Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/cuqAWBo9CpxeDZi29X9yTRH9X_k.roa
File: cuqAWBo9CpxeDZi29X9yTRH9X_k.roa (raw, json)
Hash identifier: uTPxzNF0EkqeznHzhPcAad3YxuB9vg/WR9ps6R8t4KA=
Subject key identifier: 72:EA:80:58:1A:3D:0A:9C:5E:0D:98:B6:F5:7F:72:4D:11:FD:5F:F9
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 07
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cuqAWBo9CpxeDZi29X9yTRH9X_k.roa
Signing time: Thu 27 May 2021 05:01:57 +0000
ROA not before: Thu 27 May 2021 05:01:57 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 59083
IP address blocks: 43.254.153.0/24 maxlen: 24
43.254.154.0/23 maxlen: 24
43.254.155.0/24 maxlen: 24
59.153.164.0/22 maxlen: 24
59.153.168.0/23 maxlen: 24
103.7.140.0/22 maxlen: 24
103.7.140.0/23 maxlen: 24
103.7.142.0/23 maxlen: 24
103.10.0.0/23 maxlen: 24
103.10.0.0/24 maxlen: 24
103.10.1.0/24 maxlen: 24
103.10.2.0/23 maxlen: 24
103.10.2.0/24 maxlen: 24
103.10.3.0/24 maxlen: 24
103.24.116.0/22 maxlen: 24
103.24.116.0/23 maxlen: 24
103.24.116.0/24 maxlen: 24
103.24.117.0/24 maxlen: 24
103.24.118.0/23 maxlen: 24
103.24.118.0/24 maxlen: 24
103.24.119.0/24 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
150.242.236.0/23 maxlen: 24
202.89.108.0/22 maxlen: 24
202.89.108.0/23 maxlen: 24
202.89.110.0/23 maxlen: 24
202.136.248.0/22 maxlen: 24
202.136.248.0/23 maxlen: 24
202.136.249.0/24 maxlen: 24
202.136.250.0/23 maxlen: 24
202.136.250.0/24 maxlen: 24
202.140.140.0/22 maxlen: 24
202.140.140.0/23 maxlen: 24
202.140.142.0/23 maxlen: 24
202.174.124.0/22 maxlen: 24
203.90.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: May 27 05:01:57 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=72EA80581A3D0A9C5E0D98B6F57F724D11FD5FF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:7a:0a:9c:f0:c2:c6:9b:04:c8:ec:3e:a3:
8f:f9:50:6c:28:e2:32:0b:f3:c7:23:3b:75:53:7b:
fb:45:e5:15:b7:1b:a7:80:3b:de:6d:97:b5:99:bf:
51:7b:3e:c8:ef:70:5b:26:42:41:7c:d0:1f:5c:a1:
f2:02:56:9d:f9:71:52:7d:7f:88:8a:0e:2c:39:ac:
95:c1:ea:06:f2:7d:60:b2:3c:a4:b2:4d:14:c9:5a:
ff:97:bf:6d:86:53:95:0d:7c:89:fb:b8:8e:29:50:
80:fd:2c:9b:79:06:5b:3b:03:29:29:26:02:65:da:
43:18:58:7e:90:ef:4a:e7:50:01:7f:b5:12:1b:dc:
aa:34:c0:5f:eb:8e:8c:59:75:f9:a6:69:24:2e:34:
7d:32:1f:79:0f:91:17:08:6b:a2:22:51:0e:e9:14:
ad:e1:3f:eb:45:2f:e0:f4:7e:70:69:c5:93:8a:37:
7f:63:ec:25:87:d4:ba:ff:d5:7a:23:a4:56:1c:ea:
62:01:78:73:bf:3f:58:2b:fc:4b:72:22:4a:0a:78:
12:8b:ae:b7:0b:4f:23:7a:e6:50:bc:d4:78:78:e8:
61:8b:85:6e:c6:b0:0e:ee:37:3c:20:2a:8b:bc:4f:
da:5a:03:f8:58:f5:12:9d:53:1d:60:1b:36:6b:b7:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EA:80:58:1A:3D:0A:9C:5E:0D:98:B6:F5:7F:72:4D:11:FD:5F:F9
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/cuqAWBo9CpxeDZi29X9yTRH9X_k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.153.0-43.254.155.255
59.153.164.0-59.153.169.255
103.7.140.0/22
103.10.0.0/22
103.24.116.0/22
103.221.16.0/20
150.242.236.0/23
202.89.108.0/22
202.136.248.0/22
202.140.140.0/22
202.174.124.0/22
203.90.12.0/22
Signature Algorithm: sha256WithRSAEncryption
51:72:34:1f:28:f9:0f:d4:c1:c9:12:19:f8:88:a7:ab:41:a2:
11:ef:20:9d:84:d5:37:b8:12:21:07:7c:80:48:69:4f:f6:85:
5c:65:5f:32:31:85:9f:e9:d4:46:a7:a5:4b:09:66:b6:de:3b:
6b:79:76:01:19:90:23:6c:a8:97:21:80:75:73:0d:f5:6e:a8:
4e:12:22:7a:9a:f4:3f:02:2a:87:b7:0e:08:70:f3:83:cb:a7:
0b:ac:bf:12:a4:7d:a9:f4:c6:10:9a:48:57:82:42:5a:c0:1d:
00:94:74:1b:64:22:e1:c6:84:79:d3:6b:3e:26:5e:84:7c:0b:
5e:db:45:68:ba:a2:23:3a:c4:69:7c:65:4d:1d:ef:ed:d0:89:
f7:0c:f3:af:e2:b0:ab:fa:ad:bf:52:64:4b:af:b5:75:15:cb:
9c:4f:fc:95:20:c1:9e:27:fb:ba:d2:43:80:d9:22:6c:81:31:
7a:3d:6a:ca:53:8f:d3:b6:5b:94:c1:ef:db:d2:04:4a:60:d1:
a1:3e:28:b3:14:f0:94:64:35:d0:00:7a:41:d2:ad:68:aa:55:
5e:d3:30:5c:69:7b:5a:9d:9e:fc:32:73:58:86:e3:b2:1e:c3:
56:a8:d7:9b:d2:ce:ed:34:65:76:bb:b2:9d:83:3e:6f:2f:85:
e5:62:6d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org