Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/bkgcvkgRwhfbj9hDBqjqWV4GqQI.roa
File: bkgcvkgRwhfbj9hDBqjqWV4GqQI.roa (raw, json)
Hash identifier: NEk5Wg0UH7VM9n5GLg0nB+U0j+S/x3L0X1WmwkF3cX4=
Subject key identifier: 6E:48:1C:BE:48:11:C2:17:DB:8F:D8:43:06:A8:EA:59:5E:06:A9:02
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 0794
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bkgcvkgRwhfbj9hDBqjqWV4GqQI.roa
Signing time: Sat 14 May 2022 15:09:49 +0000
ROA not before: Sat 14 May 2022 15:09:49 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 138527
IP address blocks: 45.252.100.0/22 maxlen: 24
103.6.228.0/22 maxlen: 24
103.198.224.0/22 maxlen: 24
103.198.232.0/22 maxlen: 24
103.198.236.0/22 maxlen: 24
103.198.240.0/22 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940 (0x794)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: May 14 15:09:49 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=6E481CBE4811C217DB8FD84306A8EA595E06A902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:c3:41:23:18:3b:ee:17:28:e4:2d:63:1f:
2c:1c:33:1a:a6:fb:8a:09:c4:36:ad:90:9e:f3:74:
90:21:71:e6:37:e3:e1:24:d8:a6:6d:f1:26:cc:71:
63:f0:96:1b:36:fa:7e:da:30:4e:47:fe:73:f3:0d:
56:84:32:fe:1b:ae:57:db:dd:79:dc:04:f7:cb:54:
58:b0:84:d3:dd:c4:c5:c8:cc:4b:df:50:4a:e9:a2:
74:c3:84:dd:1a:3f:48:28:aa:2e:57:74:1c:d5:56:
21:a7:4f:67:bb:69:95:3f:b8:cf:c7:9d:7a:9d:ee:
c7:fb:9c:87:b8:3f:c2:f2:55:33:21:39:33:6e:00:
c0:d4:20:3b:bb:73:86:d1:19:3d:9b:b3:86:88:32:
ea:83:9a:2b:21:8b:18:49:72:b1:b9:85:95:21:e8:
f5:d7:d3:5d:72:55:78:6f:4d:5e:33:8b:31:ad:c9:
21:a0:c8:03:db:cb:f9:53:1a:ee:60:bb:e1:8e:5a:
50:cb:56:e3:71:c1:26:66:46:68:63:72:66:a0:c7:
de:41:9d:6e:3c:c5:a4:a7:42:21:b3:b0:2c:ef:e5:
37:a3:d4:cd:ab:84:f9:4b:7e:b0:7e:03:f1:87:39:
7d:e1:57:6f:e1:d6:73:16:cb:0f:0e:e3:94:aa:cc:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:48:1C:BE:48:11:C2:17:DB:8F:D8:43:06:A8:EA:59:5E:06:A9:02
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bkgcvkgRwhfbj9hDBqjqWV4GqQI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.100.0/22
103.6.228.0/22
103.198.224.0/22
103.198.232.0-103.198.243.255
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
43:13:cc:51:a0:83:8c:e0:47:f7:2c:22:78:99:20:f6:90:59:
6c:5e:74:af:73:f8:6c:58:ca:72:f6:b5:0a:ce:4e:62:e1:34:
89:ad:52:f1:70:55:00:05:a4:f7:7a:e4:27:2d:8e:74:5e:b7:
a6:0a:87:3e:16:a5:64:67:8c:2e:99:3c:d9:33:f3:19:f3:f5:
d6:72:16:ef:d6:f9:30:ef:57:4b:97:3e:bd:93:e4:1d:a6:6f:
48:49:a3:a1:ef:6c:85:4c:c0:80:67:7b:a6:68:d4:ea:16:73:
db:73:2c:3e:e3:61:0a:fe:b1:2a:3e:4c:30:aa:d8:c2:59:92:
b3:47:81:31:aa:0e:63:08:a5:8d:e2:a4:82:7e:93:0c:cc:3e:
62:e0:5c:48:5c:11:1a:78:58:3f:48:a0:66:67:f2:6f:fa:d1:
60:f3:e3:fd:5a:a9:dd:3a:b8:2a:d8:f0:0e:45:ac:45:55:ff:
2a:92:50:8f:65:d5:f5:e3:7f:bf:83:26:42:20:34:99:0f:9c:
79:40:a4:b8:ba:b9:e7:d8:89:b0:27:32:16:0d:7d:44:ae:a4:
26:3b:1d:5f:87:46:dc:92:31:2b:78:47:a7:bd:b9:a1:4b:3a:
27:ec:21:1d:87:c8:b8:e1:25:1f:9c:be:0a:04:55:08:f6:c3:
78:1f:b0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org