Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2841/aTlSgPzBMQMm-HhARvxF9O6Mxi8.roa
File: aTlSgPzBMQMm-HhARvxF9O6Mxi8.roa (raw, json)
Hash identifier: LrzR5wqGBMrOFWFsk7qbrffTohzVXnSrVYnAQvu1taQ=
Subject key identifier: 69:39:52:80:FC:C1:31:03:26:F8:78:40:46:FC:45:F4:EE:8C:C6:2F
Certificate issuer: /CN=51A5666D323BF842F6044CE71059773E2271B013
Certificate serial: 0945
Authority key identifier: 51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/aTlSgPzBMQMm-HhARvxF9O6Mxi8.roa
Signing time: Tue 07 Jun 2022 02:09:12 +0000
ROA not before: Tue 07 Jun 2022 02:09:12 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 137571
IP address blocks: 103.126.101.0/24 maxlen: 24
103.126.102.0/24 maxlen: 24
103.126.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373 (0x945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51A5666D323BF842F6044CE71059773E2271B013
Validity
Not Before: Jun 7 02:09:12 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=69395280FCC1310326F8784046FC45F4EE8CC62F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a6:84:57:d6:02:4c:0d:73:45:c2:e3:2e:91:
8c:f9:d5:86:02:13:87:1f:9c:66:4d:12:8e:e4:ff:
3e:26:be:5d:51:35:62:e2:6d:48:5b:ca:07:22:d6:
b8:95:a0:37:18:f6:9e:cc:9f:d9:be:2e:44:b6:5a:
f4:f5:2d:ff:2a:05:e1:63:6d:0b:ec:41:44:bd:72:
35:f1:6d:b8:ca:68:d2:52:78:0a:5d:e1:70:85:4a:
3d:58:81:5b:9e:ef:f1:ab:e2:9f:01:25:66:e5:2f:
74:94:7f:f8:26:83:60:d7:4a:28:9e:c8:9c:b1:ea:
7a:41:82:96:7b:75:ed:71:57:4e:26:12:d6:0d:bf:
ba:6e:ee:10:90:8f:70:15:92:ef:a8:02:dc:87:a7:
1a:8f:be:fb:1a:51:b5:5f:83:29:e2:32:b6:82:23:
08:ed:3b:6a:5c:2e:30:7b:09:55:32:3f:62:56:e5:
10:0e:f7:6b:d9:e2:9b:61:54:89:30:d8:04:33:6f:
b3:65:b3:09:b2:89:55:46:bd:d4:d0:01:a3:ce:89:
09:07:be:38:40:a0:4e:f2:a5:22:e4:b0:b6:57:b0:
9c:af:e7:db:cc:7c:1f:1e:b2:2c:6f:45:14:7e:74:
64:e4:ca:9d:d4:20:c6:1e:0e:3b:c6:50:2a:6d:fc:
cd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:39:52:80:FC:C1:31:03:26:F8:78:40:46:FC:45:F4:EE:8C:C6:2F
X509v3 Authority Key Identifier:
keyid:51:A5:66:6D:32:3B:F8:42:F6:04:4C:E7:10:59:77:3E:22:71:B0:13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/UaVmbTI7-EL2BEznEFl3PiJxsBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UaVmbTI7-EL2BEznEFl3PiJxsBM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/aTlSgPzBMQMm-HhARvxF9O6Mxi8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.101.0-103.126.103.255
Signature Algorithm: sha256WithRSAEncryption
90:05:00:db:b0:09:05:1e:55:30:00:ba:e8:70:7c:3d:0e:a9:
4b:bb:a0:17:e9:b6:e3:9a:ad:c7:cc:6e:fa:5e:b5:c7:2c:1c:
69:64:18:17:48:d1:be:7c:e8:b1:c3:c7:de:51:7f:2d:eb:23:
78:ab:8e:89:40:50:df:1b:8b:05:78:14:aa:62:b7:27:4f:fc:
e6:79:90:bb:87:2f:a0:2f:6d:51:36:cd:75:2c:b1:81:7e:0c:
91:99:de:82:93:f9:15:72:b9:29:e4:6d:69:ea:c3:4e:b4:31:
90:c9:93:44:fb:88:d2:4c:0c:0f:31:25:d4:ef:c5:b5:55:af:
05:68:ca:b9:07:c8:55:bb:83:4c:df:80:3c:d6:a0:e6:11:a5:
c6:71:f8:c3:67:eb:ac:7f:6e:86:f0:10:2e:77:da:91:d3:69:
49:cd:ec:35:ea:76:ae:3f:87:c9:57:e5:91:d2:d2:59:3d:5c:
27:17:e8:30:46:7c:4c:04:9f:5f:22:ad:b5:a6:63:fd:b9:13:
e6:d6:29:d9:90:10:6a:6d:2c:56:48:19:25:21:5e:23:d2:4e:
99:56:51:83:61:f2:d0:fb:6a:94:77:75:14:33:f1:04:fa:f3:
3b:1a:19:aa:90:6f:c7:6a:b8:70:1d:4a:70:12:48:bd:6f:c5:
e8:90:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org