Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/0Lc0uEJ6NyZkAb5timCvoJHycwA.roa
File: 0Lc0uEJ6NyZkAb5timCvoJHycwA.roa (raw, json)
Hash identifier: Rb4on3IE1/bj5uK40plUJx7sjJmNfgVvFCDTjvfLs50=
Subject key identifier: D0:B7:34:B8:42:7A:37:26:64:01:BE:6D:8A:60:AF:A0:91:F2:73:00
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 0948
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/0Lc0uEJ6NyZkAb5timCvoJHycwA.roa
Signing time: Tue 07 Jun 2022 02:11:14 +0000
ROA not before: Tue 07 Jun 2022 02:11:14 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 38372
IP address blocks: 120.31.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2376 (0x948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: Jun 7 02:11:14 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=D0B734B8427A37266401BE6D8A60AFA091F27300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:67:45:e5:1c:27:0f:ff:f5:7e:cc:c0:74:
bc:84:8a:92:30:8d:ee:49:c9:aa:a3:8c:a3:bc:31:
e0:aa:9e:68:2e:7b:e6:5e:89:eb:37:b7:c6:a5:60:
0e:6a:12:86:ab:14:6f:2c:e7:80:ef:02:c9:dc:ed:
fe:1a:22:c8:32:3c:e7:ad:95:74:a5:6e:18:22:fe:
a3:3c:a2:07:02:e7:16:ae:cd:81:08:74:68:e2:a6:
76:81:be:f5:ac:ff:f4:26:39:b7:11:6c:a0:60:28:
45:70:23:fb:35:03:f6:39:47:68:0c:d5:2e:22:9e:
77:42:c5:32:e1:eb:27:4a:f5:65:34:ad:d6:78:e9:
11:0b:8a:a0:68:05:55:b2:46:1f:9e:c0:89:f1:f0:
03:ea:a5:a1:bd:8b:55:7b:b6:96:13:93:d6:f2:10:
cb:ec:59:b0:0d:84:f5:18:11:e2:d8:2b:5e:26:03:
56:2b:9a:f3:34:3d:14:ad:1f:fe:6a:37:e4:b7:26:
14:fb:05:f1:43:5c:3f:f5:16:76:be:43:b5:46:ac:
86:a1:6b:a4:89:65:9a:3f:a0:7d:4c:17:64:bc:58:
fa:5f:1a:68:d0:c6:e8:bc:4a:fd:32:cd:3b:f9:82:
52:62:78:af:be:2e:ad:3d:d1:3a:be:8a:b4:1f:c9:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B7:34:B8:42:7A:37:26:64:01:BE:6D:8A:60:AF:A0:91:F2:73:00
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/0Lc0uEJ6NyZkAb5timCvoJHycwA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.31.164.0/22
Signature Algorithm: sha256WithRSAEncryption
30:75:62:48:97:cd:3b:7b:d2:9f:f8:95:fe:8d:e1:0e:22:67:
80:f6:32:c7:cb:bd:d0:6c:22:2c:f8:9c:34:b8:5e:c1:58:6c:
00:7b:f8:1d:a1:3b:01:f4:45:65:9b:59:61:f6:51:48:e8:0c:
e0:3f:0d:19:00:36:ac:f3:93:fa:92:d6:ae:a9:e9:b1:1a:c4:
26:67:f8:e9:56:36:af:c6:b5:27:65:60:78:ca:77:85:bf:f4:
bc:31:d0:29:bc:8c:0c:52:45:27:d3:b3:d8:34:d2:e4:0c:86:
7d:c6:b9:a2:99:6e:6d:65:03:bd:37:43:75:d8:9f:62:46:8d:
f8:70:5d:2e:9b:c3:6a:68:b6:2f:49:d9:3a:28:c2:52:3c:22:
3e:ff:3f:8f:81:e9:23:2e:18:1f:b8:1d:2a:d2:87:28:83:f9:
31:1d:5b:93:c4:59:c5:bc:87:58:31:be:34:c4:8f:a2:d7:13:
51:a0:9e:5d:b3:55:14:44:c7:a4:d0:c4:37:11:73:78:50:0a:
ce:41:9e:06:2b:e0:fa:24:6a:24:d3:1f:8a:ee:ee:d5:81:14:
43:6b:c5:d5:fb:79:96:8f:32:4b:82:f7:20:3b:20:11:f3:b5:
dc:e1:e5:41:8c:a4:7d:85:46:95:7d:9a:c7:b9:21:48:db:5d:
5e:b2:0a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org