Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2890/o7GMFlWW7PjMiKz74PURV-_Il6g.roa
File: o7GMFlWW7PjMiKz74PURV-_Il6g.roa (raw, json)
Hash identifier: nK/9DQ3hHmygRBCOjDu8p7E/z2m//t1exaDOj3Jq2y0=
Subject key identifier: A3:B1:8C:16:55:96:EC:F8:CC:88:AC:FB:E0:F5:11:57:EF:C8:97:A8
Certificate issuer: /CN=508CA75D1992221D97CFC2005EF8CD161EC4E871
Certificate serial: 03
Authority key identifier: 50:8C:A7:5D:19:92:22:1D:97:CF:C2:00:5E:F8:CD:16:1E:C4:E8:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UIynXRmSIh2Xz8IAXvjNFh7E6HE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/o7GMFlWW7PjMiKz74PURV-_Il6g.roa
Signing time: Wed 09 Jun 2021 20:00:05 +0000
ROA not before: Wed 09 Jun 2021 20:00:05 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139021
IP address blocks: 103.139.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508CA75D1992221D97CFC2005EF8CD161EC4E871
Validity
Not Before: Jun 9 20:00:05 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A3B18C165596ECF8CC88ACFBE0F51157EFC897A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:e2:bf:66:aa:38:44:d3:cc:4f:26:39:67:
a1:af:4e:c2:5f:c8:cd:00:cd:5e:fc:d5:2c:9d:c7:
73:3f:e8:45:6b:ff:bb:4b:b0:90:1d:5c:8b:68:6a:
78:45:7e:44:c0:4f:d9:07:4a:55:54:4e:2b:17:a5:
65:ff:46:2f:6f:59:32:8e:df:98:8a:1f:13:1a:9c:
a5:81:70:7a:32:a7:cb:cd:86:59:30:03:76:e9:df:
6d:b5:7a:b2:8d:4e:25:0b:5b:fa:65:6f:41:9c:30:
e3:07:e8:db:7c:4b:ac:96:53:12:95:ff:c1:40:d0:
c6:1f:92:b8:37:88:b1:c6:84:6c:2b:b6:93:67:be:
19:c6:c9:9d:d7:6a:3d:2a:b9:61:06:b3:ee:c6:27:
71:44:8b:82:12:8a:61:ba:e5:83:09:29:bf:e7:94:
90:1b:73:0d:90:73:51:bb:5d:39:08:6b:d5:45:4b:
03:ab:27:03:e2:f3:26:59:db:b0:de:19:ec:b5:ac:
59:e3:ed:c7:73:9b:56:1f:a1:6b:21:49:47:38:91:
33:cc:4b:03:ac:2f:e4:12:a7:dc:d5:e0:88:60:60:
31:0a:07:d8:0a:7e:cc:82:d6:37:64:74:7b:3c:ed:
b3:7e:58:c3:62:55:c0:82:d8:2f:ef:ce:e9:72:f0:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B1:8C:16:55:96:EC:F8:CC:88:AC:FB:E0:F5:11:57:EF:C8:97:A8
X509v3 Authority Key Identifier:
keyid:50:8C:A7:5D:19:92:22:1D:97:CF:C2:00:5E:F8:CD:16:1E:C4:E8:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/UIynXRmSIh2Xz8IAXvjNFh7E6HE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/UIynXRmSIh2Xz8IAXvjNFh7E6HE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2890/o7GMFlWW7PjMiKz74PURV-_Il6g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.2.0/23
Signature Algorithm: sha256WithRSAEncryption
91:ef:cd:96:53:8d:4d:b6:e7:19:a3:8c:32:54:c7:fc:65:0e:
a5:4a:f9:05:35:c3:d5:8c:2a:c0:af:ca:66:6c:61:56:21:d8:
df:ac:2c:7b:6b:42:90:0b:23:8a:d9:4a:90:f2:20:94:4a:48:
f3:0d:0b:84:f3:cc:3e:8c:70:a4:4b:2b:fd:50:f7:89:fd:52:
da:43:18:ef:58:99:27:e5:02:58:10:81:47:1a:0c:35:f5:7d:
33:9f:3d:cf:eb:e4:28:d6:5e:b7:0c:38:ff:fb:ff:0d:84:b7:
19:05:c8:f3:79:26:b5:b9:fc:13:50:65:63:fb:27:6a:5b:5b:
06:62:11:49:ea:b3:e4:3c:e7:0f:aa:22:9d:95:ce:78:d5:9f:
0a:46:0b:10:6d:93:5f:56:91:5f:23:b7:27:64:9f:92:e5:68:
28:67:93:ac:07:0e:af:ed:6c:2c:ff:68:a5:b9:1b:66:6f:dc:
b4:d2:2c:c6:bb:1a:9b:33:cb:80:c4:99:aa:2b:31:80:21:7d:
ca:64:b2:09:44:61:7e:6d:51:76:8d:cc:74:1a:38:3e:d1:14:
b2:64:e6:27:3d:82:4e:03:b9:cb:68:84:95:ab:3d:0c:3e:80:
9a:81:03:a3:12:a9:36:01:7a:48:17:41:d4:4c:f8:6e:1c:50:
17:65:40:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org