Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2841/0hhBWUA-bCgxjp5hps664HiUhiY.roa
File: 0hhBWUA-bCgxjp5hps664HiUhiY.roa (raw, json)
Hash identifier: xdYBiappP3v43ZVD2n8NUUDmNFUgsFpmNqDUfvlajGg=
Subject key identifier: D2:18:41:59:40:3E:6C:28:31:8E:9E:61:A6:CE:BA:E0:78:94:86:26
Certificate issuer: /CN=51A5666D323BF842F6044CE71059773E2271B013
Certificate serial: 0946
Authority key identifier: 51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/0hhBWUA-bCgxjp5hps664HiUhiY.roa
Signing time: Tue 07 Jun 2022 02:09:13 +0000
ROA not before: Tue 07 Jun 2022 02:09:13 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 54600
IP address blocks: 103.126.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374 (0x946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51A5666D323BF842F6044CE71059773E2271B013
Validity
Not Before: Jun 7 02:09:13 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=D2184159403E6C28318E9E61A6CEBAE078948626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:15:a5:88:cc:7e:7a:6e:54:48:0e:21:b2:
94:5c:31:d3:36:c1:ef:35:98:69:11:3d:da:16:ca:
53:1b:a2:02:1e:ee:5a:2f:75:48:60:d1:e1:bd:fc:
9e:8a:22:29:2c:ea:ff:35:d1:a9:19:ef:0d:c5:b4:
ed:d3:f7:8e:76:16:43:2f:88:f5:0b:1b:ec:99:03:
45:cb:b0:58:e3:0a:92:0c:8b:a6:4f:08:d5:57:2c:
69:cc:03:f6:87:98:20:49:a9:63:5c:2a:23:be:82:
0d:b6:ea:fd:55:f0:0c:6b:ac:a9:cd:2f:b6:31:14:
04:9c:9b:4a:36:bb:f2:24:0e:e7:e1:69:cf:a2:c5:
cc:d3:63:81:8e:39:a3:49:f3:df:da:57:40:54:52:
d4:dd:d3:17:1f:08:ba:cd:f1:75:3f:f3:59:d3:c2:
c1:75:c2:5a:d4:65:80:b5:de:04:ab:5f:2d:d4:99:
97:5f:43:44:dc:97:e0:5d:5e:20:9d:ed:fe:fb:c5:
20:58:09:0c:02:6e:ef:17:18:22:de:a2:16:22:16:
13:61:0a:4e:48:ee:b5:e5:b0:a0:79:9b:35:5c:a4:
5b:fb:cc:89:9a:c0:97:ce:be:84:72:f4:79:ad:78:
47:c5:7d:81:a6:82:ec:e9:21:2e:04:03:3c:4e:58:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:41:59:40:3E:6C:28:31:8E:9E:61:A6:CE:BA:E0:78:94:86:26
X509v3 Authority Key Identifier:
keyid:51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/0hhBWUA-bCgxjp5hps664HiUhiY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.100.0/22
Signature Algorithm: sha256WithRSAEncryption
11:e7:5b:94:4e:92:f6:42:22:fd:40:6f:ce:20:91:2b:c5:03:
a6:2b:e8:8e:a1:75:26:8a:81:79:b5:62:39:76:8e:1f:ae:60:
85:d6:d6:70:1d:c3:4f:1a:d3:37:57:8c:83:5a:35:01:e2:5a:
39:13:6d:f9:44:06:45:db:82:67:ba:a4:76:08:56:97:9b:40:
1f:3e:6e:6b:49:ef:2b:80:34:13:4b:af:ff:bf:0e:66:7a:29:
ec:4f:d2:d6:cf:84:2d:bb:be:81:43:31:c6:f3:cf:59:c7:09:
fa:a4:33:d4:5a:9e:9e:af:20:17:5a:b1:f9:ea:81:3b:fb:a8:
67:2c:a6:75:89:95:82:3d:c6:f3:06:be:c9:7a:8b:bf:7c:da:
ee:7b:aa:04:e9:b1:c5:10:13:17:2e:9e:23:cc:8f:99:75:29:
82:b2:ff:d2:e5:fc:6e:f8:27:72:51:60:dc:ba:08:77:e8:cc:
8a:b7:d8:eb:4d:37:c0:6d:85:fa:03:ea:c5:b9:13:5f:9d:70:
13:7e:50:7a:c7:17:fa:51:33:b6:52:99:08:de:6b:e5:54:ef:
a8:1f:99:fb:03:24:d5:2d:ee:4e:4c:dd:81:82:3b:24:b7:2d:
9c:ba:b0:1c:7e:39:a9:83:4d:05:46:12:e9:df:3c:b7:e6:fd:
60:b4:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org