Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2841/p3crR_QW3Cdk1lr1Jb88x7uzgaw.roa
File: p3crR_QW3Cdk1lr1Jb88x7uzgaw.roa (raw, json)
Hash identifier: 532rVtW1KYLRi13XLvMkUCQoyVhHaa1kdinX5TRFnSs=
Subject key identifier: A7:77:2B:47:F4:16:DC:27:64:D6:5A:F5:25:BF:3C:C7:BB:B3:81:AC
Certificate issuer: /CN=C2B0E0673B1FCC33E22CE9D3FFBC669A971CF19E
Certificate serial: 01A8
Authority key identifier: C2:B0:E0:67:3B:1F:CC:33:E2:2C:E9:D3:FF:BC:66:9A:97:1C:F1:9E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/p3crR_QW3Cdk1lr1Jb88x7uzgaw.roa
Signing time: Wed 18 Aug 2021 20:22:29 +0000
ROA not before: Wed 18 Aug 2021 20:22:29 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 137571
IP address blocks: 103.126.102.0/24 maxlen: 24
103.126.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2B0E0673B1FCC33E22CE9D3FFBC669A971CF19E
Validity
Not Before: Aug 18 20:22:29 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A7772B47F416DC2764D65AF525BF3CC7BBB381AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:c2:60:a5:c1:7a:f7:16:20:aa:8b:8b:27:
52:e2:1e:ae:de:8a:a7:dd:d0:70:32:9a:40:f6:96:
4c:8d:28:9b:46:22:28:58:43:e0:8d:92:65:0f:e0:
7e:72:ae:a0:3b:8c:78:18:13:46:d4:b8:57:f7:09:
6c:e9:e8:90:cf:6e:6d:8b:25:1e:54:4c:77:83:c9:
35:39:8c:e3:b8:8c:34:de:fa:af:ec:6f:d9:85:3e:
e1:52:25:8a:a9:2d:5c:b6:bc:4c:56:8d:6a:7b:f8:
9a:ee:f1:b2:0c:29:05:3e:92:d5:5f:3c:36:b1:5f:
1d:41:1c:39:18:5e:bc:87:52:85:5c:89:3e:f9:7d:
b3:f6:e0:96:23:63:73:8c:c2:44:10:fb:9f:5c:62:
4e:6a:8c:73:22:e7:62:d3:dc:d9:d3:f1:e0:b7:67:
d5:6a:64:48:d8:e5:3a:3e:26:82:ff:1a:12:51:65:
e1:7d:97:92:13:d0:46:13:54:94:37:4d:00:af:7e:
2f:f1:73:b0:c5:9b:6c:36:44:42:44:68:ce:8c:2d:
44:f3:4b:90:20:6f:11:54:ff:a1:3a:5e:70:68:0e:
57:b3:38:4c:49:7b:2f:81:68:e1:f9:ae:83:f2:c8:
af:54:68:8a:36:ef:52:1a:4a:8b:ed:70:f9:a6:b1:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:77:2B:47:F4:16:DC:27:64:D6:5A:F5:25:BF:3C:C7:BB:B3:81:AC
X509v3 Authority Key Identifier:
keyid:C2:B0:E0:67:3B:1F:CC:33:E2:2C:E9:D3:FF:BC:66:9A:97:1C:F1:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/p3crR_QW3Cdk1lr1Jb88x7uzgaw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.102.0/23
Signature Algorithm: sha256WithRSAEncryption
90:70:32:d6:68:58:ba:cd:2a:b5:fb:ff:c3:ea:c1:ee:74:1d:
b7:11:2d:72:72:38:31:be:18:dc:29:56:7e:d9:00:09:e0:14:
c7:de:c1:25:ef:19:d2:4e:12:9a:17:92:05:07:b6:0b:49:53:
54:97:05:f6:a1:24:1e:d1:54:bf:a9:80:f2:79:ca:bb:91:24:
b7:a1:eb:79:d8:db:18:0d:01:3c:91:e6:76:3f:e7:c6:80:cd:
a6:d6:1d:9d:bf:1f:03:98:2a:8f:4d:31:c6:8c:e9:88:c9:6e:
cd:96:51:b1:1d:45:66:c2:b2:73:15:07:87:5e:1f:fa:ac:26:
5b:55:9e:ae:5a:90:cb:83:d3:c3:56:16:fc:c5:ce:b1:7a:9a:
8c:94:13:e9:77:1f:df:16:0a:f6:3b:08:b0:1b:7d:1c:8f:fa:
f9:8d:72:ea:07:cb:42:54:11:5a:6a:f2:93:e6:90:80:00:2b:
f5:c2:48:c5:4b:12:3d:68:d1:d7:a8:4e:7d:16:66:c2:05:de:
6b:da:ee:d2:a5:f8:db:aa:54:44:ac:17:21:e9:23:0b:f0:c4:
2a:f1:f9:37:f0:2f:dd:f4:b0:0e:32:d4:ed:57:d0:8a:6b:81:
85:9e:03:fc:80:07:6f:03:8b:55:81:b6:77:2d:65:96:a3:15:
92:5c:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org