Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/PPkk8A6Qefwgm4IJne9GKoghV5s.roa
File: PPkk8A6Qefwgm4IJne9GKoghV5s.roa (raw, json)
Hash identifier: gRV1TGw39hNrsfLk395TJKuhYEvoFuJa9jidJ1vSQXE=
Subject key identifier: 3C:F9:24:F0:0E:90:79:FC:20:9B:82:09:9D:EF:46:2A:88:21:57:9B
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 04C9
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/PPkk8A6Qefwgm4IJne9GKoghV5s.roa
Signing time: Thu 13 Jan 2022 02:30:39 +0000
ROA not before: Thu 13 Jan 2022 02:30:39 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139259
IP address blocks: 103.221.34.0/24 maxlen: 24
103.221.35.0/24 maxlen: 24
103.221.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: Jan 13 02:30:39 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=3CF924F00E9079FC209B82099DEF462A8821579B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:ba:bb:6a:c9:26:1a:ee:e0:b5:b1:c2:d9:
83:c4:ff:29:ed:36:0d:1d:bc:0b:fb:a7:a1:77:ad:
17:bf:a9:6b:7b:e6:6b:30:d4:f7:6a:0c:15:f7:c3:
76:c6:ce:34:ff:1b:19:b0:4e:b8:2b:e2:f9:af:55:
41:0e:36:78:10:d8:5a:f0:bc:f5:2a:e6:03:68:2b:
91:e6:4a:77:da:cd:e6:71:b2:f4:d4:9d:5e:72:6f:
e7:c1:05:bc:49:fa:76:48:e0:8d:7d:e2:0d:1b:6f:
41:82:68:cc:b2:8f:5e:59:56:41:89:d9:e4:2b:91:
97:5a:e9:01:a7:87:18:b1:74:d7:7f:62:60:f5:00:
7e:05:a0:7c:10:93:18:44:14:23:9d:3b:ae:03:12:
ea:fd:fe:56:60:50:ec:06:0d:9c:db:79:f8:ee:42:
22:a4:54:bf:5d:e2:43:6b:af:72:75:a9:1b:c1:0e:
34:39:92:60:fb:a2:04:57:ae:d3:30:54:de:0d:64:
18:0a:60:00:04:9e:f8:c8:47:80:f3:0c:55:fa:ac:
e1:78:fb:fc:4a:c5:85:4a:e8:eb:13:3d:3e:c3:f3:
7a:98:1f:8d:91:b2:49:db:17:38:bd:98:62:45:d1:
f9:f8:e5:3b:4e:f3:c0:fb:6a:92:5e:f8:8a:aa:af:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:24:F0:0E:90:79:FC:20:9B:82:09:9D:EF:46:2A:88:21:57:9B
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/PPkk8A6Qefwgm4IJne9GKoghV5s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.34.0-103.221.36.255
Signature Algorithm: sha256WithRSAEncryption
61:fb:7c:46:c3:2e:94:73:18:77:86:7f:9f:62:71:e9:f8:83:
d9:a1:5f:b7:be:12:8c:4e:83:c3:d9:4b:3d:4e:c5:e9:ea:78:
da:78:73:55:b8:b1:7e:a9:c7:43:0b:25:b4:f2:65:cc:c2:15:
34:38:77:a7:ab:93:1b:10:dc:f6:77:df:fc:bb:02:c4:e4:b5:
64:13:7b:83:37:f9:69:b3:bb:50:8a:18:35:39:47:c4:92:76:
06:a1:c6:be:f6:0d:3d:6d:93:82:ea:c9:c1:e4:3f:ee:af:e2:
d1:00:6a:28:7c:0c:b3:8a:ae:44:f1:11:9e:c7:51:f0:1b:26:
a4:58:51:f4:72:15:89:ae:b3:a9:dc:88:1a:10:35:c9:be:b7:
ca:72:b2:cc:dc:b3:56:71:2e:c9:00:f2:0e:e0:cb:8d:24:a5:
bd:e0:43:0f:5a:a4:79:40:05:58:07:bb:70:49:37:a7:b9:7f:
6e:cb:d7:b3:fd:78:95:d6:f4:a1:e3:03:2b:23:39:00:5c:17:
24:ae:56:98:88:34:d1:4d:33:ad:5d:37:52:06:02:44:32:a9:
14:0a:69:86:6e:99:e3:d3:04:a4:5a:f2:09:18:4a:4a:a7:3d:
07:24:35:f4:64:68:6e:d0:2c:4f:d8:91:0f:0e:49:e8:06:40:
7e:6d:0d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org