Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3073/jSvHlk7l9_2Host72f1VUOiII30.roa
File: jSvHlk7l9_2Host72f1VUOiII30.roa (raw, json)
Hash identifier: CaejCZA2+kuyWY98GcndULOD9IZMz6V5sLIfpi7prdM=
Subject key identifier: 8D:2B:C7:96:4E:E5:F7:FD:87:A2:CB:7B:D9:FD:55:50:E8:88:23:7D
Certificate issuer: /CN=26991C778DA656110D420F3281C1A17A5302C39A
Certificate serial: AA
Authority key identifier: 26:99:1C:77:8D:A6:56:11:0D:42:0F:32:81:C1:A1:7A:53:02:C3:9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jpkcd42mVhENQg8ygcGhelMCw5o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/jSvHlk7l9_2Host72f1VUOiII30.roa
Signing time: Sun 11 Apr 2021 08:59:25 +0000
ROA not before: Sun 11 Apr 2021 08:59:25 +0000
ROA not after: Fri 11 Mar 2022 03:01:11 +0000
asID: 131535
IP address blocks: 103.164.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26991C778DA656110D420F3281C1A17A5302C39A
Validity
Not Before: Apr 11 08:59:25 2021 GMT
Not After : Mar 11 03:01:11 2022 GMT
Subject: CN=8D2BC7964EE5F7FD87A2CB7BD9FD5550E888237D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cf:61:9e:36:4b:97:57:2d:91:b3:d0:54:cf:
80:b2:91:fc:d4:f0:a7:ce:44:98:c8:45:46:89:6b:
53:56:50:1b:45:91:1c:3f:92:e8:1c:61:57:1b:cf:
84:a4:8a:d4:b1:cc:ef:21:f4:6d:38:a4:04:f1:8e:
cf:c4:71:a8:f7:d9:9b:2b:00:41:56:9f:9d:29:e4:
4d:ea:e5:03:ce:4f:1e:e6:84:ba:50:a8:f9:03:12:
ce:32:4a:15:53:36:c5:8c:43:fd:d7:cb:dd:ec:be:
cc:6c:1d:6e:9b:22:98:22:0a:66:45:b1:df:b4:ee:
6a:d8:d7:5c:ea:09:9c:2f:40:8b:8e:5e:e2:6e:4a:
30:56:df:71:46:db:34:26:6c:c4:c9:49:5c:ac:93:
72:31:a6:7a:b0:cc:89:1d:a2:a5:c6:a5:df:ac:83:
aa:fa:b9:a0:87:a0:cf:15:a7:c2:99:34:28:e7:fb:
08:38:e3:79:e5:2c:d7:9d:f6:4f:73:11:87:34:48:
44:14:e3:7f:ae:64:94:80:8a:f8:ef:51:d2:13:84:
e4:b1:0b:d4:cd:d2:c1:6c:71:a1:e4:8a:8d:f4:fa:
65:9f:7d:d4:cc:cb:c9:e7:5d:7f:38:ad:e0:a5:d1:
14:33:50:68:86:65:ca:f3:8d:1a:8b:51:9a:72:24:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:C7:96:4E:E5:F7:FD:87:A2:CB:7B:D9:FD:55:50:E8:88:23:7D
X509v3 Authority Key Identifier:
keyid:26:99:1C:77:8D:A6:56:11:0D:42:0F:32:81:C1:A1:7A:53:02:C3:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/Jpkcd42mVhENQg8ygcGhelMCw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jpkcd42mVhENQg8ygcGhelMCw5o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/jSvHlk7l9_2Host72f1VUOiII30.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.164.4.0/23
Signature Algorithm: sha256WithRSAEncryption
51:1b:99:bc:ff:4d:08:f5:d0:1b:42:e2:f7:8d:67:8b:1e:03:
67:01:a3:c2:3a:f4:66:8a:6f:59:35:70:ef:c1:fe:48:4e:79:
f5:79:3b:8c:43:10:25:34:78:21:56:68:6d:f6:68:2d:35:f7:
c9:83:10:4a:95:f9:30:91:3c:ab:03:79:92:2c:75:8d:10:f5:
b2:0b:39:e3:8c:6b:40:40:5e:f7:64:a1:31:49:00:8f:64:2e:
a8:aa:73:ae:ff:01:74:29:26:6b:3e:87:a1:fc:90:63:de:b5:
39:a8:82:a9:04:2e:50:08:50:f1:ff:81:85:c1:8f:cc:b2:04:
73:f6:ec:93:5d:ff:d2:a4:ee:24:11:6d:ac:77:4d:f0:fa:1c:
68:34:d5:67:b8:7e:6a:d9:6a:6e:45:5d:65:b6:0f:d1:95:7e:
95:02:7c:25:76:da:aa:b7:14:f3:99:5e:c6:73:15:b4:45:e4:
f6:a8:e6:94:ab:84:21:a1:f5:ab:0a:d0:c6:bc:a3:3a:51:33:
03:b9:76:ae:29:5e:1f:72:a9:3e:f0:c7:9d:8c:ab:bc:2a:9a:
18:50:1e:bd:c5:24:ec:52:22:1d:89:03:da:04:e4:f1:8b:ba:
31:fd:0a:5f:8f:2c:6f:47:cf:93:ab:b2:a0:38:3f:be:ae:41:
f6:f1:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org