Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/rDigSCKT7MGQwjoze2VoRFrISr4.roa
File: rDigSCKT7MGQwjoze2VoRFrISr4.roa (raw, json)
Hash identifier: R722+jrfxwmFsqutR7VQzU3FElNRqtQaFUoUt2onJWU=
Subject key identifier: AC:38:A0:48:22:93:EC:C1:90:C2:3A:33:7B:65:68:44:5A:C8:4A:BE
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 0A
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rDigSCKT7MGQwjoze2VoRFrISr4.roa
Signing time: Thu 27 May 2021 05:01:59 +0000
ROA not before: Thu 27 May 2021 05:01:59 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139076
IP address blocks: 103.221.32.0/22 maxlen: 24
103.221.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: May 27 05:01:59 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=AC38A0482293ECC190C23A337B6568445AC84ABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:00:89:fe:d7:f5:ac:06:5f:f6:14:0b:be:9d:
0b:c1:67:0b:22:35:08:d6:45:fa:d0:d7:4c:34:51:
51:9e:3f:ba:eb:a2:9e:00:ab:a8:d8:81:44:74:d5:
18:7a:a6:e0:d4:4b:24:08:a0:7d:69:2c:01:eb:bc:
4d:b9:34:51:23:8d:03:f6:f6:50:08:88:a2:c0:61:
a4:17:25:8f:c7:87:1d:43:32:6e:88:13:29:84:fa:
85:ae:36:26:64:ff:a9:51:e0:89:23:92:76:a2:0f:
2c:66:81:c3:a6:93:8d:b9:91:07:54:0c:15:63:6d:
db:5c:27:74:f1:86:65:7d:c9:b0:e0:cb:71:ac:fe:
2f:d1:b8:ec:43:e4:20:c4:c8:01:47:de:ef:09:63:
d2:97:ac:8e:af:30:50:58:ab:a2:a6:4a:14:cf:f6:
56:b7:9d:92:d2:a1:1c:0e:56:aa:c0:ac:ce:ea:7d:
f4:cd:48:73:3a:f3:d4:64:c7:a1:be:b3:fc:7b:ca:
c0:a2:d4:37:77:cc:80:13:e2:9b:a7:05:11:ec:c6:
64:88:19:9b:96:2f:6f:06:82:02:2d:57:05:d1:a4:
c7:68:0c:d5:e2:58:4b:3f:e1:bc:cf:17:ed:ce:da:
55:60:e4:00:f0:89:99:9e:85:aa:08:88:28:fe:72:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:A0:48:22:93:EC:C1:90:C2:3A:33:7B:65:68:44:5A:C8:4A:BE
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rDigSCKT7MGQwjoze2VoRFrISr4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.221.32.0/22
103.221.48.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b6:9d:cc:b2:7b:76:5c:2e:74:2a:c8:8b:c8:b3:c7:75:55:
30:c0:5c:2b:bd:c7:a6:ec:87:be:6f:04:40:cc:33:5f:59:ad:
ed:21:23:a2:7e:34:5b:5e:b3:91:f7:45:cb:66:28:b2:38:c2:
f9:9f:a2:90:9c:5a:0a:b6:ab:dc:06:47:5d:92:ee:8e:4a:53:
9e:b0:6d:d1:69:45:fb:76:ff:b1:e8:89:5b:09:af:90:b5:6b:
32:3e:34:af:be:4b:a3:8b:1d:a6:c0:6d:3e:a2:07:55:66:ac:
ef:05:1e:97:e4:03:20:fa:e3:35:83:7a:10:40:16:9d:04:01:
ac:1d:61:69:1f:8f:d1:3a:4a:1a:5d:61:8c:62:be:c3:e3:c2:
01:27:e1:79:96:8f:fd:20:76:1e:3d:cc:f8:74:33:c2:76:a9:
e7:f6:c8:a1:80:ee:c9:35:2f:63:e5:f8:69:33:ae:b4:cb:74:
99:a4:bd:fd:58:ac:e1:24:6f:76:e2:0c:31:57:8a:30:74:43:
c8:e7:e8:5d:90:5a:33:8a:91:a1:70:04:da:bc:8e:c6:d4:10:
be:0e:bd:ac:3f:66:41:9f:91:66:ed:f4:f5:f2:36:09:b0:77:
f8:81:ba:93:61:6b:dd:7c:fa:e8:87:b4:f3:e8:e4:4f:c3:dc:
0d:94:3c:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org