Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/497/iFGSjSj0-UjVT635uKnkB0fJano.roa
File: iFGSjSj0-UjVT635uKnkB0fJano.roa (raw, json)
Hash identifier: m0B8Fc7NT38M2wL3ctJ5KdrkFfp4gWC4AeeR8RqoWZU=
Subject key identifier: 88:51:92:8D:28:F4:F9:48:D5:4F:AD:F9:B8:A9:E4:07:47:C9:6A:7A
Certificate issuer: /CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Certificate serial: 0969
Authority key identifier: 46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/iFGSjSj0-UjVT635uKnkB0fJano.roa
Signing time: Tue 07 Jun 2022 20:13:15 +0000
ROA not before: Tue 07 Jun 2022 20:13:15 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 56002
IP address blocks: 103.12.232.0/22 maxlen: 24
103.12.232.0/24 maxlen: 24
103.12.233.0/24 maxlen: 24
103.12.234.0/24 maxlen: 24
103.12.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Validity
Not Before: Jun 7 20:13:15 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=8851928D28F4F948D54FADF9B8A9E40747C96A7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6f:c5:a6:41:b4:bf:7b:08:d6:c3:9b:95:59:
2b:bc:7b:b6:20:22:d6:b4:bf:0f:98:56:e9:c8:99:
df:03:d6:db:7c:c9:bd:ce:70:f8:44:7a:59:fc:a0:
36:40:ce:54:1d:ba:8c:d9:b0:f1:56:ba:b5:9b:57:
df:d1:6e:b4:42:1d:b6:43:b3:22:3a:c0:57:00:a5:
fd:15:6e:5c:59:c3:65:09:40:9f:1d:87:1e:f9:9f:
91:8f:31:39:5d:d2:f9:46:3d:c1:6b:13:a4:ee:9d:
2d:21:7a:09:26:c8:47:c3:f0:70:fc:67:c5:72:7e:
24:ba:5f:8a:51:cf:09:c3:40:59:2e:80:24:55:a7:
e3:95:51:85:40:66:ab:c2:62:e9:8e:bd:c2:4f:ab:
a7:99:80:cd:37:8d:fb:89:b9:6f:47:d8:ed:8d:48:
aa:f6:65:93:6a:81:23:cd:ce:b4:d2:61:66:c6:e3:
a4:5e:5f:03:64:0b:30:4c:37:a8:dd:06:46:e0:37:
a3:09:2f:b8:5c:9c:8c:67:65:7c:9a:96:b7:7b:a7:
b7:6a:f4:33:5f:85:5a:d2:1a:7f:c2:b7:f5:91:48:
31:38:92:c3:6e:6c:50:9a:bd:d5:8e:73:8f:5c:9f:
62:cf:ee:86:0b:45:ef:9e:94:51:da:f8:e6:be:df:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:92:8D:28:F4:F9:48:D5:4F:AD:F9:B8:A9:E4:07:47:C9:6A:7A
X509v3 Authority Key Identifier:
keyid:46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/iFGSjSj0-UjVT635uKnkB0fJano.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.232.0/22
Signature Algorithm: sha256WithRSAEncryption
12:98:06:81:c2:92:08:e5:99:ac:be:0b:8b:1c:45:76:af:40:
83:29:f9:0c:9f:5b:f3:4f:62:33:db:08:88:ba:f1:0f:0b:df:
04:b3:13:8d:01:7c:29:60:94:01:c3:91:17:f5:13:31:18:8a:
4a:fc:a9:76:85:1e:af:20:3f:62:b0:04:65:56:2c:2f:52:b2:
c6:c3:dc:81:b9:c3:eb:f9:bc:a5:ab:75:d8:12:8a:d5:1a:4a:
98:9d:dc:07:18:44:ae:22:56:af:3b:7c:10:2a:f7:db:a3:52:
60:22:b4:c8:9f:98:11:e9:dd:12:20:52:73:e0:f0:c4:90:6d:
6c:f6:4c:9d:bd:16:23:2a:9c:47:48:8d:92:9c:f9:d3:55:59:
27:16:02:6d:75:bd:be:d8:6c:67:2d:16:7b:39:0f:e0:38:89:
34:4c:2c:4c:48:7b:7d:24:49:c4:3b:ed:1c:46:ed:1b:e9:0d:
74:12:9d:6e:c8:31:50:5e:19:19:58:94:38:e3:70:68:79:37:
51:01:d0:77:6e:d0:1b:e7:d7:dd:af:61:9d:b8:03:35:66:f3:
07:68:a9:38:0a:26:ce:c1:1f:af:61:63:68:47:ee:7e:c3:24:
86:e8:a9:e5:33:87:fd:13:1f:02:f5:d6:9e:27:52:cf:83:2f:
3f:a3:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org