Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/7Uo8Bjsq5agzBm8Zl2xbIKwPhOU.roa
File: 7Uo8Bjsq5agzBm8Zl2xbIKwPhOU.roa (raw, json)
Hash identifier: DQpOI9ScQu5AIVAgHimPBFReoU+6fJg1xnwwnTtpBLA=
Subject key identifier: ED:4A:3C:06:3B:2A:E5:A8:33:06:6F:19:97:6C:5B:20:AC:0F:84:E5
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 04
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/7Uo8Bjsq5agzBm8Zl2xbIKwPhOU.roa
Signing time: Thu 27 May 2021 05:01:56 +0000
ROA not before: Thu 27 May 2021 05:01:56 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 17621
IP address blocks: 43.254.152.0/24 maxlen: 24
103.5.192.0/22 maxlen: 24
103.24.116.0/24 maxlen: 24
103.24.118.0/23 maxlen: 24
150.242.238.0/23 maxlen: 24
202.89.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: May 27 05:01:56 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=ED4A3C063B2AE5A833066F19976C5B20AC0F84E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:3f:5f:19:bb:51:67:ce:96:3c:bc:b7:01:
85:03:f7:55:b6:86:b6:19:59:9d:9a:66:7b:ff:d6:
34:7b:23:7f:4b:3c:92:df:a0:c6:21:15:8c:81:59:
d1:38:ce:0f:8f:e7:5a:9d:cf:25:db:19:90:88:71:
8d:c4:8c:d6:83:51:80:64:64:71:ba:93:5c:49:38:
11:2b:14:91:d5:e6:4a:77:7c:55:2b:3d:62:49:2a:
eb:83:af:07:13:61:14:cf:98:c9:f1:e9:fc:c9:bb:
ce:96:a7:28:05:69:b8:33:46:f5:dc:f2:5a:6f:f8:
ad:40:10:70:15:cd:47:13:eb:b7:0e:57:9a:4b:df:
8c:d2:cf:1f:a8:e8:82:74:1d:cb:a5:50:92:0b:a2:
89:44:8a:ed:ce:8c:87:f0:92:6a:17:84:a0:4c:3d:
53:a3:ed:30:53:e1:87:0b:20:31:b1:43:a9:8a:7f:
81:74:2e:6b:30:23:d8:c4:d6:47:5e:39:51:31:b8:
73:a7:a1:1e:7b:6e:71:2c:90:d7:99:60:12:75:fd:
72:e5:56:72:a7:f4:5c:ee:ae:b1:ca:97:e5:0e:a2:
c5:b4:44:d1:3e:cb:d8:21:22:a2:94:8d:3b:0c:9f:
00:16:2e:fa:f0:db:a1:8a:60:c1:f7:54:1b:cb:4e:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4A:3C:06:3B:2A:E5:A8:33:06:6F:19:97:6C:5B:20:AC:0F:84:E5
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/7Uo8Bjsq5agzBm8Zl2xbIKwPhOU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.152.0/24
103.5.192.0/22
103.24.116.0/24
103.24.118.0/23
150.242.238.0/23
202.89.96.0/24
Signature Algorithm: sha256WithRSAEncryption
00:6b:49:4f:16:66:42:3a:81:df:f1:0a:85:19:fa:68:dd:f9:
88:6d:a7:85:2a:37:8c:b0:56:d4:a9:c5:f1:04:c1:23:46:b1:
c3:eb:dc:b2:58:57:d3:03:5f:c9:96:99:e9:23:a0:1d:12:29:
94:e2:c4:79:91:11:1e:10:f3:bc:72:2b:2c:78:9c:76:4c:16:
7b:34:7e:37:b6:4b:22:4a:dd:65:16:dd:4a:94:d4:4d:ff:4e:
89:c1:1b:04:04:1b:e4:49:e4:a8:12:bd:24:b5:94:1a:ce:b9:
39:d7:e9:f6:ff:26:f7:a2:e1:1d:e1:cf:06:48:48:0a:73:72:
c9:e9:61:9a:52:29:da:f9:13:7d:98:9b:1b:1a:85:80:1a:a2:
55:a2:b2:d6:29:43:e9:df:08:ab:e8:60:32:f8:7b:28:cc:4a:
9c:40:dc:73:ff:49:ee:c9:98:4b:4a:55:0e:3e:09:b5:b7:fc:
9a:49:d5:6e:06:94:16:09:29:2e:fe:bf:be:b8:40:9b:de:f6:
84:88:c6:58:62:44:44:0f:e1:5b:c0:1d:ec:98:71:39:f1:d0:
30:1b:4b:0f:24:0d:74:54:3f:7d:ca:7c:7c:6c:b6:6d:7b:e3:
bb:f2:81:4f:76:45:42:9f:36:75:6c:b3:65:0b:04:94:a6:fe:
93:89:4e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org