Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2930/M7cVxLFBrEewgSBl_FiTbEosfc8.roa
File: M7cVxLFBrEewgSBl_FiTbEosfc8.roa (raw, json)
Hash identifier: s8JCeqnikkx3eSicrXUBxiOrxq6TSTe3Up3n/pD/ghM=
Subject key identifier: 33:B7:15:C4:B1:41:AC:47:B0:81:20:65:FC:58:93:6C:4A:2C:7D:CF
Certificate issuer: /CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
Certificate serial: 0CD8
Authority key identifier: B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/M7cVxLFBrEewgSBl_FiTbEosfc8.roa
Signing time: Tue 07 Jun 2022 02:15:44 +0000
ROA not before: Tue 07 Jun 2022 02:15:44 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 131530
IP address blocks: 103.143.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3288 (0xcd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
Validity
Not Before: Jun 7 02:15:44 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=33B715C4B141AC47B0812065FC58936C4A2C7DCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:67:a4:76:3a:10:7e:b9:59:ad:85:64:8d:
8b:eb:a7:5b:48:fd:dd:5a:74:31:a0:20:e9:0d:87:
cf:87:ba:2e:11:0c:ac:4c:e3:0d:02:1f:3c:f0:29:
55:d4:ce:74:5d:38:8f:4b:19:40:ad:26:de:8c:50:
07:9c:c1:d5:c5:5f:24:ff:15:1d:c1:f2:64:9d:bd:
39:4a:09:97:6f:50:07:c4:cc:4c:f4:2a:61:f8:6a:
7e:35:0f:f7:fd:51:c8:44:58:5b:4c:73:43:86:2c:
6e:fe:e3:32:b0:e4:08:00:ff:30:64:20:f7:e9:2d:
c6:cb:b6:4e:6a:b3:ba:55:55:66:4b:1c:51:ce:02:
b5:85:b2:d6:1c:a3:49:ee:fc:90:7b:b6:97:4c:f3:
d6:29:e0:37:c7:d1:ac:1c:ae:de:75:73:24:bb:72:
38:9f:86:27:77:2d:6c:31:ac:33:f0:7d:39:20:07:
14:14:e3:a2:c3:63:09:9a:43:16:ff:ac:1c:ca:24:
af:4f:e4:9d:9f:73:b4:10:05:7b:0a:86:a3:70:ce:
18:14:58:4f:90:0a:83:4f:82:12:47:92:5d:e0:e3:
db:c3:09:b8:00:d3:c4:75:c4:42:ea:72:a1:81:fb:
e9:2d:07:44:de:0d:77:92:25:c4:9b:bd:1e:f4:73:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:15:C4:B1:41:AC:47:B0:81:20:65:FC:58:93:6C:4A:2C:7D:CF
X509v3 Authority Key Identifier:
keyid:B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/M7cVxLFBrEewgSBl_FiTbEosfc8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.132.0/23
Signature Algorithm: sha256WithRSAEncryption
be:d5:4c:7d:6d:6e:73:53:76:cf:d9:59:c1:90:e3:2a:79:cc:
9c:ec:16:54:6e:6d:ef:97:6d:fa:de:e9:6a:a4:3d:ea:75:db:
07:d6:a9:40:27:11:8a:bc:dd:78:42:f6:58:c9:0c:c3:98:c0:
8f:e7:20:07:e0:86:37:43:11:4a:47:fc:c1:24:ec:65:58:a5:
65:35:e9:8a:77:1e:b1:8d:5b:30:fa:fe:f8:07:a3:3c:ee:5b:
64:d1:c9:c8:ae:ab:e1:c4:24:be:8d:b4:54:29:01:34:35:6b:
be:a9:1a:22:70:06:f4:2e:e4:62:ed:d8:de:93:f7:76:7b:e9:
d8:29:79:24:18:d3:de:b7:5e:51:b7:c1:89:c8:ea:81:4f:4e:
81:97:70:54:3b:cd:b8:03:aa:67:2b:58:88:ea:f4:3e:ed:d8:
e3:3c:a3:74:86:35:e7:28:e1:62:c8:9c:b0:95:84:b7:f9:fe:
12:64:81:ea:6f:fd:d2:46:e0:d3:69:04:c0:6e:77:bc:04:33:
78:8a:b9:52:af:24:ca:fc:14:95:3e:8f:a7:94:ac:3b:83:09:
fb:4a:54:68:8f:a7:8a:b9:7f:46:64:2a:3c:42:7b:f2:cc:70:
c6:63:ac:33:72:5d:81:17:0f:81:d2:bc:3b:ad:7f:c9:47:01:
9d:bc:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org