Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/iEjAeIZBsyxFl6vhYvSIAKLOtfk.roa
File: iEjAeIZBsyxFl6vhYvSIAKLOtfk.roa (raw, json)
Hash identifier: Miei6StdBHqnytSwY5mO3kWpyw+QzvCfCw5UFV/C6z8=
Subject key identifier: 88:48:C0:78:86:41:B3:2C:45:97:AB:E1:62:F4:88:00:A2:CE:B5:F9
Certificate issuer: /CN=18BC3268C26DCC45A94B17F515018722A06416DF
Certificate serial: 0582
Authority key identifier: 18:BC:32:68:C2:6D:CC:45:A9:4B:17:F5:15:01:87:22:A0:64:16:DF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLwyaMJtzEWpSxf1FQGHIqBkFt8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/iEjAeIZBsyxFl6vhYvSIAKLOtfk.roa
Signing time: Mon 17 Jan 2022 07:05:49 +0000
ROA not before: Mon 17 Jan 2022 07:05:49 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 137718
IP address blocks: 103.159.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18BC3268C26DCC45A94B17F515018722A06416DF
Validity
Not Before: Jan 17 07:05:49 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=8848C0788641B32C4597ABE162F48800A2CEB5F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:c4:96:91:aa:1f:46:ee:2b:02:8e:f4:26:
f7:11:ee:5c:53:17:b4:bd:65:7a:a0:9c:9a:60:1b:
58:3a:d0:7c:62:c7:57:f8:34:57:9d:73:d2:c2:69:
88:d6:1f:da:dd:ea:be:8f:d2:bb:ad:a0:f4:47:6c:
30:5c:e2:2e:fd:01:a6:a3:72:92:60:c3:9a:72:43:
95:48:45:90:e6:2c:21:54:23:d5:d3:15:e4:e7:83:
a9:b2:52:db:de:5f:86:8a:f3:07:02:c7:9c:6e:7e:
c7:50:6f:5e:5a:bf:1d:8b:c1:a2:69:39:41:53:82:
67:2e:b6:e6:7b:28:6f:6a:71:af:31:d0:6e:22:9a:
75:c8:91:39:e1:e5:b1:3f:61:91:cb:ba:39:f0:45:
86:a3:30:a6:73:47:34:2c:72:2f:e7:36:a4:4b:2e:
ee:5d:60:7b:57:c1:ca:41:8e:02:6e:0e:ae:a3:70:
56:9d:e7:94:7e:be:28:2c:fa:e0:98:fb:44:43:dc:
62:9c:ee:31:36:bc:9b:5c:cf:52:d5:5c:bb:fe:5c:
f0:5b:93:c5:74:4a:c2:9f:c8:aa:5d:d0:d3:7e:fd:
ad:3d:f3:da:71:25:ad:b3:72:42:25:5e:97:20:43:
7f:81:5b:69:3e:55:44:f5:b2:3c:b4:7e:ce:50:6e:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:C0:78:86:41:B3:2C:45:97:AB:E1:62:F4:88:00:A2:CE:B5:F9
X509v3 Authority Key Identifier:
keyid:18:BC:32:68:C2:6D:CC:45:A9:4B:17:F5:15:01:87:22:A0:64:16:DF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/GLwyaMJtzEWpSxf1FQGHIqBkFt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLwyaMJtzEWpSxf1FQGHIqBkFt8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/iEjAeIZBsyxFl6vhYvSIAKLOtfk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.142.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:8f:53:58:07:23:32:0b:06:18:34:1c:6b:a8:3b:17:28:29:
6d:61:85:11:13:70:5f:55:35:c0:88:15:ad:e9:36:aa:36:4f:
6e:d3:a6:19:e3:0e:1c:b1:18:a3:de:f4:13:0e:4f:8e:0e:85:
f1:fe:79:82:74:c3:61:43:e7:ee:82:b6:dd:d2:ed:91:76:78:
46:d3:ef:c4:bd:66:73:8e:cb:64:2d:85:27:17:78:ff:2e:48:
5b:83:88:55:41:9e:fa:78:f3:13:55:7d:8a:a5:00:3a:24:d2:
08:28:30:9b:bc:33:ac:35:9c:85:0e:50:29:6e:8a:f0:72:ba:
8e:5b:bb:a0:ea:f2:1d:89:f9:f3:2a:e6:a3:48:0a:70:7c:90:
86:3c:40:cf:20:97:8a:49:96:11:66:30:b1:31:36:4e:42:9b:
a3:29:ae:b1:67:b6:db:7a:ca:ba:60:7e:b6:77:e7:69:27:76:
78:21:8c:02:09:b3:e9:05:be:1e:0c:bb:4d:53:ec:9c:17:e5:
8b:04:00:4c:95:38:8c:4d:1d:55:9a:b7:2e:ff:8e:cb:a2:55:
ac:34:55:15:6b:81:11:77:c1:6c:08:33:93:98:03:83:1d:0c:
8c:eb:62:7b:72:96:16:23:b6:e2:14:39:9d:39:6b:2e:40:59:
f9:08:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org