Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2930/I3bcVu0MdD-0efT8k8cZ8pNDg0U.roa
File: I3bcVu0MdD-0efT8k8cZ8pNDg0U.roa (raw, json)
Hash identifier: vdzFomLneH08slXKnRgd9w+EfH8JPg2krDe63z03okg=
Subject key identifier: 23:76:DC:56:ED:0C:74:3F:B4:79:F4:FC:93:C7:19:F2:93:43:83:45
Certificate issuer: /CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
Certificate serial: 139C
Authority key identifier: B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/I3bcVu0MdD-0efT8k8cZ8pNDg0U.roa
Signing time: Fri 19 May 2023 05:55:26 +0000
ROA not before: Fri 19 May 2023 05:55:26 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 398704
IP address blocks: 103.143.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5020 (0x139c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
Validity
Not Before: May 19 05:55:26 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=2376DC56ED0C743FB479F4FC93C719F293438345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:ce:f2:24:6d:eb:fc:d9:11:dd:8b:38:a3:
43:64:e7:29:ea:41:55:d8:e8:c5:73:4c:f7:fb:62:
a3:06:1e:bf:d6:f8:3a:0f:20:33:c3:f1:f5:f4:89:
26:cb:c6:85:31:6a:d8:15:32:32:76:6d:ca:85:9f:
f3:6a:ff:c0:f1:ac:51:69:d7:bb:ad:de:8a:16:e6:
50:7f:33:f6:7d:31:bb:8b:92:cf:f6:42:dd:f5:8d:
9c:1f:c6:09:67:61:ee:36:28:e7:ca:05:4b:c7:bb:
71:e1:94:38:fa:8a:e1:fd:80:35:84:a5:cb:5e:bc:
af:1e:41:d8:0f:db:fb:aa:17:67:03:2c:44:3e:72:
80:db:1c:e6:93:a5:43:ca:d0:95:7e:6b:6f:24:5b:
9e:93:b5:1a:97:9c:74:3d:96:82:4b:aa:0c:61:d2:
b5:67:41:7f:ec:9c:38:52:fc:e6:2a:67:5f:c5:50:
07:e5:ee:88:6a:6e:c0:d0:6d:cd:f2:90:94:19:6c:
5a:f7:e4:3b:c2:4a:56:7f:ee:27:87:8e:34:d4:fe:
a1:78:bd:4f:6d:55:46:f6:01:fd:08:2e:dd:6d:c0:
11:ab:38:1a:73:4e:6a:0a:08:a2:e1:a4:24:84:2f:
ff:95:22:a2:23:81:b6:ac:b3:68:ac:45:85:fa:72:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:76:DC:56:ED:0C:74:3F:B4:79:F4:FC:93:C7:19:F2:93:43:83:45
X509v3 Authority Key Identifier:
keyid:B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/I3bcVu0MdD-0efT8k8cZ8pNDg0U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.132.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:b4:ea:da:47:ca:04:2b:d0:e9:62:63:10:ba:07:69:f4:c8:
aa:7f:c7:46:e5:f3:87:a4:d3:de:94:6b:5d:8d:bf:57:19:49:
24:4e:58:fd:4a:61:8b:4d:18:64:20:a7:56:be:f4:0e:dc:21:
1b:50:9d:34:aa:4a:ed:13:57:46:30:dd:d4:55:f0:8f:6f:10:
fb:68:83:21:74:70:84:72:4f:9f:4b:e5:8f:24:9b:92:03:3d:
65:cc:8d:0c:5d:93:90:e2:13:e0:70:03:0b:85:cb:7a:2c:88:
c6:bc:0f:24:fd:69:11:b5:0f:a5:33:ce:13:c8:bc:29:51:c5:
c5:66:fa:82:ed:20:a3:0a:04:db:01:90:6e:8c:96:2c:11:a0:
10:87:9f:c2:48:f3:2a:88:61:8a:35:45:6e:6f:72:c1:8f:e3:
b9:1e:9c:3a:70:76:c0:3b:a4:89:c7:e4:92:59:a8:55:d5:b3:
e9:9e:7e:6c:f3:e2:95:df:88:90:ec:78:0a:38:93:09:fa:36:
ce:f2:65:ef:17:74:75:5d:a5:f0:90:15:56:c7:1c:57:09:99:
43:36:f1:d3:94:05:a6:5b:12:cb:a8:ae:ba:fe:28:68:7d:b7:
c8:95:a6:b0:3e:0d:b8:6d:0d:07:8e:07:f3:8f:92:8f:07:d9:
f5:98:31:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 08:00:16 2023 by rpki-client on console-fra.rpki-client.org