Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3073/uskT9eCdc_rOY60_4uWGqJkJBhY.roa
File: uskT9eCdc_rOY60_4uWGqJkJBhY.roa (raw, json)
Hash identifier: OTKOZJHz2G5utaU6ArSfQ9jXS5A3mqE2VQRCjfmKWKw=
Subject key identifier: BA:C9:13:F5:E0:9D:73:FA:CE:63:AD:3F:E2:E5:86:A8:99:09:06:16
Certificate issuer: /CN=512D841410BBAE51CCBFE812DA41E7814739B52C
Certificate serial: 0AD4
Authority key identifier: 51:2D:84:14:10:BB:AE:51:CC:BF:E8:12:DA:41:E7:81:47:39:B5:2C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/US2EFBC7rlHMv-gS2kHngUc5tSw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/uskT9eCdc_rOY60_4uWGqJkJBhY.roa
Signing time: Tue 07 Jun 2022 02:15:59 +0000
ROA not before: Tue 07 Jun 2022 02:15:59 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 131535
IP address blocks: 103.164.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2772 (0xad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512D841410BBAE51CCBFE812DA41E7814739B52C
Validity
Not Before: Jun 7 02:15:59 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=BAC913F5E09D73FACE63AD3FE2E586A899090616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:78:5a:46:f4:01:a8:1a:19:cf:10:3c:1f:
5a:a8:34:77:b0:81:c6:e4:a3:ec:56:95:45:3d:59:
05:98:a7:5b:ab:fd:84:a3:15:a3:87:94:f1:24:52:
83:15:46:a8:9e:77:a6:c5:ab:ad:cb:c5:84:a5:82:
02:3a:94:7a:5f:9d:6b:a9:2d:85:e2:90:0a:a0:db:
41:62:e7:6d:bc:79:47:65:60:a3:6b:c8:7e:13:f3:
70:79:a2:7e:7c:40:db:a1:c1:96:54:cb:e9:b9:1b:
2a:64:b9:62:7c:05:a8:a1:7f:87:bb:c7:a5:d6:78:
90:f8:00:66:87:62:86:ef:70:8a:f4:8b:1b:f7:aa:
70:bb:67:03:48:b0:12:81:e1:1e:3a:6f:72:d8:c3:
6b:38:7a:b9:60:1f:28:62:f4:e6:76:17:83:29:55:
d9:d1:d5:cb:46:c1:f0:ce:34:50:67:41:1c:d2:79:
4c:71:a8:0c:be:1c:55:f1:cd:29:8e:60:55:0b:4f:
fb:0e:59:9b:5b:7c:b4:97:0d:fe:9e:8a:ae:d4:52:
41:6d:9a:58:0a:94:b2:61:54:73:44:86:ce:69:b1:
6e:91:f6:3d:c6:4b:c4:52:e4:b9:32:32:91:a1:a8:
72:01:4a:28:89:c9:ac:dd:31:8a:e2:11:1b:96:17:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C9:13:F5:E0:9D:73:FA:CE:63:AD:3F:E2:E5:86:A8:99:09:06:16
X509v3 Authority Key Identifier:
keyid:51:2D:84:14:10:BB:AE:51:CC:BF:E8:12:DA:41:E7:81:47:39:B5:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/US2EFBC7rlHMv-gS2kHngUc5tSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/US2EFBC7rlHMv-gS2kHngUc5tSw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/uskT9eCdc_rOY60_4uWGqJkJBhY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.164.4.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:8a:74:8f:ba:8b:e6:7a:fc:be:27:3a:cc:f1:fb:3b:05:26:
21:02:0a:10:25:01:c3:ad:5a:15:6d:20:d9:91:c3:ec:af:54:
d6:73:44:c0:d3:dd:9d:8e:d7:60:f0:08:b7:e0:a8:43:4f:90:
d8:e9:c3:96:f6:82:ee:3c:ef:a3:2a:00:6c:6a:63:01:d7:da:
e1:6e:f3:77:34:b2:fa:5e:75:55:30:05:91:b5:a7:7e:cb:e6:
ac:e5:bf:75:62:3b:15:a8:a4:43:3a:95:26:17:e2:76:98:88:
a4:d7:4e:93:85:b5:27:67:4b:ab:a8:75:7c:33:d2:bf:69:13:
c6:fb:7b:3d:f3:4e:74:8d:e4:05:07:e7:be:be:af:bf:23:94:
93:f2:ae:00:26:2e:78:ed:f2:76:77:20:9c:12:f1:2d:4c:eb:
8c:bd:0a:be:43:c0:b6:fc:20:3a:48:53:ed:25:9d:12:d0:18:
72:40:45:2b:a3:2d:1c:20:17:65:f8:d1:29:f8:98:00:7c:dd:
b7:1b:e1:1e:81:c3:ff:df:cb:1b:64:27:e5:4f:52:b8:7d:51:
a8:1a:4d:59:1d:7d:74:2f:3e:da:48:ce:a7:e2:98:c0:ce:a2:
4c:0e:ed:c1:0e:ed:b9:e2:f3:6e:b4:e6:2d:d2:b5:3f:c7:3e:
7f:06:92:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org