Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2903/IYd4Guz4z0hDG8ScTZSRg9C1NE8.roa
File: IYd4Guz4z0hDG8ScTZSRg9C1NE8.roa (raw, json)
Hash identifier: EQ1GcOxRxzJUnu2+2NUjXpucV7MqD8nnoCr0iBf7eGk=
Subject key identifier: 21:87:78:1A:EC:F8:CF:48:43:1B:C4:9C:4D:94:91:83:D0:B5:34:4F
Certificate issuer: /CN=193519DD773C40D04F641CC44558D3461297B003
Certificate serial: 0901
Authority key identifier: 19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/IYd4Guz4z0hDG8ScTZSRg9C1NE8.roa
Signing time: Tue 07 Jun 2022 02:17:17 +0000
ROA not before: Tue 07 Jun 2022 02:17:17 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 131482
IP address blocks: 103.108.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193519DD773C40D04F641CC44558D3461297B003
Validity
Not Before: Jun 7 02:17:17 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=2187781AECF8CF48431BC49C4D949183D0B5344F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:34:b5:7c:ad:e5:30:cd:d4:21:5a:ee:9f:
c5:ff:9d:b4:f3:5b:35:22:cf:6d:4c:05:4c:fc:0f:
19:61:10:06:d2:15:f2:41:27:a9:0a:2c:02:47:2d:
ea:1d:59:02:2d:64:2f:41:8b:f1:b2:14:08:12:5a:
bb:f4:2a:58:8c:28:1e:64:19:ad:5a:bd:de:47:7d:
1a:2a:56:e1:44:43:2b:cf:8f:03:b9:03:0f:d8:aa:
21:a1:62:2a:72:5c:78:1c:ed:51:6c:03:90:55:91:
06:02:ea:5b:cd:83:5b:11:b3:c2:17:81:f9:df:2c:
c0:c4:65:f1:de:10:c7:20:62:d6:a0:3e:7b:46:3e:
3f:3a:5d:e1:97:ff:e3:7d:a7:8a:f6:3e:39:f6:8c:
4c:9f:b1:a0:fe:b5:bf:af:a8:a7:82:48:8b:1f:16:
cc:a7:c1:5f:b6:9e:1e:1f:7a:d1:69:c2:63:ce:3a:
42:19:69:16:db:6b:e5:c1:98:9e:fc:94:dc:69:cd:
70:a2:10:d9:ff:5c:d7:2d:27:6d:96:1c:ae:f9:88:
a6:5a:12:4d:d3:4f:bf:b6:d9:57:e0:ec:f0:35:72:
e4:c4:e9:8a:f9:5b:74:c0:8d:75:f2:56:05:f9:65:
9e:67:9f:4b:60:0d:34:07:79:3f:70:12:b6:51:d2:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:87:78:1A:EC:F8:CF:48:43:1B:C4:9C:4D:94:91:83:D0:B5:34:4F
X509v3 Authority Key Identifier:
keyid:19:35:19:DD:77:3C:40:D0:4F:64:1C:C4:45:58:D3:46:12:97:B0:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GTUZ3Xc8QNBPZBzERVjTRhKXsAM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/IYd4Guz4z0hDG8ScTZSRg9C1NE8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.160.0/22
Signature Algorithm: sha256WithRSAEncryption
13:02:47:db:f3:d4:97:9a:ea:c6:f2:77:53:3c:d4:53:63:ec:
87:92:b5:70:ca:22:cb:f3:ae:53:99:d5:51:50:6e:5d:93:02:
51:d0:e5:71:9a:86:b7:53:5f:bd:c0:db:ad:e9:23:82:fe:87:
f3:dd:58:4a:92:94:3e:1b:f7:97:8c:9e:c7:34:9b:f3:76:44:
11:87:3f:76:6f:74:f8:c4:f2:42:0d:07:fa:8b:56:a9:9c:d8:
c4:c9:f8:54:ed:f9:d7:fa:7e:57:cd:34:64:51:45:ec:20:af:
3f:6a:22:91:cd:54:2b:30:78:3a:66:7c:6e:5f:40:29:9a:7e:
a3:dc:06:d9:53:7b:27:e9:6b:51:a1:60:00:f8:8f:78:8d:07:
c8:4c:61:d8:6b:6f:b0:77:c1:ef:ea:f5:81:55:a4:eb:61:7b:
05:b7:eb:d3:f3:bb:a1:ec:c0:4a:40:84:16:c2:df:c2:7e:bc:
52:84:b0:46:57:17:58:b4:41:71:db:b6:c0:95:21:b0:83:3e:
6a:09:98:86:49:1a:94:40:30:e7:50:93:a4:09:c7:53:23:32:
08:81:6f:5e:5e:de:c8:fa:2c:64:fe:69:36:2a:a5:28:94:ac:
00:26:65:e5:55:d1:a1:72:21:58:56:ca:52:ad:11:9f:f3:29:
06:e7:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org