Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ERCtZOK0cbdsA43z1QU3kx7O0k8.roa
File: ERCtZOK0cbdsA43z1QU3kx7O0k8.roa (raw, json)
Hash identifier: vGD1NDT5uOHUukl5A6OcvhhdV0lG+A6hOgLyR2eA1fA=
Subject key identifier: 11:10:AD:64:E2:B4:71:B7:6C:03:8D:F3:D5:05:37:93:1E:CE:D2:4F
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 05E1
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ERCtZOK0cbdsA43z1QU3kx7O0k8.roa
Signing time: Wed 09 Mar 2022 03:47:41 +0000
ROA not before: Wed 09 Mar 2022 03:47:41 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139259
IP address blocks: 103.220.248.0/24 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/23 maxlen: 24
103.221.6.0/24 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.34.0/24 maxlen: 24
103.221.35.0/24 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.36.0/24 maxlen: 24
103.221.37.0/24 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/24 maxlen: 24
103.221.50.0/24 maxlen: 24
103.221.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: Mar 9 03:47:41 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=1110AD64E2B471B76C038DF3D50537931ECED24F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:25:d5:da:b9:94:6e:4f:a8:75:64:ea:5e:
26:3c:c0:3d:09:fb:94:01:50:ae:52:14:00:f1:79:
83:f9:06:ab:9e:5a:99:ad:ba:19:81:7e:e2:f4:a3:
be:f8:34:d3:98:08:66:c2:e6:10:f0:b0:8c:16:f3:
7f:c5:b4:c0:2a:50:56:d3:0e:97:ad:d6:9d:99:ae:
02:b1:f1:81:61:ef:08:9d:ab:53:93:02:58:0f:9a:
a7:f9:e7:87:45:a1:43:3c:ce:69:70:1b:17:cf:72:
ee:3e:9c:62:75:cc:5c:83:39:0b:77:6c:78:ee:6a:
5f:5b:1a:c2:39:a0:fb:38:17:e2:67:8b:c2:e8:17:
0f:d7:7b:b5:cd:b5:87:92:58:07:11:ac:3d:23:14:
c5:47:2c:01:dc:41:06:a0:2a:a2:7d:5f:af:bb:39:
41:a5:d7:cb:45:12:a8:46:6a:e8:b6:d2:2c:9a:b4:
68:9d:35:17:37:86:1f:0c:8c:fd:22:9e:3e:9d:b3:
6e:5f:3a:5e:8b:7a:65:83:e9:63:a7:dc:dc:75:af:
87:a7:42:d5:b2:c7:5c:88:09:1d:5e:fb:a7:d4:0a:
f9:3e:06:0c:83:13:2c:6f:eb:18:12:6d:db:16:ae:
97:71:53:1b:6c:56:36:82:d6:c0:44:46:a3:73:6a:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:AD:64:E2:B4:71:B7:6C:03:8D:F3:D5:05:37:93:1E:CE:D2:4F
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ERCtZOK0cbdsA43z1QU3kx7O0k8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.220.248.0/24
103.220.252.0-103.221.6.255
103.221.8.0-103.221.31.255
103.221.34.0-103.221.48.255
103.221.50.0/24
103.221.92.0/23
Signature Algorithm: sha256WithRSAEncryption
80:30:66:25:0a:02:95:4c:4b:ce:3a:22:24:6f:6f:92:54:20:
04:e2:47:54:b0:7c:5b:1e:a7:d3:aa:f4:e2:35:0a:c9:55:c5:
50:f1:48:60:52:7d:0d:61:26:d8:d2:25:ae:9f:60:d1:60:f1:
ab:12:af:51:c2:07:d6:5a:22:c1:7a:b8:b5:05:6c:e3:87:a9:
58:29:32:41:2f:36:cf:61:41:47:b7:05:84:cc:43:bf:3d:aa:
98:86:07:71:41:05:60:5b:40:5b:22:b4:47:45:f1:1b:2f:6e:
69:a1:60:ff:1d:f0:5a:8b:c9:6a:47:c1:58:18:8d:42:3a:ca:
f8:ad:65:65:f0:b2:7f:b1:71:a0:76:c8:c4:4a:fd:d1:11:55:
0d:a0:3c:c7:b6:66:75:e5:cc:ef:60:e5:a6:0a:14:06:a0:fa:
33:7f:c4:64:3b:75:0a:b9:45:61:19:3c:76:75:7e:bd:26:aa:
78:34:d1:89:77:cc:b0:87:2d:e8:f6:a6:1d:62:2f:06:01:14:
b8:f6:21:89:5f:c3:6f:fd:a3:96:92:67:fe:6a:51:17:34:d7:
d1:6e:09:49:7b:54:bb:46:d9:f1:a5:d1:38:d1:f7:66:a5:64:
a3:7d:93:5e:96:f4:9e:a4:a2:17:ef:b2:f7:68:8b:eb:2e:68:
7c:6e:95:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org