Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/n1O8-a0ru6VVPHBDwheoFICmvzs.roa
File: n1O8-a0ru6VVPHBDwheoFICmvzs.roa (raw, json)
Hash identifier: IXSWjEMbv9T10DeKwKA8so0bzJ0tu5CNDSpZOkpoha0=
Subject key identifier: 9F:53:BC:F9:AD:2B:BB:A5:55:3C:70:43:C2:17:A8:14:80:A6:BF:3B
Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial: 103A
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/n1O8-a0ru6VVPHBDwheoFICmvzs.roa
Signing time: Fri 02 Jun 2023 08:06:47 +0000
ROA not before: Fri 02 Jun 2023 08:06:47 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 45110
IP address blocks: 43.254.230.0/24 maxlen: 24
103.200.220.0/22 maxlen: 24
111.118.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4154 (0x103a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Validity
Not Before: Jun 2 08:06:47 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=9F53BCF9AD2BBBA5553C7043C217A81480A6BF3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3b:e8:28:ad:b9:6e:b0:12:9d:f7:a4:15:9c:
05:56:c4:86:3f:8e:c0:7e:74:f0:6f:b1:00:dc:d6:
ed:aa:e3:5c:e5:e5:ec:56:f8:c7:19:07:5f:92:b3:
ab:00:08:8b:94:19:94:84:44:cf:e9:79:31:d4:b4:
65:4a:fa:f8:72:50:8c:07:c8:ae:19:27:c8:99:50:
20:8e:47:98:32:34:73:5a:82:7e:68:8a:25:22:6d:
6f:2c:b1:14:e3:eb:6f:d8:19:4b:54:fe:8e:f6:af:
51:b2:a1:e5:09:a4:8b:fd:40:9f:aa:70:11:8f:ef:
aa:74:5b:a2:8b:dd:a2:cd:bc:6b:54:79:c7:ee:88:
4f:51:c4:05:3c:8e:ff:ee:3a:28:ca:05:22:10:7e:
1c:1f:3e:12:ad:77:e4:63:bf:e3:29:88:c0:03:fb:
92:5d:c2:e3:0b:d8:1c:d4:ef:5a:2c:72:a4:44:8a:
75:61:29:40:61:40:be:18:91:e2:87:de:5a:8a:dc:
31:86:ed:27:9d:c8:c0:cd:8d:14:34:8e:25:2e:67:
2c:68:1f:a0:66:a6:bb:98:2d:04:eb:d3:0a:93:32:
10:63:60:92:6e:f0:12:8b:8d:72:5f:8c:61:61:19:
d9:c6:ab:6b:4e:ec:3c:42:24:b4:93:52:00:12:2e:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:53:BC:F9:AD:2B:BB:A5:55:3C:70:43:C2:17:A8:14:80:A6:BF:3B
X509v3 Authority Key Identifier:
keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/n1O8-a0ru6VVPHBDwheoFICmvzs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.230.0/24
103.200.220.0/22
111.118.200.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b2:c3:3f:41:4d:a9:10:93:e1:73:a0:78:47:e0:41:8a:9d:
32:93:ee:c4:8c:c4:5a:7c:c6:40:e9:dd:49:6f:96:10:64:26:
a2:66:6e:71:09:a5:23:25:18:e0:8c:77:01:a3:aa:35:3f:c8:
64:d1:c3:2c:89:e2:5c:f5:f9:82:ad:7b:5f:f8:01:ca:e6:8f:
b5:f9:78:4c:c1:22:41:59:d9:97:de:3a:63:d1:50:82:20:46:
3a:3c:d3:3a:aa:90:80:24:88:aa:d2:7a:da:71:ac:22:1f:cf:
11:99:ba:9d:a4:30:ba:20:16:26:e1:05:7b:a6:97:8d:66:ed:
f9:31:7b:fe:59:30:bc:de:15:c6:c7:3a:26:70:86:94:3c:ce:
c1:96:8d:0e:7a:cc:01:5d:75:6a:93:3c:b6:d9:86:ae:71:98:
3e:cf:f1:7c:ab:36:3e:08:cc:86:72:ea:3b:93:f4:da:f0:0b:
6d:d1:65:f3:7f:68:cb:f2:8d:9b:0c:1c:a0:b0:54:6e:ee:b5:
00:e7:4e:99:6c:cd:56:d2:73:90:11:7b:b9:36:2e:33:81:03:
fa:ab:6f:43:04:50:20:c5:5b:66:3e:55:60:12:aa:4a:a4:b2:
07:c0:8c:2d:19:26:45:d9:31:99:4c:6d:8b:b0:55:bc:99:5d:
43:cf:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org