Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2903/rCuhLrnD6E7L2U-PSOWVjSh7a9o.roa
File: rCuhLrnD6E7L2U-PSOWVjSh7a9o.roa (raw, json)
Hash identifier: P1gjDjeWbMSDepbB4sxYnn/6qkTNd+OPz4iKkAHXB/k=
Subject key identifier: AC:2B:A1:2E:B9:C3:E8:4E:CB:D9:4F:8F:48:E5:95:8D:28:7B:6B:DA
Certificate issuer: /CN=2A24B1C2C6E9EF16FC56C164ACAE67D2477F0BEA
Certificate serial: 03
Authority key identifier: 2A:24:B1:C2:C6:E9:EF:16:FC:56:C1:64:AC:AE:67:D2:47:7F:0B:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KiSxwsbp7xb8VsFkrK5n0kd_C-o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/rCuhLrnD6E7L2U-PSOWVjSh7a9o.roa
Signing time: Mon 07 Jun 2021 19:59:06 +0000
ROA not before: Mon 07 Jun 2021 19:59:06 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 131482
IP address blocks: 103.108.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A24B1C2C6E9EF16FC56C164ACAE67D2477F0BEA
Validity
Not Before: Jun 7 19:59:06 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=AC2BA12EB9C3E84ECBD94F8F48E5958D287B6BDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:1b:25:1f:44:4a:cb:a3:91:2e:fb:d5:70:
91:3e:b0:96:88:2c:9f:55:52:d0:9a:d6:4e:1c:7c:
3c:17:b2:e6:f9:d2:22:32:f4:ca:0d:f3:e7:80:4b:
03:6d:10:35:00:bc:92:bc:c3:1f:d3:ef:5f:27:7d:
cd:b9:4b:52:2e:e9:d8:42:42:63:bb:2a:2a:25:64:
b2:f9:1a:69:ed:c1:04:79:a8:4f:cb:d5:06:70:eb:
7a:c0:5c:33:d5:cd:d5:93:6a:d8:e9:06:1b:65:2d:
26:f6:52:4d:7b:14:e9:ae:27:01:5c:95:05:46:44:
c1:95:59:7f:83:86:e9:2f:81:50:f0:b8:79:85:23:
cb:18:cc:02:e0:ea:e8:fb:65:7a:1f:34:b6:d3:6e:
55:b3:a4:91:16:0f:a5:63:33:c4:ee:75:da:f6:3d:
ae:8e:92:18:58:26:bd:3e:11:49:48:38:46:2e:4f:
43:92:df:0c:c0:02:dc:bd:30:60:b0:16:70:54:80:
a8:e3:1d:15:61:37:42:2a:9f:3d:7e:e7:4a:ee:b0:
31:30:5a:0e:c9:8f:cd:33:e4:4a:ec:5e:f8:32:8d:
e2:09:ec:f7:3e:a3:d0:81:76:c9:4d:47:87:21:90:
40:af:fa:3a:c5:35:25:52:01:58:e1:51:f5:da:a8:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2B:A1:2E:B9:C3:E8:4E:CB:D9:4F:8F:48:E5:95:8D:28:7B:6B:DA
X509v3 Authority Key Identifier:
keyid:2A:24:B1:C2:C6:E9:EF:16:FC:56:C1:64:AC:AE:67:D2:47:7F:0B:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/KiSxwsbp7xb8VsFkrK5n0kd_C-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KiSxwsbp7xb8VsFkrK5n0kd_C-o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2903/rCuhLrnD6E7L2U-PSOWVjSh7a9o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:3a:6d:69:52:61:bd:a9:7b:d7:c0:e9:77:ac:ad:58:ee:3f:
fe:0a:96:3b:a9:bd:82:21:10:63:0a:62:44:9b:b7:18:18:b2:
50:27:09:fa:f9:ed:6a:5e:bc:b2:62:74:8f:fc:da:84:dd:33:
fc:bb:3c:ca:d9:e5:72:5d:3d:f8:a9:17:9e:7a:e1:ea:7f:fb:
86:ec:aa:b9:c3:56:57:45:87:06:01:a2:10:e4:06:ba:ed:f0:
4f:61:ac:b7:a6:30:1f:f2:57:37:19:24:f8:db:92:9d:4a:a5:
94:99:86:8b:e5:28:02:16:8a:04:b8:14:83:66:ba:5d:c2:4c:
48:77:5c:9f:58:44:eb:79:13:f3:78:4b:cd:0d:84:b1:ee:6e:
82:40:05:7c:fc:84:cc:da:8e:d3:c4:7e:56:a4:b9:d0:e9:98:
16:16:8b:63:58:e8:dd:0e:61:9b:8d:e7:f1:2b:5a:e9:48:0f:
60:6a:30:c1:47:95:35:27:60:4b:4a:ec:22:ac:9e:cd:50:72:
6f:5c:23:c2:76:b8:42:67:87:56:3a:19:7e:70:28:53:c5:16:
7f:7c:5a:0c:97:63:8a:83:18:3c:8c:97:15:9b:7c:37:03:99:
65:35:47:5a:66:c8:c6:b0:f3:a5:4b:a9:24:fa:8c:e3:5f:cb:
48:76:75:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org