Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2967/hcT8DDMwJfgMOvfgsR5sF2QmFW4.roa
File: hcT8DDMwJfgMOvfgsR5sF2QmFW4.roa (raw, json)
Hash identifier: u6SplAdW4f2Wr1NgW7kyvF4m1CjvVXTNtimr24riE4U=
Subject key identifier: 85:C4:FC:0C:33:30:25:F8:0C:3A:F7:E0:B1:1E:6C:17:64:26:15:6E
Certificate issuer: /CN=0AB6F528865292E198F98B68B72D98D130AF532E
Certificate serial: 04
Authority key identifier: 0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/hcT8DDMwJfgMOvfgsR5sF2QmFW4.roa
Signing time: Wed 01 Jun 2022 07:11:09 +0000
ROA not before: Wed 01 Jun 2022 07:11:09 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 398704
IP address blocks: 103.150.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AB6F528865292E198F98B68B72D98D130AF532E
Validity
Not Before: Jun 1 07:11:09 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=85C4FC0C333025F80C3AF7E0B11E6C176426156E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:fc:6a:e2:35:83:e1:18:5a:f0:57:7f:aa:
38:05:90:2d:ad:e7:3d:d4:ba:37:49:57:94:4a:30:
93:df:f7:56:65:68:42:1b:00:65:83:9c:15:9d:b2:
5f:70:6c:dc:77:c1:a3:0c:4f:61:19:c7:b0:dc:cc:
08:f4:f9:42:b4:20:2d:86:f1:27:79:b4:18:52:3a:
23:78:7e:9b:8a:ee:7b:21:03:f4:4e:9b:9f:1e:ed:
c3:04:7d:7f:d5:cf:8a:8a:f7:38:dd:65:f4:90:fa:
da:61:cf:64:aa:54:3a:93:06:e9:6e:4f:26:9b:63:
4a:44:20:58:81:6e:94:92:e1:04:bc:f6:f2:84:6f:
43:9f:fa:59:af:d9:70:dd:50:5a:e0:c6:2e:b6:b3:
52:2b:8e:f2:6f:d0:f1:f2:20:d5:b8:a0:13:c5:be:
65:ed:e1:21:52:d9:47:f7:77:a5:1d:83:db:69:60:
e1:7a:e0:79:bb:25:4d:53:92:fd:47:5c:f0:04:30:
50:2c:fe:77:f4:de:43:41:db:5c:82:aa:ea:5b:bd:
31:74:19:f3:f3:13:31:84:37:1c:ac:13:71:02:4e:
a6:cf:cf:1d:2e:dc:77:32:e2:55:52:8e:b8:c5:75:
ae:5f:2e:05:92:6c:3b:ee:6e:79:ac:75:bb:05:fd:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C4:FC:0C:33:30:25:F8:0C:3A:F7:E0:B1:1E:6C:17:64:26:15:6E
X509v3 Authority Key Identifier:
keyid:0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/hcT8DDMwJfgMOvfgsR5sF2QmFW4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.130.0/23
Signature Algorithm: sha256WithRSAEncryption
59:68:2a:6f:e2:ed:c9:b5:e0:55:52:56:6b:44:47:8c:39:21:
29:63:a8:c8:35:15:65:c9:d0:50:64:d1:09:67:22:56:34:a0:
d7:8b:ae:57:14:d7:a0:1c:28:30:3a:8f:7e:28:f5:08:de:5b:
53:f7:56:0e:48:53:28:a1:0c:2b:e4:b6:67:d2:5f:5a:17:33:
36:f7:9f:4c:9c:d5:be:63:1c:49:86:bd:9a:8a:ea:03:37:eb:
ac:d9:53:f1:76:c7:b5:c5:54:c6:e4:32:56:49:4e:26:14:a6:
18:07:ad:f4:34:5c:4d:38:b4:64:a8:fb:25:3d:94:38:a8:80:
a3:1c:d9:a4:2f:52:24:73:c1:05:c3:e8:fa:5b:e5:96:03:fd:
d7:44:91:fb:85:c6:91:84:91:d3:9c:0b:25:a9:e5:ed:19:d9:
ca:79:b9:7f:3b:56:63:99:62:ac:9a:c8:9a:b1:3d:e4:38:c8:
86:ad:09:00:55:37:ef:d1:fa:24:7a:2c:99:46:8a:85:ae:6b:
2d:f0:41:16:da:ca:36:e8:5e:75:a2:4f:99:42:08:a4:94:2b:
ac:fe:e2:fa:ab:9a:c3:7c:0d:51:cd:ff:22:56:fb:1b:d3:1e:
e7:9f:25:e2:11:db:9d:cd:bb:7b:75:d2:da:91:dd:be:a1:e9:
3d:a4:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org