Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2841/rXFDEjEaNzQ6wtLZbHzpsv4-c68.roa
File: rXFDEjEaNzQ6wtLZbHzpsv4-c68.roa (raw, json)
Hash identifier: d4eMx4yvc7VWYSfFQATQgJZF8A/qFM4ch92wLHKbnDY=
Subject key identifier: AD:71:43:12:31:1A:37:34:3A:C2:D2:D9:6C:7C:E9:B2:FE:3E:73:AF
Certificate issuer: /CN=C2B0E0673B1FCC33E22CE9D3FFBC669A971CF19E
Certificate serial: 0639
Authority key identifier: C2:B0:E0:67:3B:1F:CC:33:E2:2C:E9:D3:FF:BC:66:9A:97:1C:F1:9E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/rXFDEjEaNzQ6wtLZbHzpsv4-c68.roa
Signing time: Wed 06 Apr 2022 16:44:43 +0000
ROA not before: Wed 06 Apr 2022 16:44:43 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 137571
IP address blocks: 103.126.101.0/24 maxlen: 24
103.126.102.0/24 maxlen: 24
103.126.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2B0E0673B1FCC33E22CE9D3FFBC669A971CF19E
Validity
Not Before: Apr 6 16:44:43 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=AD714312311A37343AC2D2D96C7CE9B2FE3E73AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:08:32:3a:6a:63:d1:16:f5:c6:5d:d1:8c:
11:92:c1:5c:e7:76:52:25:f8:6c:4b:4a:3f:26:ab:
70:b5:c2:c7:66:91:46:93:1e:f8:f5:05:84:7f:71:
89:47:8a:0d:47:12:e5:2d:b3:63:65:f3:11:9c:ed:
d2:7d:28:8c:cb:17:fd:ca:db:11:5c:7c:e8:1c:0f:
c7:f4:34:a2:88:65:6d:71:10:55:69:a8:a0:e9:73:
cd:16:d9:d0:e9:b4:74:24:43:e1:6a:ff:40:67:db:
28:42:f7:5c:c4:37:22:d9:aa:36:d9:50:02:50:9e:
a3:ec:30:1c:92:b8:49:3f:b3:5e:45:c3:86:31:64:
9e:6f:ac:f6:fb:61:a1:2b:b0:80:67:ea:43:b1:2d:
77:09:a7:db:33:55:fb:d7:26:d1:43:7b:a3:c1:96:
2a:e7:4d:07:f4:a5:55:76:2f:56:b8:4e:af:c4:0a:
83:fe:02:15:32:b9:ae:65:af:88:a6:1d:ec:69:20:
0f:c0:d1:97:ea:9c:b3:da:6d:c4:21:2c:68:35:df:
ee:5d:97:fd:e4:76:04:be:fd:3b:a1:75:75:de:28:
c8:2e:35:37:32:d7:27:b3:7a:79:cb:8d:6e:02:a7:
b9:24:57:2a:92:44:3e:6f:70:db:1f:29:6c:03:53:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:43:12:31:1A:37:34:3A:C2:D2:D9:6C:7C:E9:B2:FE:3E:73:AF
X509v3 Authority Key Identifier:
keyid:C2:B0:E0:67:3B:1F:CC:33:E2:2C:E9:D3:FF:BC:66:9A:97:1C:F1:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/rXFDEjEaNzQ6wtLZbHzpsv4-c68.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.101.0-103.126.103.255
Signature Algorithm: sha256WithRSAEncryption
89:7a:d9:ae:77:67:0d:6c:4b:fe:f6:56:ef:a7:09:77:da:68:
66:4f:b6:48:71:14:20:42:4f:ab:e5:51:53:8b:2d:18:7c:72:
39:95:5f:5c:c5:6b:d2:9b:63:9a:7d:e5:0f:79:26:00:20:86:
72:36:31:f8:bd:a2:b4:24:4c:5a:f4:20:d4:d9:5a:dd:00:f7:
34:a6:d1:18:5d:c7:d7:d9:a4:6d:8c:24:d3:20:9f:61:bd:90:
be:d7:a8:f0:3d:c4:0c:89:a2:5c:a0:15:ca:61:f9:39:0c:d0:
26:b6:77:89:cb:37:40:15:4b:23:8e:f2:12:c8:c7:71:8e:f6:
63:1f:aa:16:d1:6c:c6:44:07:ea:d1:14:5a:ab:f3:95:a9:79:
40:e6:01:d4:25:bd:dc:a9:81:ad:23:c9:e0:4c:0b:8f:c6:ce:
7f:04:b8:66:b7:cb:db:20:e0:65:6e:30:08:39:72:34:d6:98:
d3:3c:a2:87:5e:58:2f:6f:29:80:5b:86:f2:90:85:97:f0:e4:
d8:0f:fe:6b:0b:3a:72:20:24:cd:cf:a0:84:2a:f4:2e:e7:ab:
63:0b:91:84:a6:14:fc:d0:82:bd:40:4b:4c:d8:6b:89:e5:68:
3e:89:11:9d:07:86:1a:5c:9c:df:f2:70:ef:e6:8f:3e:64:f4:
de:00:c5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org