Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/E2Svd7XgM1iciS0XCfnDwHKkAhY.roa
File: E2Svd7XgM1iciS0XCfnDwHKkAhY.roa (raw, json)
Hash identifier: Oo5uklt5eUDyHE4voxNSVdZEImolabUU804HjnA0kPY=
Subject key identifier: 13:64:AF:77:B5:E0:33:58:9C:89:2D:17:09:F9:C3:C0:72:A4:02:16
Certificate issuer: /CN=8F7D6CAB7A76F3C1C8ED1D4F9237A1BC8FA88D49
Certificate serial: 03
Authority key identifier: 8F:7D:6C:AB:7A:76:F3:C1:C8:ED:1D:4F:92:37:A1:BC:8F:A8:8D:49
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j31sq3p288HI7R1PkjehvI-ojUk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/E2Svd7XgM1iciS0XCfnDwHKkAhY.roa
Signing time: Mon 07 Jun 2021 19:58:03 +0000
ROA not before: Mon 07 Jun 2021 19:58:03 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139021
IP address blocks: 103.139.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F7D6CAB7A76F3C1C8ED1D4F9237A1BC8FA88D49
Validity
Not Before: Jun 7 19:58:03 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=1364AF77B5E033589C892D1709F9C3C072A40216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:23:85:ee:fd:a0:cb:69:10:49:8e:e1:90:
ff:8e:24:c8:b6:eb:7a:03:68:6a:7e:5f:25:a7:e0:
95:55:bd:72:31:4e:64:75:d0:29:84:72:2a:5c:17:
6b:53:25:9f:57:96:18:9e:25:b6:bf:df:9b:20:78:
09:12:3d:51:b7:fd:2e:1e:93:d1:61:90:9d:12:11:
f3:2a:50:1d:41:67:53:56:66:30:07:e3:8d:8b:b4:
a1:58:ae:44:4b:01:af:48:c6:a2:cd:3f:fa:d5:8a:
25:6c:20:9e:46:76:e6:81:21:6d:fe:1e:21:29:c8:
b4:b0:2a:e4:9e:8b:c2:c1:4f:35:21:1b:57:30:23:
c0:36:18:73:cf:9f:40:5a:17:87:e3:05:27:e2:d1:
eb:1b:1b:6b:6a:a4:db:b5:4a:91:4c:3c:87:fc:4e:
9f:bd:0c:f2:60:dc:b4:ea:ab:36:ef:87:1f:0b:6c:
65:5e:59:02:bb:1a:fd:81:79:ad:a0:51:5b:c3:fd:
9d:81:4a:12:69:19:32:b9:14:8b:73:df:2f:74:a8:
1a:95:46:d5:4b:f0:7a:3a:55:5a:1f:05:4b:41:aa:
0e:b5:a9:3e:31:d0:a7:d3:01:75:51:42:d4:f5:44:
b0:ec:34:2c:35:87:3e:6b:a8:e6:60:41:19:4b:af:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:64:AF:77:B5:E0:33:58:9C:89:2D:17:09:F9:C3:C0:72:A4:02:16
X509v3 Authority Key Identifier:
keyid:8F:7D:6C:AB:7A:76:F3:C1:C8:ED:1D:4F:92:37:A1:BC:8F:A8:8D:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/j31sq3p288HI7R1PkjehvI-ojUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/j31sq3p288HI7R1PkjehvI-ojUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/E2Svd7XgM1iciS0XCfnDwHKkAhY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.0.0/23
Signature Algorithm: sha256WithRSAEncryption
09:84:3f:b0:69:9c:76:40:1b:34:f8:64:13:dd:a9:2b:6d:17:
52:7a:99:a9:42:12:02:c3:6d:a9:07:04:bc:01:f7:be:77:b3:
82:e3:c9:5e:1a:53:0a:4f:94:8d:d6:c6:0e:4f:e0:61:81:12:
59:d5:7c:22:f8:be:98:9e:bd:f3:27:80:fa:4e:f1:5b:ff:d5:
f3:ae:e1:f3:40:38:96:7b:b4:57:17:eb:a6:c5:da:da:f4:8b:
e8:ed:82:16:72:cb:0b:8c:78:23:cb:e3:cb:b2:f5:3b:6a:1a:
cf:00:fe:b0:ca:ab:0c:2d:20:0b:07:45:fb:27:3b:37:34:9c:
b5:fc:3f:1c:51:9b:77:b7:7d:51:a4:e4:b4:71:f6:82:6d:03:
67:a0:a6:ff:fd:45:10:23:75:c2:c2:37:d0:1a:31:6c:2e:2e:
ba:c4:55:b7:6d:6b:e1:28:93:52:93:56:ac:46:f1:a4:27:ea:
87:9f:40:69:a2:35:56:29:cd:54:84:78:f5:80:34:1a:98:4d:
7e:ce:7e:bb:d3:70:ef:a0:33:d4:5a:df:04:0d:f7:31:7a:2d:
be:a8:3a:71:d8:79:55:da:e5:5e:05:61:6f:2a:77:81:f1:e5:
ae:b0:06:c3:f4:c6:a9:fb:6e:33:f0:21:87:fa:4b:46:d5:07:
91:79:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org