Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3146/o-uE52XBn3MRXPQPm6BhHmXcrSo.roa
File: o-uE52XBn3MRXPQPm6BhHmXcrSo.roa (raw, json)
Hash identifier: PrVf1zpUWN9fpoED4q34+0UuSN/dI4vJIV/D0MyL5dQ=
Subject key identifier: A3:EB:84:E7:65:C1:9F:73:11:5C:F4:0F:9B:A0:61:1E:65:DC:AD:2A
Certificate issuer: /CN=5F478F43F0AF8FEACCB81EDC7A9C76143180C9AB
Certificate serial: 2A6A
Authority key identifier: 5F:47:8F:43:F0:AF:8F:EA:CC:B8:1E:DC:7A:9C:76:14:31:80:C9:AB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X0ePQ_Cvj-rMuB7cepx2FDGAyas.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/o-uE52XBn3MRXPQPm6BhHmXcrSo.roa
Signing time: Sat 15 Jun 2024 19:55:43 +0000
ROA not before: Sat 15 Jun 2024 19:55:43 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 151492
IP address blocks: 103.186.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10858 (0x2a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F478F43F0AF8FEACCB81EDC7A9C76143180C9AB
Validity
Not Before: Jun 15 19:55:43 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A3EB84E765C19F73115CF40F9BA0611E65DCAD2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:d6:86:c8:a4:56:e6:a6:21:0b:d2:a8:63:
6c:68:e4:4c:10:4b:df:f4:8a:f3:06:42:03:47:8b:
76:f9:7a:3b:cb:c3:f0:c9:d4:8f:ef:c6:a0:b2:f3:
e3:c1:87:f2:e4:fb:79:f2:6d:dc:d4:a6:52:e6:af:
a8:56:ec:ca:4f:30:e3:ff:e5:41:ec:61:2f:df:0f:
7a:e0:1e:64:bf:5a:1a:4b:65:46:d5:3d:76:c7:a8:
3c:fd:c7:e9:0f:22:98:42:e3:ec:f2:b1:bd:b5:f9:
44:a3:bc:2c:14:6a:51:5d:1a:57:da:65:9e:95:84:
6f:9b:78:e0:71:1e:97:d0:e0:8d:e2:35:29:ee:fe:
4f:78:8c:2c:3a:32:5a:2e:d6:d8:23:61:15:d6:df:
85:a4:d7:71:e4:46:8b:f3:ba:2c:8c:be:84:48:ab:
33:fc:72:5c:4b:15:f7:50:eb:8c:a0:f5:37:ab:ed:
36:92:7a:a0:a2:b6:c0:46:55:61:95:27:e1:25:38:
02:db:d0:78:e9:76:60:93:d7:fe:37:af:5e:60:2f:
94:97:bc:71:ea:ad:49:cf:48:4d:a8:00:74:28:23:
3f:d8:d7:55:ab:39:f2:e2:1d:c2:71:80:41:4a:eb:
c1:67:f8:38:46:75:80:ad:e2:ba:45:26:cd:76:c1:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:84:E7:65:C1:9F:73:11:5C:F4:0F:9B:A0:61:1E:65:DC:AD:2A
X509v3 Authority Key Identifier:
keyid:5F:47:8F:43:F0:AF:8F:EA:CC:B8:1E:DC:7A:9C:76:14:31:80:C9:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/X0ePQ_Cvj-rMuB7cepx2FDGAyas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/X0ePQ_Cvj-rMuB7cepx2FDGAyas.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3146/o-uE52XBn3MRXPQPm6BhHmXcrSo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.186.136.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:c3:f8:03:31:8d:f2:64:e0:fa:19:8b:ab:b2:c0:f1:6f:07:
c4:f9:2d:92:a1:f2:88:4c:6f:d6:27:64:a3:a5:6d:4a:6f:8f:
63:e6:c5:32:a0:91:1b:63:a8:16:b2:c8:d9:54:1e:d4:04:08:
49:af:a9:81:e8:8c:b5:74:0c:fd:69:b3:1d:63:73:9c:2b:6a:
77:ce:08:57:42:ae:c0:af:30:a5:07:ba:00:6c:a6:81:ca:5a:
9e:74:44:5b:83:00:37:cf:2d:71:9a:c9:0b:3e:14:7a:8f:6e:
f4:06:a1:29:a0:be:7b:ed:4d:47:fb:5f:fd:f6:76:79:7f:d2:
3f:0c:2a:77:c3:ac:4e:c5:f2:5c:d2:f8:23:a1:28:9f:aa:2f:
15:9f:e8:72:3f:8e:41:ab:47:2c:c2:42:1e:b9:db:9e:c4:e5:
42:6d:d9:b5:39:bd:ea:d5:ae:01:ee:e1:37:78:00:97:eb:9c:
f2:07:51:ce:4b:68:9a:94:ed:16:28:25:07:cf:12:04:c8:fc:
aa:ce:86:b0:a0:09:d7:03:03:ee:56:dd:d5:32:bd:1d:44:26:
69:66:83:c0:22:6a:12:c6:16:c1:4d:2d:93:6e:7c:6b:da:a6:
89:95:9b:93:7b:6e:00:25:c7:69:0d:e3:8b:fb:f7:73:a5:e4:
5c:bd:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:55 2025 by rpki-client