Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2930/cg5l4ggcSFx1q-fzX3jEnagWiww.roa
File: cg5l4ggcSFx1q-fzX3jEnagWiww.roa (raw, json)
Hash identifier: qUPJPilvruswkwFUeXlVDDNQ6cRXalI8/aLCaOXFjsk=
Subject key identifier: 72:0E:65:E2:08:1C:48:5C:75:AB:E7:F3:5F:78:C4:9D:A8:16:8B:0C
Certificate issuer: /CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
Certificate serial: 0CD7
Authority key identifier: B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/cg5l4ggcSFx1q-fzX3jEnagWiww.roa
Signing time: Tue 07 Jun 2022 02:15:44 +0000
ROA not before: Tue 07 Jun 2022 02:15:44 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 398704
IP address blocks: 103.143.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3287 (0xcd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
Validity
Not Before: Jun 7 02:15:44 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=720E65E2081C485C75ABE7F35F78C49DA8168B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:26:f0:4e:43:7b:c2:e5:99:50:03:63:4c:
87:02:1d:3c:bc:0d:36:fc:44:b8:5d:64:79:d1:9e:
da:cf:c3:f3:16:38:48:4d:37:df:1d:5b:e1:50:98:
15:01:ed:96:73:64:d6:68:06:18:e3:d9:e7:79:de:
2a:3e:24:d4:3c:ff:d6:2d:23:31:83:37:23:15:59:
fc:90:40:cb:ef:c9:94:63:07:b3:f1:29:7d:ac:f6:
e2:f0:56:8f:13:ef:0b:a0:0f:b6:ea:22:46:dd:7d:
10:fa:7c:e5:40:66:bc:5c:f2:32:0e:3c:70:d8:fe:
37:f3:5b:c6:60:57:8a:85:a5:6a:08:91:ba:1e:69:
7e:2b:0c:cc:6d:1b:77:63:34:d4:10:fb:c6:f7:e0:
49:5f:16:e6:bb:4a:48:7c:96:fe:2f:b2:c5:08:4e:
f8:d7:c9:40:14:c8:c8:4b:98:3e:69:0f:dc:0b:8c:
42:4b:4f:89:0d:98:e0:0b:d1:fb:45:d0:db:42:1c:
ca:d7:60:84:54:c7:d4:a3:a4:34:92:87:90:56:9f:
25:be:de:b0:d6:b3:7b:b1:61:ca:a0:cb:eb:70:ee:
8b:9c:15:1d:81:b6:a5:59:1d:43:ac:e8:e9:38:17:
c7:76:f5:1d:ef:a4:34:aa:53:30:e9:07:8f:f9:71:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:65:E2:08:1C:48:5C:75:AB:E7:F3:5F:78:C4:9D:A8:16:8B:0C
X509v3 Authority Key Identifier:
keyid:B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/cg5l4ggcSFx1q-fzX3jEnagWiww.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.132.0/23
Signature Algorithm: sha256WithRSAEncryption
23:ab:0a:5a:0f:76:c1:a8:8f:c6:49:c3:4e:f2:96:d3:39:b1:
98:43:70:56:29:63:43:56:84:da:11:5b:57:95:44:89:de:ab:
7a:8d:ee:08:49:a4:13:ec:d5:21:85:cc:09:87:08:85:9f:c3:
e0:9f:b6:72:f7:68:9d:43:ae:6c:53:fe:6b:15:5a:cf:f4:dd:
85:ee:49:5a:55:8f:1b:e7:56:a6:61:da:91:fa:a6:33:ed:c0:
46:d4:bc:4e:29:59:a2:c7:c1:1a:79:e8:e0:70:e0:fe:e2:c7:
14:9a:b7:35:0d:d9:fd:19:93:17:33:e2:e1:29:30:b8:e7:13:
d3:55:81:86:4c:46:1d:b3:19:f1:a8:7a:66:67:49:30:29:f6:
3d:c0:a9:9e:45:ab:4b:b5:ad:da:9b:3b:e1:dd:0c:fb:34:22:
ef:8f:51:14:92:de:ae:76:ee:64:72:ed:4c:78:64:6b:fb:f5:
cc:4b:13:04:af:cc:9c:40:f4:8c:11:21:34:58:7f:f3:9d:56:
c1:05:ec:04:4c:87:f2:37:44:aa:52:6c:6d:0d:e5:87:db:de:
94:bd:b5:9d:a0:4e:20:bc:3f:b7:3a:eb:fc:1d:26:e3:67:f7:
63:44:97:d9:d3:65:ca:fb:3f:7d:f2:20:7a:bc:9b:93:9c:ec:
f2:fd:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org