Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/361/rmQRoqOczaLAjeQFG4STanJkC5g.roa
File: rmQRoqOczaLAjeQFG4STanJkC5g.roa (raw, json)
Hash identifier: F/ozwp4etEaiXFzzSpjYVKEWGdNd3Y6N7HPG44tm0eQ=
Subject key identifier: AE:64:11:A2:A3:9C:CD:A2:C0:8D:E4:05:1B:84:93:6A:72:64:0B:98
Certificate issuer: /CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Certificate serial: 092B
Authority key identifier: 58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/rmQRoqOczaLAjeQFG4STanJkC5g.roa
Signing time: Mon 06 Jun 2022 20:04:13 +0000
ROA not before: Mon 06 Jun 2022 20:04:13 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 45110
IP address blocks: 103.200.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2347 (0x92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585206C87420BE42C7B9042DE3E5FD51595FF14B
Validity
Not Before: Jun 6 20:04:13 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=AE6411A2A39CCDA2C08DE4051B84936A72640B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:57:4e:52:f2:8f:dc:5f:25:42:38:3f:63:
5c:ce:40:3a:c8:44:9e:31:22:00:d3:c0:f3:12:e6:
29:00:53:81:52:33:49:fe:72:e1:dd:70:3c:5e:82:
8d:52:13:28:74:58:7f:01:f3:f3:e0:05:67:e4:63:
dd:d6:eb:35:2b:a7:b2:06:5a:64:26:f8:2d:02:f7:
f2:e1:f9:9b:a9:60:c3:08:62:75:6a:0b:9d:ad:ef:
50:47:80:15:a0:0c:b4:ff:0a:cf:c3:c9:34:51:19:
92:fb:52:95:c1:7f:7b:f0:32:a0:65:24:58:6f:39:
cb:e5:eb:41:3c:24:35:17:ad:44:f5:cc:1f:29:c9:
7f:4c:db:27:4c:73:7e:30:61:28:35:b4:ee:a7:f0:
41:8d:d3:c5:89:d8:50:a1:fd:26:e2:32:1f:b0:1a:
2a:d1:ce:a9:cc:fd:57:7f:f3:cf:23:13:d5:65:73:
10:e3:37:1d:5b:b8:94:52:87:f5:22:76:c0:18:1c:
25:fa:a3:f7:d9:95:65:ad:bf:6e:6e:fb:88:30:2f:
37:b0:bb:06:c7:fd:62:5a:2f:d7:40:eb:a1:34:2f:
bf:05:42:c7:b1:91:18:3a:73:7e:53:94:e2:54:06:
e0:aa:ea:18:e6:7a:b1:c1:e3:ea:82:bc:60:fb:9f:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:64:11:A2:A3:9C:CD:A2:C0:8D:E4:05:1B:84:93:6A:72:64:0B:98
X509v3 Authority Key Identifier:
keyid:58:52:06:C8:74:20:BE:42:C7:B9:04:2D:E3:E5:FD:51:59:5F:F1:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/WFIGyHQgvkLHuQQt4-X9UVlf8Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WFIGyHQgvkLHuQQt4-X9UVlf8Us.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/361/rmQRoqOczaLAjeQFG4STanJkC5g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.200.220.0/22
Signature Algorithm: sha256WithRSAEncryption
98:ff:0d:60:1c:b5:21:18:c9:c5:3a:35:c5:49:d0:28:f4:c2:
01:46:d3:c9:78:b8:b6:96:cd:a6:84:43:a4:c7:3d:35:8d:c2:
1b:61:a3:51:cc:11:2c:d2:49:44:d1:7e:b9:fa:e6:15:5d:13:
b7:68:a5:60:b2:ab:d9:4e:0e:82:21:34:e8:d0:75:5b:62:53:
bd:34:5a:73:07:43:ef:32:44:49:ac:70:86:92:11:2f:33:45:
76:7a:f1:4a:8a:a9:0e:aa:b3:bf:14:76:ba:b8:bc:56:08:c0:
b4:95:57:26:5d:c6:2a:47:4d:c1:43:52:4e:0e:ff:ae:e0:6a:
5b:e8:b9:08:50:25:60:be:13:53:e2:dc:13:8a:cd:68:55:4e:
d7:c8:e7:ee:b0:d3:87:b3:21:ff:fa:d1:67:ba:17:c8:43:73:
1a:5d:40:ca:b6:ea:6e:09:dc:d8:a2:72:7c:cf:7b:c9:82:87:
36:57:34:1f:89:18:7f:45:45:fd:de:60:50:83:05:bc:13:d9:
30:b0:f0:f8:57:b0:a1:08:82:42:9e:1b:6e:45:ce:e5:b0:93:
e1:88:75:39:90:d3:20:e4:07:91:70:bf:21:f5:67:54:66:58:
ad:db:ef:4f:04:78:e8:9e:83:33:84:99:89:d0:19:fa:85:a9:
43:93:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org