Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3205/wi3AQ2SnB-nCPTkeEuii7qAqqvk.roa
File: wi3AQ2SnB-nCPTkeEuii7qAqqvk.roa (raw, json)
Hash identifier: U8S66fek+o2nZcWY/AF8SOMd1b3sFKiZmdaAmbXeoXc=
Subject key identifier: C2:2D:C0:43:64:A7:07:E9:C2:3D:39:1E:12:E8:A2:EE:A0:2A:AA:F9
Certificate issuer: /CN=581041F42679F5E17F19C37E490A7794863B2BEB
Certificate serial: 03
Authority key identifier: 58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/wi3AQ2SnB-nCPTkeEuii7qAqqvk.roa
Signing time: Mon 10 Jul 2023 09:44:54 +0000
ROA not before: Mon 10 Jul 2023 09:44:54 +0000
ROA not after: Tue 09 Jul 2024 09:42:15 +0000
asID: 4812
IP address blocks: 103.96.224.0/23 maxlen: 24
103.96.224.0/24 maxlen: 24
103.96.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581041F42679F5E17F19C37E490A7794863B2BEB
Validity
Not Before: Jul 10 09:44:54 2023 GMT
Not After : Jul 9 09:42:15 2024 GMT
Subject: CN=C22DC04364A707E9C23D391E12E8A2EEA02AAAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3a:bc:be:69:a4:01:f5:34:cf:00:2a:2c:f3:
c1:b7:00:d8:42:b1:be:f6:4e:b0:02:1d:4a:44:74:
28:e0:f1:65:03:f5:c2:76:c3:8a:a8:d9:77:d6:6e:
0f:8e:6f:b9:b0:d9:1c:e7:32:a7:e6:04:7f:5c:b0:
f2:d7:33:fd:ee:6c:1d:e7:a9:37:db:15:e0:37:86:
8c:91:11:fe:c2:7b:e7:a1:bf:76:27:66:9c:52:ae:
c2:b5:29:41:d5:d4:3a:49:8d:d0:41:84:40:12:c1:
2f:49:5e:13:18:0f:d2:45:68:5b:63:25:61:0e:cc:
74:0f:e5:9e:cb:99:b2:59:32:32:8e:55:57:f3:9c:
3a:5b:b0:5f:cd:1d:ff:8e:4c:16:f7:b6:af:ad:e2:
d1:70:da:96:6c:72:9e:3c:14:03:ac:b9:93:16:e4:
44:01:b8:ba:50:bb:d7:bf:bd:3f:3d:82:74:73:7c:
41:b5:34:44:99:d5:11:e5:2a:71:48:6b:8d:e5:aa:
00:00:58:1e:e5:d5:54:4e:0c:51:c0:cb:4f:ea:e9:
0e:96:e8:d8:fc:02:8d:51:87:83:7d:f3:c5:4e:b8:
80:cc:9e:d2:77:bf:2a:3a:8e:ac:96:4f:5f:fe:24:
83:cd:45:4d:bb:63:40:cf:0f:93:da:81:d0:f9:58:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2D:C0:43:64:A7:07:E9:C2:3D:39:1E:12:E8:A2:EE:A0:2A:AA:F9
X509v3 Authority Key Identifier:
keyid:58:10:41:F4:26:79:F5:E1:7F:19:C3:7E:49:0A:77:94:86:3B:2B:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/WBBB9CZ59eF_GcN-SQp3lIY7K-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBBB9CZ59eF_GcN-SQp3lIY7K-s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3205/wi3AQ2SnB-nCPTkeEuii7qAqqvk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.224.0/23
Signature Algorithm: sha256WithRSAEncryption
43:f4:03:b3:15:d6:d6:c2:5e:37:21:fd:78:4b:65:8e:9a:b9:
5c:2e:d2:ad:c5:e6:19:bd:9f:b9:04:49:56:b8:0e:63:cb:c1:
ce:e4:ad:77:38:47:ba:17:4b:d4:8e:9d:43:78:a8:4c:ac:58:
fc:cb:f1:fa:c6:e1:2f:96:44:aa:e7:47:50:2f:4e:41:55:e5:
ea:2c:a3:0f:f9:27:d2:04:d8:39:68:37:db:ec:a4:e7:79:c8:
09:74:8f:0e:0a:83:31:e8:54:63:53:76:05:c8:a5:28:ae:aa:
6d:56:00:3b:e3:ad:21:02:51:12:8a:d0:64:d5:25:76:ab:fa:
5e:99:8f:61:2e:79:f5:dd:a3:bd:02:ce:e3:74:b7:91:47:52:
69:37:6a:d8:2d:25:d1:d5:fe:b5:82:79:60:ac:af:ae:72:f4:
9b:3c:f4:3a:e1:6f:02:ec:15:42:49:f8:dc:02:24:ca:4d:52:
6c:e6:f7:6c:2b:fb:00:ca:8c:41:60:9b:98:fe:ef:88:5a:e4:
68:60:95:9d:a9:c3:0e:88:76:cf:c2:a2:a9:17:e1:c3:57:fb:
46:76:6a:93:61:0c:32:5d:8b:a9:13:17:e8:c6:ba:25:90:95:
a6:01:60:9b:0c:51:38:35:b4:82:1a:38:4f:8b:fe:41:ee:40:
35:c7:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 13:07:59 2024 by rpki-client on console-ams.rpki-client.org