN=8C0628B1BE536566909CD46563CB4256FAA85986
Certificate serial: 03
Authority key identifier: 8C:06:28:B1:BE:53:65:66:90:9C:D4:65:63:CB:42:56:FA:A8:59:86
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jAYosb5TZWaQnNRlY8tCVvqoWYY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/cqNxiTaSeLTeOnLxfHmEF2ipC_0.roa
Signing time: Thu 27 May 2021 05:06:07 +0000
ROA not before: Thu 27 May 2021 05:06:07 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 137768
IP address blocks: 103.131.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C0628B1BE536566909CD46563CB4256FAA85986
Validity
Not Before: May 27 05:06:07 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=72A37189369278B4DE3A72F17C79841768A90BFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:1b:bb:60:15:80:37:1a:3d:aa:ed:4b:fc:
8c:1b:fe:b6:74:d5:a4:7c:59:c1:18:c4:6f:51:10:
a1:b5:a4:b2:90:c5:81:65:77:4f:30:aa:e9:e9:88:
20:59:24:6c:0a:48:b3:82:78:ee:d3:15:3b:45:51:
99:af:9c:c3:b3:5b:bd:08:72:03:3b:63:fb:c6:ea:
51:c7:82:75:5e:5e:72:83:51:c7:f9:eb:a0:42:3a:
8c:51:6d:76:4c:ea:d3:74:d8:03:01:f0:09:82:16:
15:d9:ee:78:b9:12:6e:c3:00:29:17:a4:dc:22:8b:
39:75:9a:9c:11:f7:2c:a7:4f:20:0b:98:a0:b1:1d:
d8:3b:4c:e8:39:89:d5:d4:81:8c:9c:99:13:b1:c3:
f8:8e:22:48:40:5b:88:a8:ee:48:5f:bb:95:e7:f7:
b8:5d:07:64:0c:a0:83:b1:36:c3:55:c3:bd:d0:ff:
9e:e2:20:94:b6:1e:0a:28:25:e1:8f:26:06:f7:51:
a2:55:5a:95:c8:aa:22:62:40:9d:34:cd:50:9a:b2:
52:0e:51:a4:76:95:e4:ff:08:f2:47:01:1b:16:1b:
36:f4:af:7d:e3:1f:1c:55:99:a1:17:16:cd:de:4d:
b8:88:1c:7c:46:bf:bd:55:21:98:d8:48:b4:ae:48:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:71:89:36:92:78:B4:DE:3A:72:F1:7C:79:84:17:68:A9:0B:FD
X509v3 Authority Key Identifier:
keyid:8C:06:28:B1:BE:53:65:66:90:9C:D4:65:63:CB:42:56:FA:A8:59:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/jAYosb5TZWaQnNRlY8tCVvqoWYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jAYosb5TZWaQnNRlY8tCVvqoWYY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2816/cqNxiTaSeLTeOnLxfHmEF2ipC_0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.36.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a8:03:4f:49:49:59:0a:ba:52:07:a6:12:15:96:9d:e2:14:
6f:42:6f:f9:f0:b7:a7:cb:62:c2:98:88:87:17:f9:c9:20:4d:
e7:d6:43:ba:b5:14:3d:de:71:02:ef:5e:34:bc:5b:d3:9c:93:
de:13:b1:f3:e8:8c:2a:b7:c0:85:35:30:73:c5:71:0c:18:29:
fa:3a:fa:df:74:fd:0c:fb:49:41:c2:79:7b:e8:97:b1:2a:91:
d5:1e:9c:d0:0e:35:f5:ef:7c:26:b3:12:6e:2f:7d:bd:b0:19:
1a:c3:f4:f0:40:ad:d8:18:a7:9a:11:a2:ec:38:6a:0f:69:4e:
b3:b5:68:6b:38:58:e0:c9:a8:2d:61:1e:08:81:95:c1:2d:94:
ec:99:20:50:a1:db:38:84:04:a4:84:d7:b8:59:91:8e:31:b6:
7e:eb:2f:53:61:0c:bd:34:07:da:cf:58:88:a7:af:5f:44:e4:
4d:a0:75:dc:12:39:47:b2:2b:d4:54:54:e1:c8:b6:6c:aa:aa:
0b:ea:e8:e5:3d:cb:20:d2:5a:50:43:cf:45:44:06:19:85:5f:
27:2f:45:eb:65:c9:4b:88:36:f6:a6:6e:4d:5c:df:b7:0e:46:
a2:f5:33:fe:60:b8:74:51:b6:68:7d:67:e7:34:cf:ac:7b:30:
31:fd:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org