Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/tDbJNw1AV46j32t3UOEzbddUgtI.roa
File: tDbJNw1AV46j32t3UOEzbddUgtI.roa (raw, json)
Hash identifier: rZ7ZT8+x8B54JrgOXc2gyroByaWtzqDdkGa50aZeBmE=
Subject key identifier: B4:36:C9:37:0D:40:57:8E:A3:DF:6B:77:50:E1:33:6D:D7:54:82:D2
Certificate issuer: /CN=C0239CFC4C87E5787FC5A1E36C4E3737939A083C
Certificate serial: 0702
Authority key identifier: C0:23:9C:FC:4C:87:E5:78:7F:C5:A1:E3:6C:4E:37:37:93:9A:08:3C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wCOc_EyH5Xh_xaHjbE43N5OaCDw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/tDbJNw1AV46j32t3UOEzbddUgtI.roa
Signing time: Mon 01 Nov 2021 12:13:15 +0000
ROA not before: Mon 01 Nov 2021 12:13:15 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139119
IP address blocks: 103.157.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0239CFC4C87E5787FC5A1E36C4E3737939A083C
Validity
Not Before: Nov 1 12:13:15 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B436C9370D40578EA3DF6B7750E1336DD75482D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:cd:30:66:1a:58:bf:9e:8b:5f:4e:a4:08:
85:0d:91:b8:19:25:96:39:68:4a:31:71:62:4a:4e:
62:a5:03:59:a8:33:19:7a:9d:e8:eb:3d:b8:08:9f:
ff:4b:59:e3:46:b6:47:80:eb:3e:be:9f:e1:8c:64:
73:2c:50:9f:37:ce:72:41:bc:ce:87:76:8f:7b:c0:
83:75:df:66:61:68:cc:5a:72:69:2b:de:80:6a:c6:
05:d0:01:c7:fa:fb:6f:46:2f:ad:fb:01:c7:98:9a:
6c:de:04:ac:18:a6:37:01:4e:cb:18:f1:44:44:d7:
02:95:52:d8:8d:e9:bb:4d:f2:d6:94:25:08:bf:42:
f3:6c:c3:df:ed:c2:00:04:b2:11:3d:b2:c1:33:3d:
52:6e:16:38:11:02:bd:6a:a6:c9:15:75:9b:c3:b2:
21:08:3e:9c:b0:86:ec:95:88:e8:60:c2:1d:17:77:
f7:ae:e9:3c:e7:67:34:91:e2:fe:8d:8b:d7:74:4c:
f7:c1:ca:6d:95:e8:b9:1d:52:53:0b:c0:83:67:fb:
0e:c5:58:b6:17:e1:55:c9:ff:5b:e0:89:9c:bd:d3:
f4:74:dd:3b:88:89:15:d3:52:9f:0a:59:77:69:7c:
40:f5:b9:77:3a:35:6d:d7:51:eb:56:93:c1:e9:08:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:36:C9:37:0D:40:57:8E:A3:DF:6B:77:50:E1:33:6D:D7:54:82:D2
X509v3 Authority Key Identifier:
keyid:C0:23:9C:FC:4C:87:E5:78:7F:C5:A1:E3:6C:4E:37:37:93:9A:08:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/wCOc_EyH5Xh_xaHjbE43N5OaCDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wCOc_EyH5Xh_xaHjbE43N5OaCDw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/tDbJNw1AV46j32t3UOEzbddUgtI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:93:0b:82:20:cb:15:dd:7c:d9:07:4e:98:85:9b:5d:62:bb:
47:2a:2b:24:ab:05:d5:de:5e:b2:f6:65:37:9f:d6:77:d2:ea:
3a:f9:1a:74:4f:d6:45:31:cc:06:63:9f:0b:d4:fe:6f:71:07:
58:29:fb:d8:cb:fd:64:13:bb:28:67:aa:01:c9:ef:51:9d:85:
2f:ec:79:2d:14:bd:63:be:43:f6:34:37:28:51:fb:54:f1:63:
76:da:5d:fb:1b:c9:58:50:04:68:a9:b9:80:48:30:14:b3:79:
82:c6:ff:07:73:e8:9a:f3:84:09:15:33:f2:29:03:bd:b4:a8:
4f:43:59:d1:df:f9:5a:34:e6:df:3e:d9:ba:4a:de:75:d8:f1:
af:5d:a7:58:e9:52:25:72:b4:f8:11:bb:2c:23:a6:c3:6a:36:
4a:e3:32:d9:e3:bf:a0:94:be:36:c3:29:fe:83:d7:e1:42:a5:
28:96:43:f4:4b:7b:2f:06:c0:93:cc:77:d6:b0:76:58:ca:dc:
00:08:b3:cd:c8:8c:e3:96:3d:15:b1:1c:07:2c:2e:c0:4c:f5:
a1:31:16:79:e8:14:47:0b:ef:ad:cf:bb:ee:c9:4c:a2:af:ed:
bd:96:81:89:07:bc:f0:15:25:6e:1e:06:b5:b5:2e:c2:6e:53:
c5:3a:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org