Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/Au66kc_Q5ckAeCVSdrDXlxl3w1k.roa
File: Au66kc_Q5ckAeCVSdrDXlxl3w1k.roa (raw, json)
Hash identifier: 6t9tlpCvDP7NVF1QgspQKxnpAYGb16SpAHWnk2eSxbA=
Subject key identifier: 02:EE:BA:91:CF:D0:E5:C9:00:78:25:52:76:B0:D7:97:19:77:C3:59
Certificate issuer: /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial: 0D89
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/Au66kc_Q5ckAeCVSdrDXlxl3w1k.roa
Signing time: Fri 13 Jan 2023 03:51:16 +0000
ROA not before: Fri 13 Jan 2023 03:51:16 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 139021
IP address blocks: 103.139.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3465 (0xd89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Validity
Not Before: Jan 13 03:51:16 2023 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=02EEBA91CFD0E5C90078255276B0D7971977C359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:ed:1f:77:55:db:a7:ab:c4:00:3a:58:1b:
06:da:2d:af:60:91:f3:85:6f:f2:ec:69:3a:3f:5b:
78:52:11:f4:1e:84:07:ff:c1:dd:ef:cd:e9:98:d2:
36:07:24:6c:a8:63:78:96:d3:c0:05:df:a9:31:56:
1e:8a:5e:7e:30:7c:ad:08:4a:a5:7b:d7:36:69:e5:
c9:8e:b3:9c:ba:72:00:2f:47:02:fc:10:17:a3:c1:
89:3a:2a:ac:b3:17:c4:e6:84:a0:9f:ee:21:c0:b0:
39:4f:6b:44:77:6f:b9:49:1f:e7:e6:2a:6a:5f:ee:
36:d7:9a:0d:1b:a2:66:8e:fd:a7:06:5b:95:94:e5:
11:53:ba:9c:86:49:a8:90:b7:7d:6f:7b:9b:f6:d1:
27:ef:c4:e5:1f:da:df:4c:d4:19:92:eb:6a:79:e2:
e5:ff:d2:51:48:3a:35:ca:e1:be:31:2b:de:d7:e4:
1b:9f:97:03:1a:ee:24:de:56:79:01:2c:53:fc:c9:
ea:93:21:b1:47:38:af:80:00:3b:22:96:57:5d:e9:
b0:45:e6:e8:02:72:ca:78:9e:4b:38:ce:3c:a6:9c:
7d:a4:6d:e7:cf:dc:41:88:e4:bd:a3:74:79:c2:88:
30:10:cc:52:b4:74:88:ba:7e:e3:27:7e:22:33:a2:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:BA:91:CF:D0:E5:C9:00:78:25:52:76:B0:D7:97:19:77:C3:59
X509v3 Authority Key Identifier:
keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/Au66kc_Q5ckAeCVSdrDXlxl3w1k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.0.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ff:05:31:d9:78:e5:15:4e:f8:c8:a2:27:de:ea:78:0d:34:
b1:37:d5:99:6a:1a:b3:72:6d:82:4c:b4:4c:51:07:07:6e:e7:
0a:d9:36:e5:9f:b6:d7:7d:b1:ba:8c:ef:33:9d:01:92:38:78:
fb:d0:3c:e1:7c:50:5e:c1:d8:6f:8f:e2:e0:8a:ff:66:5d:dc:
3a:22:47:90:3c:b6:5b:54:fc:43:23:d9:2d:af:d0:f7:98:2a:
4a:8b:04:23:5c:4b:e3:bc:26:35:96:6e:6d:77:6c:d9:cd:be:
b2:c0:96:d9:36:cc:be:44:04:a5:94:c8:0f:8a:e3:b0:80:02:
4d:7e:82:e9:82:c8:f7:17:ca:d0:34:34:a1:c4:74:19:48:5a:
a8:bb:99:d8:42:0c:c7:13:69:19:35:48:5c:69:cd:29:1c:65:
b1:3a:54:79:da:23:4b:3d:cc:9f:85:0e:bc:16:d8:2c:67:22:
29:ae:bf:13:04:9b:aa:b2:1f:b2:3c:1d:29:64:6c:29:b6:b1:
fc:65:7a:00:8a:d1:2b:98:77:0d:d3:cf:8a:34:42:80:3a:b8:
01:ac:df:53:30:42:8a:45:4a:8c:3a:82:cd:7c:f9:c7:d6:ed:
b3:4d:c3:ae:1a:8b:65:f4:9f:79:a3:fd:12:ef:c8:46:44:8f:
8b:19:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org