Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/OVVCHEUEt1lSM5zKgRtL0WArDEM.roa
File: OVVCHEUEt1lSM5zKgRtL0WArDEM.roa (raw, json)
Hash identifier: ubGnRnv/TRoEneI2iUovk0ocgZbMO9hot8ZTQe1mRek=
Subject key identifier: 39:55:42:1C:45:04:B7:59:52:33:9C:CA:81:1B:4B:D1:60:2B:0C:43
Certificate issuer: /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial: 0D15
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/OVVCHEUEt1lSM5zKgRtL0WArDEM.roa
Signing time: Wed 05 Jul 2023 01:25:25 +0000
ROA not before: Wed 05 Jul 2023 01:25:25 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 48024
IP address blocks: 103.172.160.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3349 (0xd15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Validity
Not Before: Jul 5 01:25:25 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3955421C4504B75952339CCA811B4BD1602B0C43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:74:fb:ef:8a:91:46:2e:a1:e6:01:95:46:b5:
49:27:a6:37:67:5e:96:29:55:74:88:9f:52:f8:51:
36:37:60:e1:08:fd:5b:f6:8d:61:0d:41:bf:e2:48:
31:39:4c:ad:ac:41:e4:6b:17:30:1a:76:fb:02:8d:
cd:b4:6f:5a:13:6d:b0:2c:a3:2e:a1:51:74:6b:24:
aa:38:ea:84:47:fa:4b:da:48:9f:39:03:b2:fd:b4:
21:95:48:cd:16:85:17:6b:c0:f4:28:91:5c:c6:75:
68:44:a6:ff:08:46:23:2a:c7:9c:22:6e:af:f4:8a:
83:44:58:4f:ff:3c:b7:66:fe:58:4d:ae:18:7d:43:
f6:45:e5:2f:20:f3:61:13:60:ed:1e:24:d7:c2:cc:
5b:de:54:2e:e9:2c:0d:d7:23:75:8e:f2:67:ea:93:
67:de:4e:a1:6b:40:17:0b:12:b4:7a:32:6e:aa:c3:
e8:5e:b4:6f:d9:c2:6c:c3:8f:69:9c:c6:30:cf:01:
b2:c4:5c:c1:3a:2d:86:df:74:37:ac:0e:ba:95:11:
b9:db:83:9d:fe:d1:48:c4:ce:36:6f:2b:b0:54:31:
48:28:0d:8e:4d:73:6e:22:78:32:e6:03:c2:70:e4:
78:36:fe:71:48:03:8f:fa:66:82:4e:63:d7:50:9c:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:55:42:1C:45:04:B7:59:52:33:9C:CA:81:1B:4B:D1:60:2B:0C:43
X509v3 Authority Key Identifier:
keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/OVVCHEUEt1lSM5zKgRtL0WArDEM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:f6:7d:f6:a8:5a:ac:73:ba:0d:45:5e:2c:3a:27:b0:db:09:
92:bf:94:55:9d:e0:2e:9c:28:e1:ae:f7:13:c9:32:c7:65:8f:
68:f5:d9:a4:a2:8a:f5:f4:55:3a:08:08:ca:a6:6c:62:e4:84:
fc:4a:ce:01:06:ae:94:2a:9c:ba:ff:a0:bb:d0:35:80:b9:28:
33:92:66:34:a6:84:74:4b:cb:55:97:7d:8f:d9:3c:7a:b7:26:
12:22:17:4a:11:52:d5:fa:8f:99:42:77:9b:49:47:b3:af:79:
b0:9e:b1:72:fb:b1:af:21:34:18:95:9f:61:35:0c:a0:ae:36:
68:e6:8a:fe:f5:45:2e:f2:c5:55:2b:13:f3:c7:83:1e:4f:b8:
bf:52:e4:2e:92:66:91:51:b0:c6:52:ca:30:4f:b8:f8:82:7b:
d8:ba:7b:37:10:fa:2a:a6:ee:c3:93:52:e1:35:46:86:f0:6b:
16:75:35:5e:80:ee:10:0e:8a:e8:0c:ff:f8:10:3a:ea:fe:5b:
7d:b6:75:0f:74:de:59:85:1b:06:d3:0e:85:7e:51:db:d0:f7:
c3:f9:4d:b6:50:c1:f9:e0:34:58:fa:41:3b:46:61:77:53:76:
06:61:77:5c:77:8a:02:9d:4c:7b:17:98:2b:d7:7e:a5:b6:20:
5b:08:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 01:07:49 2023 by rpki-client on console-ams.rpki-client.org