Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2890/kXJy3N6cbnrT52CKyLcISaUKuu4.roa
File: kXJy3N6cbnrT52CKyLcISaUKuu4.roa (raw, json)
Hash identifier: usam9UMorhn6IxjhxYHFtvGu/u0hk7AIHp2LReyehv8=
Subject key identifier: 91:72:72:DC:DE:9C:6E:7A:D3:E7:60:8A:C8:B7:08:49:A5:0A:BA:EE
Certificate issuer: /CN=400353880B478D5B972A1204CF0651DE295F8ECA
Certificate serial: 03
Authority key identifier: 40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/kXJy3N6cbnrT52CKyLcISaUKuu4.roa
Signing time: Wed 01 Jun 2022 07:07:58 +0000
ROA not before: Wed 01 Jun 2022 07:07:58 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 139021
IP address blocks: 103.139.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400353880B478D5B972A1204CF0651DE295F8ECA
Validity
Not Before: Jun 1 07:07:58 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=917272DCDE9C6E7AD3E7608AC8B70849A50ABAEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:ef:47:41:00:54:51:5b:c1:d7:79:14:01:
f6:cd:7f:c5:1c:a7:e7:65:0e:30:09:23:ba:a7:b2:
88:df:7d:14:c8:38:85:af:74:6f:22:30:61:af:2d:
ca:3d:7a:af:ee:65:7f:d1:ab:aa:70:53:52:5f:ca:
27:b6:30:2c:99:a7:4a:c0:43:70:32:3a:7f:81:a0:
60:2d:d1:10:da:d6:9a:ad:89:3d:53:57:fe:00:74:
5c:80:6a:73:f0:3b:af:ff:7c:f8:86:4b:9b:fb:77:
44:dc:67:8b:4b:54:f6:4d:ef:c9:1c:0c:61:be:a5:
6a:f5:c6:95:6d:7f:3d:33:6d:8c:2b:3b:24:4c:70:
15:5b:97:e8:9e:38:12:21:70:d2:01:73:4a:e2:52:
e4:9f:2c:1e:55:25:30:57:2d:56:ca:66:4e:29:ed:
64:86:8d:1b:67:c0:7b:aa:a8:ea:0c:73:61:56:52:
c2:40:15:0b:ce:29:57:13:fc:f8:2a:1c:3e:65:1d:
79:38:b3:55:2f:c8:10:e3:ae:76:01:d6:6d:4c:9a:
0d:5e:83:57:a5:ec:70:30:52:cf:b7:11:04:81:81:
44:82:f9:6c:f0:78:cf:8d:4b:fc:8b:c9:37:89:20:
74:3b:7c:2b:fa:b5:18:b8:b5:36:fd:8c:93:85:d4:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:72:72:DC:DE:9C:6E:7A:D3:E7:60:8A:C8:B7:08:49:A5:0A:BA:EE
X509v3 Authority Key Identifier:
keyid:40:03:53:88:0B:47:8D:5B:97:2A:12:04:CF:06:51:DE:29:5F:8E:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/QANTiAtHjVuXKhIEzwZR3ilfjso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QANTiAtHjVuXKhIEzwZR3ilfjso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/kXJy3N6cbnrT52CKyLcISaUKuu4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.2.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:6b:a8:cc:bc:07:aa:77:be:fd:55:26:d3:f2:05:2e:e3:42:
35:87:d5:18:92:69:1c:9e:81:40:3a:3d:36:78:0b:63:9d:7b:
a4:4b:b0:88:39:ce:5e:91:c0:22:5b:ae:a1:2a:cf:ad:b2:25:
ac:f5:38:05:7a:a3:1c:b6:36:ae:6a:ce:06:3b:a6:54:35:e9:
ad:b0:51:26:f8:52:28:74:ac:81:ce:9e:2a:3e:13:23:a7:fe:
42:dd:53:36:4c:71:b6:13:b7:e4:bc:28:fe:68:b3:6b:98:d2:
e8:f2:a1:04:20:64:f8:78:c2:8c:18:f3:c2:64:05:69:72:79:
c1:b8:eb:75:90:ec:c3:11:51:fd:09:c3:f6:cb:ae:7e:ca:b5:
62:ea:e5:d0:5b:aa:d1:32:a0:35:02:c3:0b:2d:80:5b:e0:dd:
1d:a8:44:70:93:88:d4:15:d1:c1:43:6f:2d:c6:c8:3d:18:c7:
e2:7b:dd:c6:ef:99:c8:aa:bb:20:2a:a7:6b:e3:3c:75:17:19:
74:02:cf:75:fa:a7:cc:b1:a5:aa:00:03:3f:60:dd:be:a0:88:
8a:2f:55:76:cb:62:55:a6:55:e6:45:7d:17:85:b6:fb:ab:9a:
8b:f1:32:d9:2b:50:22:fd:c7:87:ad:65:5d:15:ba:1e:bb:41:
81:98:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org