Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/o6xfPt5edtg5eOr7E1rRQy1nYEU.roa
File: o6xfPt5edtg5eOr7E1rRQy1nYEU.roa (raw, json)
Hash identifier: sHfvG/WVIaLXku4Ng82C3MteJiCX+uhQf+d+2ef/BMQ=
Subject key identifier: A3:AC:5F:3E:DE:5E:76:D8:39:78:EA:FB:13:5A:D1:43:2D:67:60:45
Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial: 0C63
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/o6xfPt5edtg5eOr7E1rRQy1nYEU.roa
Signing time: Wed 16 Nov 2022 08:47:22 +0000
ROA not before: Wed 16 Nov 2022 08:47:22 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 45110
IP address blocks: 103.200.220.0/22 maxlen: 24
111.118.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3171 (0xc63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Validity
Not Before: Nov 16 08:47:22 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=A3AC5F3EDE5E76D83978EAFB135AD1432D676045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:84:33:aa:aa:17:c9:63:33:f2:7d:0a:ff:c1:
f8:de:20:b2:79:72:a3:f3:f4:09:d0:f2:17:71:1b:
e5:5e:27:7a:48:35:65:ff:48:b4:fc:6d:45:05:be:
86:86:ef:41:9f:98:00:f6:60:3e:d7:0a:2e:9a:4a:
33:18:f1:89:a7:0c:10:5b:e9:34:ab:5f:13:98:ff:
b4:af:76:f6:3b:7b:c8:30:99:3f:11:bd:b0:e7:9c:
67:c0:fa:e9:d6:03:72:a3:62:e0:bb:3f:40:0c:7f:
77:e9:08:eb:06:1b:dd:d9:bf:69:0a:29:aa:69:2e:
68:3b:88:c4:08:19:74:23:ea:d2:c4:4f:5c:fc:2c:
1b:86:1f:65:43:85:be:6d:c5:6a:12:f2:be:26:a5:
4a:26:b0:57:8a:17:d0:ec:fb:92:24:45:bc:ba:31:
28:b9:b2:d8:b9:27:4f:46:9f:aa:e0:aa:17:98:94:
f6:cd:13:8a:b6:62:14:13:35:7e:a9:3c:da:1f:ec:
35:3d:38:bd:35:17:9f:08:31:2d:54:8c:d2:37:a1:
25:4d:73:cd:ec:a8:79:e6:e1:b4:63:be:47:f1:e7:
51:b6:68:ca:13:29:4d:b5:f0:8d:26:a5:b9:05:89:
ff:08:50:8d:19:a5:65:fd:da:af:93:e0:70:f7:0f:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:5F:3E:DE:5E:76:D8:39:78:EA:FB:13:5A:D1:43:2D:67:60:45
X509v3 Authority Key Identifier:
keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/o6xfPt5edtg5eOr7E1rRQy1nYEU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.200.220.0/22
111.118.200.0/24
Signature Algorithm: sha256WithRSAEncryption
50:91:2b:99:ff:6f:9d:b1:12:74:cd:d5:de:61:0e:a6:51:8b:
95:3a:06:23:ca:c3:59:d2:44:f1:ca:c6:82:ae:18:de:32:97:
ee:d2:df:ba:81:ba:4d:15:40:ca:01:f6:34:e5:f9:cf:7c:8e:
e4:82:9b:65:7d:88:c0:c7:4f:b6:57:47:13:38:0d:d0:25:d7:
2e:1b:ce:04:ae:2a:52:cb:1a:fd:51:a1:13:84:57:a6:51:4a:
f2:85:3e:b8:f8:76:94:a0:a1:c8:4d:bf:b1:f1:00:c2:1e:a4:
8e:69:12:a2:34:e3:21:44:fb:7f:9e:9d:02:51:70:03:cf:77:
7a:a8:5e:74:5a:c7:e0:ea:3d:55:ab:5d:f3:2d:10:8a:a7:4d:
0c:86:52:bf:d6:39:b2:c5:85:d9:56:39:d0:e1:32:e6:26:8f:
25:98:0b:d2:e5:0c:8f:37:a1:0f:7c:ce:88:7b:80:56:b1:cb:
4c:80:42:48:02:65:fd:6f:e1:66:45:60:5a:70:96:9c:a2:a6:
0e:7f:f9:b3:b2:37:d9:62:b0:a7:52:4f:70:45:3b:c7:6b:95:
9d:e3:a4:d1:39:ff:f7:0c:13:5d:19:16:20:45:54:04:ca:24:
09:0b:a8:94:41:3c:6b:c4:34:5d:c7:c7:3c:04:9b:1a:e6:33:
da:2c:fd:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org