Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/nh20stPYpjPoX_F-nZuoi8lVuN8.roa
File: nh20stPYpjPoX_F-nZuoi8lVuN8.roa (raw, json)
Hash identifier: ylmmnDNq2EJV/sbHSRo17zVqSeYAhmhi46hTFCjsmAY=
Subject key identifier: 9E:1D:B4:B2:D3:D8:A6:33:E8:5F:F1:7E:9D:9B:A8:8B:C9:55:B8:DF
Certificate issuer: /CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Certificate serial: 094D
Authority key identifier: E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/nh20stPYpjPoX_F-nZuoi8lVuN8.roa
Signing time: Tue 07 Jun 2022 10:09:27 +0000
ROA not before: Tue 07 Jun 2022 10:09:27 +0000
ROA not after: Wed 07 Jun 2023 03:34:43 +0000
asID: 58854
IP address blocks: 103.27.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E56DA4C275F3CCC92D086202A1EDA7783F0C3D0D
Validity
Not Before: Jun 7 10:09:27 2022 GMT
Not After : Jun 7 03:34:43 2023 GMT
Subject: CN=9E1DB4B2D3D8A633E85FF17E9D9BA88BC955B8DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:a2:8b:f0:d0:1f:21:ec:d1:ef:53:a1:3f:
b4:15:6f:62:29:4b:de:53:fa:75:68:32:56:8c:3d:
c0:f5:79:9e:90:73:08:ae:ab:e3:1d:f9:9d:1d:b1:
55:66:3d:dc:88:7b:53:38:09:aa:4d:00:0d:1a:99:
a5:aa:fd:76:fe:0c:ca:a4:f5:c3:04:b1:ae:44:97:
ae:28:64:2d:4d:19:bd:33:b2:f9:a7:e1:1a:4c:e4:
f8:66:08:8f:55:7f:29:1c:f9:1d:0f:d4:c1:22:c7:
19:93:45:78:15:84:63:1b:5a:7b:fd:28:77:0e:b5:
2f:e1:c6:84:c6:32:a7:2d:ff:ac:49:44:a6:a5:06:
73:60:0e:fc:fc:2a:47:2a:c0:32:99:9f:83:fb:a7:
61:2d:f6:2f:16:f0:c6:fc:43:97:c6:87:18:d1:94:
7a:a6:3f:a7:7b:b6:8d:d6:8e:d8:7e:9b:64:f5:0d:
6b:9b:f9:88:3f:81:b1:9d:07:8d:9b:c1:f2:60:cb:
24:cd:b1:88:11:37:c1:cc:f5:e9:7d:5d:08:2d:de:
94:8d:8e:7f:91:4b:68:75:6d:d5:f8:d0:29:40:a7:
cf:ad:12:42:32:2e:a5:a7:82:8f:14:2a:ac:01:e4:
11:0a:df:dd:ef:33:60:5b:f8:68:73:29:19:78:fb:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:B4:B2:D3:D8:A6:33:E8:5F:F1:7E:9D:9B:A8:8B:C9:55:B8:DF
X509v3 Authority Key Identifier:
keyid:E5:6D:A4:C2:75:F3:CC:C9:2D:08:62:02:A1:ED:A7:78:3F:0C:3D:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/5W2kwnXzzMktCGICoe2neD8MPQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5W2kwnXzzMktCGICoe2neD8MPQ0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/nh20stPYpjPoX_F-nZuoi8lVuN8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f7:ee:29:80:05:6b:f2:90:ad:6a:95:f6:84:35:dc:11:22:
b8:07:0a:f6:60:4a:79:b0:15:17:b7:90:91:56:8a:80:c6:3a:
6e:1a:14:23:1d:4a:49:e2:4b:f9:e7:07:46:64:54:37:40:73:
6b:ff:f5:cc:38:7a:93:b8:15:3d:a8:c3:ce:bc:70:1a:4f:c2:
7b:e6:d2:6e:32:10:bf:62:42:ac:fb:45:b3:f2:3c:19:3a:ab:
89:11:1a:9f:9d:83:0a:99:cf:27:27:4e:0b:d8:ad:1f:f4:ba:
3a:81:23:c9:00:df:c3:88:6d:fe:a5:80:f8:da:d8:fb:f9:9f:
15:ef:a6:c4:e8:fe:3f:67:b8:ed:e9:60:e6:df:dd:ed:71:ce:
aa:3d:72:8a:a0:21:3b:7e:d4:f1:7b:74:cd:59:ae:e0:43:cd:
d7:2e:51:b6:1b:96:76:3b:b0:46:a3:ac:44:95:ff:24:05:28:
37:68:9d:5a:4e:70:51:45:0e:ad:6a:e4:d1:d8:fc:4c:e6:b2:
90:6d:fc:3a:de:60:25:ca:e7:9b:84:e2:d3:b6:25:e1:2c:10:
99:94:f7:90:d2:ca:4b:88:b4:f5:74:dc:3d:59:9e:45:a0:77:
7b:40:87:06:ab:3e:ba:de:1c:09:50:e3:d3:84:ab:ee:a8:16:
28:6b:3a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org