Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3073/ntSDK3gHH6MGaSQ1W9WQW-xItEU.roa
File: ntSDK3gHH6MGaSQ1W9WQW-xItEU.roa (raw, json)
Hash identifier: mCoP5zUPnK4skEXZNbfwtSquBiluIcVyVJ8mODWdYqg=
Subject key identifier: 9E:D4:83:2B:78:07:1F:A3:06:69:24:35:5B:D5:90:5B:EC:48:B4:45
Certificate issuer: /CN=26991C778DA656110D420F3281C1A17A5302C39A
Certificate serial: 0700
Authority key identifier: 26:99:1C:77:8D:A6:56:11:0D:42:0F:32:81:C1:A1:7A:53:02:C3:9A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jpkcd42mVhENQg8ygcGhelMCw5o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/ntSDK3gHH6MGaSQ1W9WQW-xItEU.roa
Signing time: Fri 25 Feb 2022 03:01:04 +0000
ROA not before: Fri 25 Feb 2022 03:01:04 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 131535
IP address blocks: 103.164.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26991C778DA656110D420F3281C1A17A5302C39A
Validity
Not Before: Feb 25 03:01:04 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=9ED4832B78071FA3066924355BD5905BEC48B445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:4d:ed:a3:4f:69:f4:db:16:60:f5:78:f6:
56:c2:89:ee:bf:79:7d:ba:cf:db:0a:53:f2:a6:c7:
32:f1:ff:90:00:15:b5:b9:2e:c4:af:2a:b5:7b:86:
15:e6:c8:67:a2:de:b9:28:98:39:36:53:59:7d:bb:
b0:02:dc:ff:cb:c8:29:dc:44:d2:22:0e:90:19:db:
b2:b0:a0:68:30:8f:57:81:d6:c8:69:a1:68:b0:f6:
71:3a:ec:e6:67:93:f2:d3:f9:07:35:15:95:f4:22:
0e:c4:46:2d:1b:34:1a:be:c0:c1:5d:02:8f:2a:06:
0d:d6:4e:76:c6:80:3d:67:68:80:9b:6c:76:9a:6c:
86:86:e4:4f:0f:5f:5b:84:5a:7d:e6:5d:95:53:0e:
bb:8e:c2:19:25:c3:ff:92:10:f9:bc:ee:d4:19:58:
3f:cd:c7:86:0a:b5:a5:9a:29:56:de:f3:36:fb:ce:
30:e6:65:b5:db:73:f5:44:75:ca:6d:8b:41:6f:65:
e8:24:ca:f0:e1:cb:ef:7f:64:16:db:3e:cf:30:d3:
57:23:67:21:4f:36:7e:56:9d:8e:06:f1:15:31:66:
0e:0e:a6:9f:66:05:f7:ba:19:26:cc:00:68:10:f0:
ca:fb:45:81:75:26:13:10:cb:e4:3c:b4:3b:01:b9:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:83:2B:78:07:1F:A3:06:69:24:35:5B:D5:90:5B:EC:48:B4:45
X509v3 Authority Key Identifier:
keyid:26:99:1C:77:8D:A6:56:11:0D:42:0F:32:81:C1:A1:7A:53:02:C3:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/Jpkcd42mVhENQg8ygcGhelMCw5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jpkcd42mVhENQg8ygcGhelMCw5o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/ntSDK3gHH6MGaSQ1W9WQW-xItEU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.164.4.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:05:8e:df:63:01:59:19:4a:81:1b:5b:7b:c5:0b:ac:f5:0f:
92:b9:75:5c:36:b3:73:47:2c:5b:eb:0f:85:b6:a1:82:bd:b8:
03:8b:72:27:a4:b3:89:07:ce:68:1a:98:9b:5a:0f:2e:4c:7f:
51:4e:d6:90:34:b6:bc:24:86:c1:e4:cc:e8:fa:90:58:a5:49:
4b:c6:1c:87:87:4a:5d:e2:14:5b:bc:2e:fa:a1:8d:1f:ac:3a:
7f:e6:c3:ca:56:a9:5b:17:ce:1a:e6:54:9a:75:71:aa:b0:cf:
03:8d:dd:8a:11:be:0b:ad:99:54:67:d7:3c:1a:28:a8:7e:1a:
13:da:31:37:32:0c:2b:00:e4:f0:8b:bd:7c:94:98:4c:5d:99:
c7:c0:fd:93:c0:7f:70:2a:7c:bb:4c:8f:94:64:a8:f4:a9:40:
5a:33:6e:ce:7a:3a:08:60:eb:e6:d4:39:27:68:d4:78:ff:9a:
3d:0a:2d:f6:71:fd:65:5c:88:75:08:1d:f8:0e:f3:f9:dd:92:
5f:a1:32:9d:ff:c8:f1:4b:71:6e:6b:11:23:df:2e:09:b9:b9:
d4:00:bd:28:6b:95:08:6a:3a:3e:33:cb:94:4e:93:89:ea:f8:
6b:39:e9:73:53:86:47:9e:eb:45:50:b1:71:15:39:4c:23:10:
05:9f:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org