Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3054/IGmDk7FiJHmbtUQnb-U_OKA-dS0.roa
File: IGmDk7FiJHmbtUQnb-U_OKA-dS0.roa (raw, json)
Hash identifier: jK1VRkG/EdqxUrPmoEVkMaMxxLNU8ZIcOfmc9GmmKJE=
Subject key identifier: 20:69:83:93:B1:62:24:79:9B:B5:44:27:6F:E5:3F:38:A0:3E:75:2D
Certificate issuer: /CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Certificate serial: 04D4
Authority key identifier: 93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/IGmDk7FiJHmbtUQnb-U_OKA-dS0.roa
Signing time: Tue 01 Mar 2022 02:44:03 +0000
ROA not before: Tue 01 Mar 2022 02:44:03 +0000
ROA not after: Tue 05 Jul 2022 01:29:27 +0000
asID: 146845
IP address blocks: 103.160.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236 (0x4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Validity
Not Before: Mar 1 02:44:03 2022 GMT
Not After : Jul 5 01:29:27 2022 GMT
Subject: CN=20698393B16224799BB544276FE53F38A03E752D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:6c:2c:78:40:54:1b:d2:8b:1f:a8:f7:af:
31:ab:96:56:57:b1:88:82:53:2c:ac:b0:30:08:88:
f3:bf:c4:08:67:d6:55:a5:bc:82:ed:f8:37:93:00:
16:9f:2b:e1:2c:83:eb:43:5d:d3:c0:98:e5:bb:9f:
48:7b:44:27:3a:41:d2:dd:cf:f0:fc:ce:2c:ba:1b:
77:02:fb:65:da:2c:31:55:08:55:77:95:b2:a0:a0:
52:9f:9d:fb:08:f5:65:de:20:bb:f3:2b:a3:ef:f8:
35:cb:2e:fe:c8:aa:9e:52:49:6d:11:ca:3f:1f:19:
7b:cf:33:5a:09:5a:68:2f:17:1c:69:21:da:7c:be:
c0:f3:04:2b:57:18:55:b9:15:4c:e3:81:ec:e3:19:
2d:3a:7c:79:b8:d4:af:47:84:85:55:76:dc:3f:ee:
1d:f3:2e:99:69:7f:c3:e1:89:b0:c0:b1:b1:b6:47:
cc:4f:83:73:0b:98:bf:8e:6c:f9:1c:5c:45:9e:b9:
1e:28:8a:08:13:45:8e:f5:9a:78:db:1f:b9:0a:bb:
ad:2a:2e:19:e1:7e:06:26:65:23:c5:1d:3c:42:07:
19:8c:76:ac:e1:a4:22:45:88:78:1c:f3:ea:65:94:
bd:3a:78:34:c8:47:94:77:c7:56:51:82:23:74:3e:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:69:83:93:B1:62:24:79:9B:B5:44:27:6F:E5:3F:38:A0:3E:75:2D
X509v3 Authority Key Identifier:
keyid:93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/IGmDk7FiJHmbtUQnb-U_OKA-dS0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.244.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:ab:7e:fa:0a:fa:70:b9:8c:d9:28:5c:74:02:50:92:e9:7b:
e6:05:66:40:e9:8d:4e:ee:4f:c3:d1:b2:ea:62:1f:e6:8f:5a:
af:12:92:12:e9:16:d6:79:e6:e6:00:57:60:2e:5e:ee:df:64:
a7:35:ea:c5:92:21:88:6a:db:34:d8:6a:1e:f7:5f:6e:ec:53:
8c:05:84:5f:e3:96:8d:9f:df:39:20:b2:dd:41:9b:1f:18:2c:
fa:11:9c:73:fe:76:88:3a:4d:12:bd:bd:89:72:2a:26:a0:da:
f2:da:51:99:4e:e1:14:71:22:67:fc:1f:d2:3c:e8:bf:79:bc:
97:49:14:c4:86:4d:e7:08:02:0c:66:51:47:d7:f3:38:c7:c4:
15:67:76:e1:14:d3:65:96:15:bd:a5:ec:69:3e:61:54:ac:e6:
47:69:b3:4e:93:8d:74:c8:53:d1:4b:82:f3:81:77:d2:c9:00:
ff:c6:d9:52:0b:f8:f5:a4:d8:c9:15:42:61:9d:6f:c1:f1:d4:
fa:f8:4a:ee:e7:a0:2e:09:a9:98:fd:6d:15:17:11:6b:35:24:
97:0c:12:6d:3a:10:36:4a:48:b0:67:bd:ae:2f:17:a1:1a:d8:
ea:29:34:37:28:0c:6c:a7:e5:48:e2:88:34:98:f0:e5:8d:07:
53:e2:cd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org