Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/StC3ilmkkUWQNoQnu_41DzS_XKg.roa
File: StC3ilmkkUWQNoQnu_41DzS_XKg.roa (raw, json)
Hash identifier: FY/HQ4EvmUnFpNS1tAxSkQr9WeJ4T6yOAkAkcixIL/o=
Subject key identifier: 4A:D0:B7:8A:59:A4:91:45:90:36:84:27:BB:FE:35:0F:34:BF:5C:A8
Certificate issuer: /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Certificate serial: 0CF0
Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/StC3ilmkkUWQNoQnu_41DzS_XKg.roa
Signing time: Tue 07 Jun 2022 02:10:05 +0000
ROA not before: Tue 07 Jun 2022 02:10:05 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 49544
IP address blocks: 103.159.122.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Validity
Not Before: Jun 7 02:10:05 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=4AD0B78A59A4914590368427BBFE350F34BF5CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:50:33:78:56:74:5b:46:c8:3b:3b:42:e1:
76:ef:e6:4e:fd:3c:b0:e7:94:ef:71:a1:74:0f:29:
6b:39:fc:1d:6e:12:2f:b7:86:86:90:3b:8d:80:72:
46:20:40:1b:88:fe:47:56:41:a1:0d:c4:07:53:6f:
55:a0:82:68:10:a3:f3:8e:f1:eb:4f:11:0a:21:c6:
86:f5:16:9c:62:07:94:78:9f:25:85:ea:5c:5d:ef:
fb:3e:c9:6f:96:4b:e2:7d:db:8a:84:19:b9:b3:c2:
3e:2b:a3:29:87:15:b6:d4:a0:31:34:65:00:fa:57:
e3:d8:40:d7:94:b7:3f:42:5b:05:a9:c6:3e:25:04:
33:2e:51:cd:ef:51:dd:df:23:0d:9f:a4:7f:26:1e:
f0:a0:57:92:29:a3:35:5d:93:9a:4d:9d:34:db:ce:
9c:c0:e1:63:d5:d0:23:26:b4:6e:11:98:c8:3e:24:
ab:9a:b7:0b:38:c6:6c:c9:09:ac:f0:f0:22:b6:96:
2e:14:2d:0a:23:46:1f:17:72:d9:b6:68:d8:63:4c:
f0:26:54:03:74:3e:20:2d:14:6b:a4:bb:95:ac:e7:
10:e8:30:eb:09:6b:84:0a:b2:96:77:49:cb:39:d3:
e9:db:52:fc:56:eb:77:bd:85:d0:26:dc:c9:9b:90:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D0:B7:8A:59:A4:91:45:90:36:84:27:BB:FE:35:0F:34:BF:5C:A8
X509v3 Authority Key Identifier:
keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/StC3ilmkkUWQNoQnu_41DzS_XKg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.122.0/23
Signature Algorithm: sha256WithRSAEncryption
68:e7:28:9d:0f:9d:d5:69:4e:06:53:9e:0d:19:00:1e:b8:c0:
7e:71:5f:7f:5b:67:3c:c4:f8:77:bf:3c:46:16:16:bc:c5:ba:
6b:38:38:e9:72:70:60:56:0a:af:fd:4a:a2:7a:dd:51:21:4c:
57:26:39:32:21:18:13:bb:3c:e5:2a:da:48:c0:fc:84:89:81:
d1:68:46:fc:26:8e:ff:f5:2f:45:00:9d:55:cb:1c:da:9c:3f:
66:8b:c3:af:00:a0:e1:a0:0e:1e:89:06:13:9f:0c:46:5d:a2:
88:2b:dd:9b:c5:e3:6c:e0:46:7a:bb:5b:68:44:4e:ff:2b:4a:
6a:c0:8e:b2:da:f2:17:09:71:4e:2a:e5:c1:1f:7e:a2:87:83:
ec:9d:1f:57:48:8e:9c:10:ec:f5:d5:f1:b2:1b:d2:9b:1e:80:
06:e6:12:c9:99:07:4d:a9:54:fc:ec:7c:f8:8e:cf:b7:7b:3f:
4e:f8:44:a9:28:72:f5:25:36:4a:9a:2f:ac:87:af:29:5a:24:
5a:35:92:49:96:79:cc:35:38:6f:a5:84:5a:a2:e3:3b:30:bf:
52:5e:8a:7e:35:29:ac:89:7b:fd:2f:70:d4:9e:93:02:8f:03:
94:86:e5:9d:03:9e:6e:ff:5b:e7:c2:95:cf:88:1d:87:10:62:
53:97:07:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org