Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2967/btcDjyutcwCaNIGUERjft1QAoe0.roa
File: btcDjyutcwCaNIGUERjft1QAoe0.roa (raw, json)
Hash identifier: m2Qjl//iTFdYoQ51Q2tZZ3SzTWwrCcvfAW68+U35vn0=
Subject key identifier: 6E:D7:03:8F:2B:AD:73:00:9A:34:81:94:11:18:DF:B7:54:00:A1:ED
Certificate issuer: /CN=0AB6F528865292E198F98B68B72D98D130AF532E
Certificate serial: 05
Authority key identifier: 0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/btcDjyutcwCaNIGUERjft1QAoe0.roa
Signing time: Wed 01 Jun 2022 07:11:09 +0000
ROA not before: Wed 01 Jun 2022 07:11:09 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 131530
IP address blocks: 103.150.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AB6F528865292E198F98B68B72D98D130AF532E
Validity
Not Before: Jun 1 07:11:09 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=6ED7038F2BAD73009A3481941118DFB75400A1ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:23:c7:df:57:e8:26:3e:83:ae:08:57:dd:
73:f6:b9:d9:23:2c:28:64:44:e9:b0:9f:c2:7c:06:
42:ab:ca:a0:4f:db:68:a1:b2:54:6c:b1:f0:57:96:
43:48:da:cf:84:ae:03:fc:39:9a:09:c1:80:4f:1f:
4e:ba:f9:6c:32:b1:5d:4e:c9:4e:f9:70:07:54:51:
1d:15:d9:72:3f:c9:a6:7f:7e:27:11:ee:1e:1f:bf:
22:30:a5:bc:7e:92:f3:cf:be:84:9c:85:c3:e8:e1:
0e:d8:57:76:bc:33:16:00:07:69:0f:b7:44:1f:0c:
a0:ed:c9:64:1d:cb:70:e0:d1:1d:1e:c1:b0:0d:c6:
44:02:21:3f:da:02:0d:43:22:af:4b:10:17:c5:c5:
03:d5:d2:f1:45:b1:3d:67:bc:49:ef:94:7e:a9:0d:
02:b4:5e:d2:93:a6:36:95:ab:09:21:57:08:63:7b:
ff:73:1c:0c:72:03:db:06:75:e7:eb:9f:62:4d:34:
e6:00:74:84:b2:d6:82:00:5b:9d:08:be:e5:39:25:
22:92:87:ce:4d:f8:8c:54:c7:0a:03:94:38:4f:c7:
fe:43:cf:24:be:e3:f4:a8:ed:98:76:c4:59:79:76:
b6:c2:33:82:41:c6:3f:02:b9:f9:65:56:a6:67:f9:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D7:03:8F:2B:AD:73:00:9A:34:81:94:11:18:DF:B7:54:00:A1:ED
X509v3 Authority Key Identifier:
keyid:0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/btcDjyutcwCaNIGUERjft1QAoe0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.130.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:e3:1a:e6:c8:f9:d5:70:f3:db:39:8a:62:99:64:70:4c:d7:
f3:79:77:8b:05:70:39:e8:4c:00:f1:de:d5:69:35:d6:21:3a:
c4:c6:1d:4f:c9:65:11:a8:02:ee:14:06:02:81:e6:13:05:86:
38:92:0f:54:55:37:a4:ee:98:d3:5c:86:de:c3:fd:a0:b9:c8:
44:8e:cb:36:b6:98:8d:1f:12:c1:6a:d4:80:59:67:92:47:76:
9e:2b:a7:36:e6:c6:66:e2:2a:58:d8:b4:5e:4d:b7:7d:67:d1:
60:d3:07:ed:2d:25:89:40:0d:c1:39:82:7d:ac:9f:40:d1:96:
5e:fe:77:74:f3:03:2d:01:54:be:5b:16:89:9a:f9:09:d6:7c:
53:b5:0b:14:0c:46:c4:81:be:4b:21:3b:0c:b3:f0:1f:36:c4:
24:98:c5:5c:ac:87:95:d9:94:6d:17:a3:db:bc:5e:c8:6a:3b:
ed:c9:f5:57:d2:3b:b4:65:06:90:99:40:fc:00:43:44:4b:6b:
38:5c:8d:34:76:fa:76:8f:da:df:36:00:07:19:93:81:c7:4c:
a1:27:07:89:83:5c:69:1b:00:56:bb:67:d3:f8:f1:f3:b2:a9:
8b:b6:7f:bd:0b:e2:64:0b:ab:de:7a:f6:f8:58:22:43:17:98:
ba:ba:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org