Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/5cRackHvxFxrkaC4ok-NS6cnAOo.roa
File: 5cRackHvxFxrkaC4ok-NS6cnAOo.roa (raw, json)
Hash identifier: gxaHL+xuRwRNSqC0wn+Dwwcb9A1cmKwlr6ImTia5P6Q=
Subject key identifier: E5:C4:5A:72:41:EF:C4:5C:6B:91:A0:B8:A2:4F:8D:4B:A7:27:00:EA
Certificate issuer: /CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Certificate serial: 03
Authority key identifier: EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/5cRackHvxFxrkaC4ok-NS6cnAOo.roa
Signing time: Wed 01 Jun 2022 07:09:10 +0000
ROA not before: Wed 01 Jun 2022 07:09:10 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 139119
IP address blocks: 103.157.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Validity
Not Before: Jun 1 07:09:10 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=E5C45A7241EFC45C6B91A0B8A24F8D4BA72700EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:5a:18:a3:22:10:40:aa:eb:88:16:f8:5b:
72:f1:ca:13:d2:99:07:51:a3:93:5a:a1:b1:be:9b:
a3:6c:41:7c:42:ba:2f:bf:cd:59:6b:c2:6e:42:80:
83:32:9c:1f:0a:24:38:f2:2e:b5:0e:40:f7:06:20:
1f:08:41:5e:72:b7:a5:9e:75:83:46:4f:51:8c:fd:
67:5d:15:4d:d6:7b:ce:f9:b2:15:5e:c3:23:40:0b:
51:40:5f:00:b2:23:58:c6:e8:94:46:f2:9e:fa:1e:
b5:b5:48:95:88:51:37:13:a2:ab:6d:0d:e7:74:4e:
55:33:89:0d:aa:92:82:47:2b:49:5f:90:cc:e4:c1:
97:d0:59:c0:25:8f:09:ba:c2:8e:a1:77:1c:fb:4a:
73:a7:e0:07:35:f9:a0:8c:80:b7:da:db:54:c1:aa:
cb:21:f0:cc:6a:94:5f:90:0c:a1:ce:7f:60:f6:96:
1c:8f:73:bb:61:10:0e:ca:ca:d1:04:78:62:fb:b8:
d0:2b:b7:cc:ac:62:99:3a:dd:49:59:0e:19:03:3b:
97:a6:18:87:65:c1:b0:80:2f:70:1f:c0:1f:56:fe:
da:a9:da:4f:08:ec:c9:b8:ce:98:ff:f5:31:68:8a:
98:64:ac:df:fa:d3:4e:d3:b3:5c:84:36:be:3e:82:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C4:5A:72:41:EF:C4:5C:6B:91:A0:B8:A2:4F:8D:4B:A7:27:00:EA
X509v3 Authority Key Identifier:
keyid:EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/5cRackHvxFxrkaC4ok-NS6cnAOo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e3:af:e3:09:b3:1d:30:bb:f2:6f:4a:b6:a5:24:4c:15:25:
a0:41:5f:e5:11:f8:75:ee:b3:01:13:ad:5a:82:d4:dc:a2:99:
57:57:d9:97:72:dd:03:8a:4e:02:88:ad:b9:bb:63:06:1d:5d:
c3:76:fe:52:b9:5a:16:2d:ad:3a:08:c8:55:18:4c:9e:7d:ea:
87:5a:71:d9:81:ec:e2:1f:3d:ef:ae:ef:65:f5:1e:bd:3e:64:
96:10:71:dc:26:3b:fa:70:ad:3c:e4:1d:d8:b0:49:b4:3e:cf:
bf:c2:e0:ec:d9:fc:3a:09:b6:93:b8:30:92:10:56:4e:3c:fa:
0b:62:30:07:69:71:78:97:80:6e:34:9a:cd:d0:b1:c8:f9:ca:
80:b3:cc:cb:3a:35:bc:4f:a4:14:73:a1:1b:6d:17:dd:05:be:
44:0e:8f:23:15:d9:9a:2e:86:91:bf:96:39:84:fb:38:57:65:
c1:8f:2d:3a:f1:e7:d9:ab:e3:78:46:57:ea:50:ae:ca:99:ae:
1e:b6:b1:29:98:5f:ae:e9:30:e8:97:a5:1d:9e:bb:24:d2:07:
f6:e5:88:39:c8:ab:aa:af:0d:f8:04:a6:0c:bf:99:c1:ab:1d:
d4:89:5c:cd:ca:f5:2c:2a:93:df:10:82:2f:0e:00:02:f4:3c:
9a:43:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org