Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/Az-1T47teWLNsUXAtlx5fmE7uw8.roa
File: Az-1T47teWLNsUXAtlx5fmE7uw8.roa (raw, json)
Hash identifier: d78oiYU6SZYbbrPDeQHEdz//v8HTTW7wIXqavGK4EWY=
Subject key identifier: 03:3F:B5:4F:8E:ED:79:62:CD:B1:45:C0:B6:5C:79:7E:61:3B:BB:0F
Certificate issuer: /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Certificate serial: 03
Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/Az-1T47teWLNsUXAtlx5fmE7uw8.roa
Signing time: Wed 01 Jun 2022 07:08:09 +0000
ROA not before: Wed 01 Jun 2022 07:08:09 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 63199
IP address blocks: 106.3.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Validity
Not Before: Jun 1 07:08:09 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=033FB54F8EED7962CDB145C0B65C797E613BBB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:73:4f:71:5f:f1:ca:92:a4:78:1b:59:90:
2b:e9:25:4b:16:5e:70:df:17:e4:07:db:01:e9:eb:
9d:ee:63:3b:5e:64:98:ae:63:0c:d4:57:df:a4:2a:
be:4e:c8:06:9c:1e:a0:44:ea:a7:d5:c8:e6:39:ee:
4b:99:fc:1f:e0:1c:40:4d:9d:ba:03:ea:c1:df:0a:
cf:56:11:98:34:dd:8f:13:e8:3a:58:94:42:83:d1:
db:9c:6a:9c:bf:44:a7:4e:30:9a:f9:91:d0:1b:90:
05:6d:0e:be:24:fd:bd:fc:3e:d4:5d:1a:0a:7c:05:
d2:df:be:e8:e4:4d:75:53:ad:7d:c3:80:45:8d:2e:
9a:db:52:85:fc:f4:c6:e1:48:4b:1b:2d:60:f2:f0:
50:ec:d3:72:13:7b:5b:16:67:6b:4f:14:85:6a:22:
a9:71:98:2b:de:ce:59:ca:5c:43:cb:ef:5a:63:2a:
18:9d:fb:96:a1:a5:d7:d0:a2:86:a6:b1:d4:9c:79:
8d:0b:b0:b9:8d:41:a5:3e:7b:51:0e:5f:24:23:38:
2a:90:46:83:e4:b9:22:9b:8e:15:89:18:b2:82:b9:
36:04:a5:a0:61:7d:a9:9a:b3:1a:21:b9:6a:4b:6a:
a5:b4:69:4b:9e:7e:25:89:94:73:56:2f:97:47:4f:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:B5:4F:8E:ED:79:62:CD:B1:45:C0:B6:5C:79:7E:61:3B:BB:0F
X509v3 Authority Key Identifier:
keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/Az-1T47teWLNsUXAtlx5fmE7uw8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.3.139.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d8:a8:64:fd:7d:71:75:3f:bd:a5:4c:cd:b3:59:01:9e:f5:
d9:a2:cf:f1:3a:57:5a:74:bb:fe:42:e4:5c:02:3b:e5:d4:62:
61:b1:0b:05:a1:3b:4e:64:3f:f1:2f:c7:4a:54:7e:cf:9d:e2:
f5:78:d1:18:29:a9:73:2d:dd:cb:05:6c:11:ce:b4:94:7e:0c:
60:9f:b3:b2:b0:77:ce:39:25:59:00:01:f7:15:9b:d4:fe:7f:
9d:d2:18:21:eb:48:29:cf:6b:7c:b9:a2:da:15:11:61:2a:b7:
46:c3:b1:3a:e7:27:2d:be:4d:90:0a:97:c7:18:a9:bb:3c:b9:
fb:5d:72:70:07:03:ff:0b:e2:3f:65:76:f5:db:17:95:69:ef:
3a:20:5a:a5:11:3d:f4:1b:49:ab:06:d2:ea:50:d4:5f:10:32:
6a:0b:c5:6e:16:23:8d:ca:25:6c:36:11:a7:91:39:6b:7a:75:
37:19:f2:30:b9:b0:f4:a5:cb:4b:13:2f:b0:d4:d2:66:4e:5b:
76:78:68:0b:d8:82:ad:18:68:d5:50:2d:1d:e3:c4:32:c0:93:
36:9a:2b:d1:af:43:72:96:59:3b:48:24:c1:91:17:eb:76:93:
99:6a:44:2e:10:02:96:d0:4a:58:e7:c9:59:60:c6:19:30:1f:
32:31:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org