Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3054/fIMKmk_AFIe57NJHng24PhyiE2w.roa
File: fIMKmk_AFIe57NJHng24PhyiE2w.roa (raw, json)
Hash identifier: npA59nCecgpdpWm5qqmZv1GlS199F3mnvRaiGpiF8XQ=
Subject key identifier: 7C:83:0A:9A:4F:C0:14:87:B9:EC:D2:47:9E:0D:B8:3E:1C:A2:13:6C
Certificate issuer: /CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Certificate serial: 0715
Authority key identifier: 93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/fIMKmk_AFIe57NJHng24PhyiE2w.roa
Signing time: Tue 21 Jun 2022 01:54:28 +0000
ROA not before: Tue 21 Jun 2022 01:54:28 +0000
ROA not after: Fri 09 Jun 2023 06:51:49 +0000
asID: 137732
IP address blocks: 103.160.244.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Validity
Not Before: Jun 21 01:54:28 2022 GMT
Not After : Jun 9 06:51:49 2023 GMT
Subject: CN=7C830A9A4FC01487B9ECD2479E0DB83E1CA2136C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:a8:29:f9:45:0c:25:66:fb:9f:c8:ab:9a:
54:93:e8:42:cb:e5:11:e2:2f:60:fe:1a:ce:13:e3:
06:ca:ad:ae:90:d3:ed:00:26:64:07:4d:f7:92:3e:
f4:91:6e:0f:e7:eb:76:60:6e:d9:46:62:1a:e7:28:
2d:f0:e3:ba:43:ad:e3:41:26:66:95:66:f5:ec:4d:
be:57:d0:70:eb:cc:06:1a:85:3f:3e:7c:83:03:78:
85:fd:82:1e:47:57:95:40:9d:a4:7b:28:65:1f:31:
16:41:14:0e:eb:33:0a:78:69:61:cf:ff:e2:dc:24:
cc:0f:f3:4b:70:b0:2f:79:01:45:c0:46:af:b9:47:
7e:32:d2:70:93:b5:54:44:62:e6:fc:b8:2e:f5:2d:
17:19:8f:64:0e:25:31:2b:36:15:e9:0b:73:0a:41:
61:68:86:08:d0:68:d5:50:18:d6:dd:21:d9:6e:90:
53:45:39:b2:d7:65:5a:05:78:38:dc:1a:87:09:5d:
5e:b1:5a:f6:ac:22:a8:4e:ab:0e:8d:74:b9:27:2a:
ca:79:79:89:41:1c:38:26:46:ed:3a:0d:21:92:0c:
f9:1d:ab:67:86:7f:4a:41:97:bb:17:72:1e:58:a8:
e3:89:db:74:7d:5e:d6:1a:2f:86:9d:1f:f1:53:d2:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:0A:9A:4F:C0:14:87:B9:EC:D2:47:9E:0D:B8:3E:1C:A2:13:6C
X509v3 Authority Key Identifier:
keyid:93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/fIMKmk_AFIe57NJHng24PhyiE2w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.244.0/23
Signature Algorithm: sha256WithRSAEncryption
43:15:d9:04:68:e2:8d:15:c4:a0:a9:c6:28:52:10:5c:92:d8:
c4:c5:e3:cd:c2:03:dc:ae:3e:f3:f5:11:8e:1e:eb:80:4b:ac:
8b:40:63:ad:49:7c:5a:13:6f:be:55:26:57:44:1f:a9:15:1d:
68:38:07:1a:f9:36:65:94:95:ab:f5:3a:e1:f9:a1:b4:56:10:
e5:41:04:50:5c:f5:76:c0:21:4f:0f:31:d6:45:a5:a3:cd:e6:
7c:7f:a3:8a:50:eb:b6:4b:09:b4:b1:d2:fb:e6:52:79:4e:01:
06:48:ff:fb:19:c0:d2:76:d4:91:ec:09:6d:15:02:f8:72:07:
83:2f:ef:ae:e1:ab:4b:65:76:96:3b:22:e8:02:c6:6e:d9:c7:
d2:b1:39:25:e2:16:82:ae:60:0b:42:97:08:23:57:94:ce:19:
b3:96:80:af:36:a9:3d:74:10:33:df:be:d7:48:61:67:d3:02:
08:58:17:eb:46:7b:bb:2b:6d:ea:ee:4b:75:4b:13:75:96:66:
a4:67:16:59:45:7f:4b:01:16:f0:76:b2:bf:c2:04:ed:46:27:
9b:e8:27:43:2a:65:35:80:01:d4:f3:37:6b:f9:2f:59:ae:ba:
73:ac:b9:6c:d7:f7:c1:4a:b3:a9:c2:05:e2:69:4c:93:83:00:
1b:62:1b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org