Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/rnc0rloBi_hY9wmm6k52n41q2qI.roa
File: rnc0rloBi_hY9wmm6k52n41q2qI.roa (raw, json)
Hash identifier: UVWcMj7J4fJizuIecs7XhSZJ8/KFiddtqLXkdYf0PXI=
Subject key identifier: AE:77:34:AE:5A:01:8B:F8:58:F7:09:A6:EA:4E:76:9F:8D:6A:DA:A2
Certificate issuer: /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial: 0D17
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/rnc0rloBi_hY9wmm6k52n41q2qI.roa
Signing time: Wed 05 Jul 2023 01:25:26 +0000
ROA not before: Wed 05 Jul 2023 01:25:26 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 146839
IP address blocks: 103.172.160.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3351 (0xd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Validity
Not Before: Jul 5 01:25:26 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=AE7734AE5A018BF858F709A6EA4E769F8D6ADAA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:2e:df:d6:1c:1d:72:ba:cf:5d:eb:95:0f:
ca:e5:2e:49:4f:27:73:56:ab:ed:98:b2:ec:06:85:
5d:d1:9f:c3:07:a8:59:f9:7c:bd:22:c0:86:b0:f9:
16:64:0b:4e:4f:d5:bc:44:ce:8e:36:ef:e2:96:9c:
f3:54:95:b9:52:92:98:43:7a:9a:b4:a2:ff:bd:4c:
d5:9f:fe:60:f0:5f:f4:72:2f:48:2a:14:f1:82:e2:
b1:37:ca:d4:48:9e:85:a2:7b:92:ca:a4:50:80:d4:
30:18:89:e4:ae:9d:62:2b:33:d6:bb:c3:1d:aa:8a:
c3:9d:bb:ad:7b:8e:f8:73:a7:3f:f8:9d:d7:b6:93:
ff:29:f4:73:cb:45:1a:cc:e0:0f:0a:cd:fb:d7:97:
cf:46:0e:08:a4:9d:a3:e9:9e:3b:4e:d1:b6:5d:33:
0c:94:a8:0a:95:07:b7:18:92:9d:b7:27:1d:91:9b:
a3:83:94:f5:fa:26:9c:68:48:ff:dd:ec:a1:09:aa:
da:2f:ed:c9:52:69:29:14:24:3a:f7:4b:ff:96:49:
9b:9e:b0:1d:6f:d9:73:45:db:ed:77:38:ae:db:50:
01:1d:0a:65:d4:3f:2c:97:e4:23:5b:17:e1:17:21:
15:3d:b5:7d:3f:96:26:d3:b8:35:4a:21:f8:b5:8a:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:77:34:AE:5A:01:8B:F8:58:F7:09:A6:EA:4E:76:9F:8D:6A:DA:A2
X509v3 Authority Key Identifier:
keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/rnc0rloBi_hY9wmm6k52n41q2qI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.160.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:ea:9a:97:b6:6a:df:cc:15:a2:cd:07:9b:e1:f8:f5:70:88:
55:27:a5:e4:53:57:c6:7b:fe:4f:a4:57:2a:bf:a9:28:b3:30:
6c:b1:7c:c7:d1:11:3d:af:cd:25:7c:90:68:62:c6:e0:5f:84:
15:43:b4:1e:ec:3f:46:9c:11:66:b5:71:cf:38:6c:c8:d8:ba:
2b:df:80:e6:29:0b:6c:88:e5:0a:f2:38:23:49:ef:7d:dc:d1:
c8:18:7e:a5:3f:3b:58:65:97:f4:99:f3:89:af:78:c9:e8:9d:
e0:49:01:38:ed:8f:8e:8f:9d:80:51:dc:08:4b:e2:46:36:11:
20:e4:33:bb:70:fb:1d:90:4d:b2:5a:7e:6d:13:f6:b6:ac:2d:
5e:b3:21:28:af:0f:89:53:f2:2e:52:57:ff:c2:46:2e:f0:25:
75:90:d2:ff:71:3e:ce:14:9a:01:f4:e8:86:c1:c1:9a:72:fd:
51:b5:95:36:eb:34:40:7b:17:09:b9:69:7d:57:3f:a3:d0:c8:
4f:22:b9:97:71:8b:44:e9:09:3c:dc:2f:d4:18:fd:40:4a:56:
df:cf:07:c6:05:3f:e8:28:c4:91:ea:0e:fa:48:f9:eb:47:4a:
9a:e0:32:84:5e:b6:8f:4b:9f:4e:f4:83:98:49:6d:72:8f:84:
dd:47:67:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 01:24:13 2023 by rpki-client on console-fra.rpki-client.org