Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3095/6AQEr4bAKk9ZUq5P25eNyjeEl4U.roa
File: 6AQEr4bAKk9ZUq5P25eNyjeEl4U.roa (raw, json)
Hash identifier: eFX1v5dCeeG/xzWViaxqIsjDl5zvU2jenMJMi0n7P0w=
Subject key identifier: E8:04:04:AF:86:C0:2A:4F:59:52:AE:4F:DB:97:8D:CA:37:84:97:85
Certificate issuer: /CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Certificate serial: 021C
Authority key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/6AQEr4bAKk9ZUq5P25eNyjeEl4U.roa
Signing time: Sat 13 Jan 2024 09:08:19 +0000
ROA not before: Sat 13 Jan 2024 09:08:19 +0000
ROA not after: Tue 08 Oct 2024 00:16:33 +0000
asID: 37968
IP address blocks: 103.2.164.0/22 maxlen: 24
103.168.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98
Validity
Not Before: Jan 13 09:08:19 2024 GMT
Not After : Oct 8 00:16:33 2024 GMT
Subject: CN=E80404AF86C02A4F5952AE4FDB978DCA37849785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:f6:3d:9a:48:53:5e:ef:bd:61:e7:7a:ec:
93:49:44:de:e3:f8:dd:9e:96:6a:31:39:6d:e9:8c:
15:99:56:b5:38:72:7c:f7:94:5b:5f:bb:e6:05:cc:
ae:42:1c:e4:0a:48:60:b1:45:90:d3:b3:61:ec:31:
59:85:3f:61:6d:59:f4:76:6f:dd:62:97:6f:31:bc:
a9:2e:9c:c4:c8:4b:5d:17:8d:ea:9c:b8:87:e3:0a:
22:cf:ca:5a:a5:a7:86:87:30:24:98:4b:b6:00:7a:
ee:50:fc:a3:32:cd:8a:20:31:8e:99:e5:43:11:4b:
fd:b2:f7:6e:fe:63:c3:ea:b0:69:16:03:01:4b:89:
29:32:40:d3:81:92:9d:73:6e:14:49:80:c2:96:92:
c5:05:4d:32:63:94:37:28:2c:ec:af:78:6a:13:f8:
7d:69:3b:f5:f3:fa:28:73:79:a3:51:a2:f7:4e:d3:
d0:87:2c:4e:17:64:c4:93:b2:b2:0b:36:ba:b4:7a:
ab:25:e7:cf:76:73:34:2b:4f:54:9e:da:d9:9f:c8:
97:8f:b2:c9:09:2f:18:6d:a7:86:34:06:84:6e:00:
56:8d:7f:14:3f:a0:38:72:3c:6f:cf:1e:83:8e:8d:
36:95:27:35:da:88:8f:b5:e8:61:ec:18:82:c3:43:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:04:04:AF:86:C0:2A:4F:59:52:AE:4F:DB:97:8D:CA:37:84:97:85
X509v3 Authority Key Identifier:
keyid:CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/6AQEr4bAKk9ZUq5P25eNyjeEl4U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.164.0/22
103.168.98.0/23
Signature Algorithm: sha256WithRSAEncryption
46:a2:b1:2e:d9:bb:5e:33:4e:3e:01:a6:ed:a4:e6:a5:b9:9b:
2d:15:8c:07:7c:83:70:92:59:d3:d4:dc:ec:0e:0d:39:37:a9:
a5:89:09:41:54:4c:90:1e:c5:1f:a6:01:a8:2c:b9:4e:85:5f:
d3:89:95:83:c3:b6:cf:4d:d4:2a:89:86:9f:06:9b:72:b6:9d:
8a:7e:d0:71:3a:5b:a1:11:f9:a4:7d:a7:f4:e5:8b:16:8f:ec:
7b:e6:e6:c9:34:9b:bc:36:59:62:19:66:2c:71:f4:07:a1:c6:
6a:04:83:17:5d:2b:ce:ad:6f:96:38:27:8a:92:12:2b:ed:37:
a6:de:8d:62:d6:cc:a7:16:9e:35:a5:75:20:5b:f2:35:9f:17:
b9:9d:0a:b4:9d:f8:01:66:a9:8f:ee:b2:06:ba:de:cd:f2:ef:
5c:20:97:9a:79:5d:82:04:29:96:88:b9:c5:a7:ff:f8:b9:93:
cf:49:99:58:3f:ff:b0:33:7c:25:2e:24:02:02:4d:9c:ae:de:
13:1d:66:96:07:62:7d:b8:63:99:96:4e:68:ee:9e:e8:88:00:
18:7d:98:e2:9a:0b:cf:c9:de:a9:a7:78:fc:4d:3f:c7:03:d4:
55:d3:88:08:d4:9e:17:98:c8:7a:93:bc:c4:85:ed:3b:53:1f:
12:7f:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:14:46 2024 by rpki-client on console-ams.rpki-client.org