Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3067/QdM_hfXRKx-tHGJbw5bxfSYyIGs.roa
File: QdM_hfXRKx-tHGJbw5bxfSYyIGs.roa (raw, json)
Hash identifier: IQLdv0VEnEiH3Ze5gJMduY8egq8YAAh6+tzmzc/LWB0=
Subject key identifier: 41:D3:3F:85:F5:D1:2B:1F:AD:1C:62:5B:C3:96:F1:7D:26:32:20:6B
Certificate issuer: /CN=FC69367A4AB2D1799993A03C9ABC87F415C47693
Certificate serial: 11DB
Authority key identifier: FC:69:36:7A:4A:B2:D1:79:99:93:A0:3C:9A:BC:87:F4:15:C4:76:93
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_Gk2ekqy0XmZk6A8mryH9BXEdpM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/QdM_hfXRKx-tHGJbw5bxfSYyIGs.roa
Signing time: Fri 19 May 2023 05:55:00 +0000
ROA not before: Fri 19 May 2023 05:55:00 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 24409
IP address blocks: 103.163.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4571 (0x11db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC69367A4AB2D1799993A03C9ABC87F415C47693
Validity
Not Before: May 19 05:55:00 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=41D33F85F5D12B1FAD1C625BC396F17D2632206B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:fd:14:08:98:70:74:1e:8d:68:f7:cf:ac:
ce:cf:c1:13:07:b7:0d:12:ba:b8:82:c8:f4:57:c1:
38:d9:2b:11:73:af:e8:87:d4:cf:26:b8:85:8a:fa:
9a:1c:d6:c9:2c:38:d2:9d:59:a7:51:e6:d4:36:72:
70:52:7c:4e:c9:7e:42:a8:34:93:d7:22:90:c2:f3:
5e:1c:66:a5:c6:d7:35:1d:4b:68:d5:b3:f9:59:d0:
b3:14:3c:25:08:b2:25:ca:98:64:74:16:fe:08:78:
29:a2:e9:63:33:e4:64:f9:d1:a1:a6:57:ef:01:8a:
e4:31:cb:69:4d:8b:37:a4:33:1e:39:42:61:02:7f:
9d:6b:36:74:dc:34:e3:9c:e5:43:62:f8:49:c1:fd:
8e:6b:71:00:37:c7:03:a8:d0:78:d1:b8:94:65:d0:
41:87:e3:a6:a9:4b:f1:e3:56:fa:b7:63:9a:42:98:
fa:27:b7:34:ed:37:47:d2:3b:69:8f:a5:73:28:54:
3f:3a:02:33:9a:35:dc:4e:af:b8:75:43:61:5b:59:
ef:7a:61:39:a8:40:11:86:ea:1d:bf:c8:21:91:c5:
a3:20:22:92:0f:e8:a5:4a:18:95:74:b2:58:bb:15:
1e:14:28:0f:d7:fb:39:3d:0d:3f:95:f6:53:73:f0:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D3:3F:85:F5:D1:2B:1F:AD:1C:62:5B:C3:96:F1:7D:26:32:20:6B
X509v3 Authority Key Identifier:
keyid:FC:69:36:7A:4A:B2:D1:79:99:93:A0:3C:9A:BC:87:F4:15:C4:76:93
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/_Gk2ekqy0XmZk6A8mryH9BXEdpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_Gk2ekqy0XmZk6A8mryH9BXEdpM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/QdM_hfXRKx-tHGJbw5bxfSYyIGs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.28.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:ab:22:58:6a:b4:5b:55:5b:b3:86:cd:38:e8:62:82:b5:f6:
cc:20:2a:a0:88:a9:8f:9b:3f:10:01:6a:4f:72:ab:32:b3:f0:
ff:1f:de:0f:84:13:9c:c2:f6:d9:42:a1:1f:ea:bf:f6:eb:ce:
b2:7b:37:aa:2b:da:1d:4c:a6:d1:5a:cf:04:48:12:e7:da:f8:
ca:2d:2b:0d:25:3b:0b:f8:f1:be:ec:d7:9b:0d:34:4e:9f:02:
6d:8a:fb:a9:f9:ac:4d:b9:6a:7e:78:bd:b2:0e:ab:d4:84:eb:
58:82:a5:21:9b:1b:9f:d3:f3:a6:f7:8a:6e:89:5a:d7:87:8f:
0e:ec:97:a1:6f:92:2b:8a:27:3d:8b:d1:23:0b:00:b8:98:05:
ac:eb:fb:63:91:38:32:46:28:5e:b1:6a:84:48:4a:84:92:1c:
1d:94:9e:65:c7:de:18:a7:6b:7c:6d:27:65:13:41:bc:cc:42:
be:97:a6:71:cc:56:87:0d:92:c5:c2:84:d4:84:b0:c9:63:d3:
bc:d9:52:0e:41:20:7d:14:8c:11:df:e5:ab:73:14:14:7c:ff:
1d:24:5d:75:75:66:a8:c3:91:6e:d3:b4:bd:de:b6:2b:b6:59:
a2:ad:4f:61:f2:be:ff:be:2a:af:fc:01:53:4c:97:ed:36:8c:
0f:f2:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 03:16:35 2024 by rpki-client on console-fra.rpki-client.org