Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/GknYZFwKAd68JvyKXOTfOvYiXSU.roa
File: GknYZFwKAd68JvyKXOTfOvYiXSU.roa (raw, json)
Hash identifier: yrU8ng8AyBVDE3jyaCwAWheLQZYI1e1BJupuiubOkEA=
Subject key identifier: 1A:49:D8:64:5C:0A:01:DE:BC:26:FC:8A:5C:E4:DF:3A:F6:22:5D:25
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 07E4
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GknYZFwKAd68JvyKXOTfOvYiXSU.roa
Signing time: Thu 26 May 2022 01:30:40 +0000
ROA not before: Thu 26 May 2022 01:30:40 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 24373
IP address blocks: 45.252.8.0/22 maxlen: 24
45.252.12.0/22 maxlen: 24
45.252.16.0/22 maxlen: 24
45.252.20.0/22 maxlen: 24
45.252.24.0/22 maxlen: 24
45.252.28.0/22 maxlen: 24
45.252.32.0/22 maxlen: 24
45.252.36.0/22 maxlen: 24
45.252.40.0/22 maxlen: 24
45.252.44.0/22 maxlen: 24
45.252.48.0/22 maxlen: 24
45.252.100.0/22 maxlen: 24
45.252.144.0/22 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: May 26 01:30:40 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=1A49D8645C0A01DEBC26FC8A5CE4DF3AF6225D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:26:19:b9:de:e9:51:d0:02:c7:87:69:e3:
5f:91:0c:66:c1:81:0b:a1:f1:a8:b8:73:e7:3e:6c:
48:21:94:c5:a8:c3:4f:54:9b:cb:0b:3b:a3:56:aa:
08:0f:66:6a:01:ab:4b:4f:42:0e:90:32:b8:f7:71:
4f:e9:d7:96:5c:a8:2a:58:fe:b7:f3:aa:42:d0:cf:
11:83:ee:9f:74:5f:14:94:ec:50:d9:a2:ff:4f:e7:
06:e8:17:af:0a:c1:c0:87:b7:d2:bc:14:6c:32:fe:
eb:eb:cf:3f:5d:6e:f2:af:9c:c2:2f:b1:46:8c:e0:
6c:02:45:25:90:b5:e4:c9:cd:8a:e9:c9:70:17:95:
ea:27:27:c4:9c:96:7d:77:48:6a:7e:51:b4:16:5d:
86:34:81:29:f8:2c:7d:4e:fd:e9:0f:2a:7b:89:29:
5c:75:bc:81:ec:cc:c9:a0:1a:52:42:f2:e3:28:cf:
43:60:4b:10:d4:fc:7c:7b:f3:cc:b1:0b:1b:53:0d:
a3:18:38:d8:d6:80:94:6b:a7:c6:7e:96:20:15:83:
f8:06:c1:18:d7:d5:41:02:69:4e:7c:13:cb:6b:5a:
20:8b:8c:21:52:9d:3e:d2:81:5b:fc:79:7b:f0:3f:
49:52:34:31:2d:80:83:29:38:5c:de:4f:bc:a7:d4:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:49:D8:64:5C:0A:01:DE:BC:26:FC:8A:5C:E4:DF:3A:F6:22:5D:25
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GknYZFwKAd68JvyKXOTfOvYiXSU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0-45.252.51.255
45.252.100.0/22
45.252.144.0/22
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:31:1a:c7:54:b8:28:a3:21:87:54:36:b0:b3:bf:fd:64:71:
95:51:f3:46:5e:5d:0f:f0:99:93:9f:9c:43:ca:a7:5c:fd:1b:
80:b5:a5:c1:f1:a0:32:0a:a3:70:48:e6:2a:dd:20:dd:f3:63:
4b:8b:33:c4:68:29:1c:86:c4:d5:1f:84:90:d2:ac:70:36:16:
60:4f:68:20:52:07:0c:49:4a:b9:31:9f:aa:4c:c3:6f:fd:56:
da:12:85:47:71:69:d7:53:ae:14:35:a6:ff:f9:f8:96:9b:79:
42:2e:00:bc:1d:d7:da:c9:94:6c:b1:7d:82:a6:da:b2:56:9d:
6a:7c:86:30:eb:37:ee:7f:7e:d9:bf:0e:66:a1:f7:92:29:6a:
d3:66:23:84:a6:e4:27:8b:39:7a:c2:1a:49:17:81:2a:d3:c0:
a0:0c:82:a8:d4:66:3c:b3:82:f9:5d:a4:80:f1:d9:13:c4:a9:
dc:38:f3:6c:f7:92:19:d2:9c:02:ad:ad:f2:02:75:7f:15:f6:
88:6f:bf:6b:7c:fb:18:36:5c:23:12:cc:45:23:ff:23:6a:d4:
fc:8d:88:3e:f9:92:25:14:11:08:ee:d3:c1:91:30:7b:0e:6d:
09:23:e5:0b:41:cd:fb:cb:c2:cd:de:13:49:65:cd:c9:cb:29:
4d:4d:b2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org