Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/dZlv20oaEwbJEq0dFcm80DFnNJM.roa
File: dZlv20oaEwbJEq0dFcm80DFnNJM.roa (raw, json)
Hash identifier: l/kXutxxkTC47QV+BEfkudXJ4/VpIZrPKh7BaByKxkI=
Subject key identifier: 75:99:6F:DB:4A:1A:13:06:C9:12:AD:1D:15:C9:BC:D0:31:67:34:93
Certificate issuer: /CN=48ABAC2882B59E07AFEED3279C14F89E8093187A
Certificate serial: 06C9
Authority key identifier: 48:AB:AC:28:82:B5:9E:07:AF:EE:D3:27:9C:14:F8:9E:80:93:18:7A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SKusKIK1ngev7tMnnBT4noCTGHo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/dZlv20oaEwbJEq0dFcm80DFnNJM.roa
Signing time: Thu 01 Jul 2021 06:35:39 +0000
ROA not before: Thu 01 Jul 2021 06:35:39 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139139
IP address blocks: 103.152.186.0/24 maxlen: 24
103.152.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ABAC2882B59E07AFEED3279C14F89E8093187A
Validity
Not Before: Jul 1 06:35:39 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=75996FDB4A1A1306C912AD1D15C9BCD031673493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:08:ea:82:4a:87:1c:b2:86:0c:3b:77:64:
ef:e7:17:92:9f:47:1d:6a:28:e5:f5:e3:30:5a:2f:
01:53:99:1e:c5:49:33:70:59:3d:3c:27:27:1c:86:
f5:43:c3:7c:a1:24:4b:0e:06:2b:06:31:42:f8:52:
fd:bd:78:40:00:a1:ce:d6:51:ad:7c:90:5b:c1:f6:
7f:51:d2:89:0c:a0:2a:a7:a2:0b:13:a2:f5:cc:af:
be:70:49:b6:b5:4f:95:c0:49:57:0a:55:cd:89:c8:
06:fd:db:33:6e:f4:3c:e6:27:76:48:07:b1:f2:f1:
8c:a0:e0:53:c5:81:60:d3:6d:98:be:a3:82:8c:4c:
09:82:06:2e:a9:6c:33:ff:14:dc:8e:c4:9f:cb:8d:
cf:79:5f:4d:e7:5b:73:05:42:9f:16:44:5e:d9:36:
c0:32:28:e2:59:82:a2:bc:56:ed:59:38:45:d9:e7:
d4:c6:8c:b3:0f:0f:7e:cf:13:da:54:a6:13:c2:70:
a7:5c:7f:b5:e0:b5:c3:7f:25:83:aa:46:5d:fb:a7:
ae:41:74:81:3b:d2:ef:d8:6c:d6:fc:af:d6:17:6e:
7a:c3:d2:3b:ba:44:61:f6:67:65:75:35:b7:51:6b:
b1:68:ed:ee:ed:b5:0f:1a:ad:60:95:15:f9:d2:dd:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:99:6F:DB:4A:1A:13:06:C9:12:AD:1D:15:C9:BC:D0:31:67:34:93
X509v3 Authority Key Identifier:
keyid:48:AB:AC:28:82:B5:9E:07:AF:EE:D3:27:9C:14:F8:9E:80:93:18:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/SKusKIK1ngev7tMnnBT4noCTGHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SKusKIK1ngev7tMnnBT4noCTGHo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/dZlv20oaEwbJEq0dFcm80DFnNJM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.186.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:c4:83:c5:e1:3b:74:84:c9:7d:14:8b:03:db:a8:1b:65:36:
f9:21:b6:12:ed:ad:58:10:04:ea:3c:f2:05:5b:36:db:8d:2a:
b6:48:65:f6:5d:4b:04:ff:21:10:36:1d:64:10:21:ca:d9:8e:
03:7c:99:e7:d8:03:b1:e6:28:89:f3:a7:9d:fd:2f:d0:f7:cc:
fe:99:1a:64:1b:32:86:ed:68:9c:24:18:34:9b:ad:d1:00:bb:
a3:02:fc:76:73:27:45:9e:b2:c0:4b:1b:ba:75:c4:1b:42:6a:
79:11:73:28:09:37:45:38:9b:92:e2:7a:9e:6a:9f:ac:d1:f6:
b4:99:84:2b:e1:96:fc:ed:8b:69:c0:36:a4:74:b4:1e:51:5d:
d3:fd:1c:9a:5a:94:6b:ed:c5:3d:40:13:ce:65:20:dc:95:17:
a1:31:da:85:ec:44:45:e6:7d:77:35:46:51:e8:36:6b:ee:a2:
a2:ce:e9:0b:bf:00:6b:8a:8e:ab:ee:cf:98:28:64:2a:3b:8e:
ba:84:80:c9:49:8a:24:b2:23:29:2d:ec:45:6d:ff:87:c0:b4:
8a:13:16:4a:92:09:36:47:b3:c6:df:3d:3c:a4:1c:8c:5f:f6:
03:34:64:c8:9f:41:10:12:c3:e0:87:04:33:21:6f:71:25:19:
f6:ec:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org