Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/nSMpnFU7LCG7FAx7Rdhrzi6XqLg.roa
File: nSMpnFU7LCG7FAx7Rdhrzi6XqLg.roa (raw, json)
Hash identifier: KsMvdFTvzsyhAO5A19xLoRhpu4fug68LhSOz5v2pYrQ=
Subject key identifier: 9D:23:29:9C:55:3B:2C:21:BB:14:0C:7B:45:D8:6B:CE:2E:97:A8:B8
Certificate issuer: /CN=018C7BC07F7EC1813FECA82E6EE64ECEB1974DCC
Certificate serial: 09DC
Authority key identifier: 01:8C:7B:C0:7F:7E:C1:81:3F:EC:A8:2E:6E:E6:4E:CE:B1:97:4D:CC
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AYx7wH9-wYE_7KgubuZOzrGXTcw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/nSMpnFU7LCG7FAx7Rdhrzi6XqLg.roa
Signing time: Fri 22 Apr 2022 07:14:26 +0000
ROA not before: Fri 22 Apr 2022 07:14:26 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63199
IP address blocks: 106.3.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2524 (0x9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018C7BC07F7EC1813FECA82E6EE64ECEB1974DCC
Validity
Not Before: Apr 22 07:14:26 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=9D23299C553B2C21BB140C7B45D86BCE2E97A8B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:04:f1:a4:f0:7f:18:18:7f:e6:7c:85:e4:
5f:8e:fd:a4:c8:7e:10:10:3d:e0:67:f1:97:09:cc:
31:e6:30:2b:75:27:f7:38:62:70:4d:ea:ae:95:ff:
45:71:f7:10:64:53:05:98:2a:cb:4c:94:28:28:21:
80:6f:0f:47:cc:14:50:47:52:29:d3:66:17:47:44:
04:a1:ad:29:f8:9f:19:6d:ee:77:ce:8f:b7:22:dc:
e5:5c:44:72:5e:ec:df:0f:55:9b:e9:44:c2:f1:ca:
4f:3e:0e:df:46:a8:3c:ea:46:b5:fe:2b:69:52:45:
03:68:10:59:69:14:0d:97:a8:8b:ca:fb:f8:58:0e:
3f:e7:6d:69:b3:0b:4b:d3:01:53:6e:07:e1:ad:71:
53:ad:14:d0:6d:c2:cd:59:10:ca:e3:a0:20:e1:e8:
7f:68:cf:7d:90:55:36:da:11:2d:da:44:3a:fa:6a:
63:8b:30:66:3f:77:a6:66:a2:49:5c:8d:2a:bc:bb:
70:a5:14:4c:32:46:56:77:19:31:4f:5c:ae:00:b2:
37:fc:88:ba:f8:32:ea:08:0d:c4:16:a1:b6:f4:31:
ea:b9:97:77:75:8d:69:bf:b2:21:14:49:d8:04:68:
ff:d6:65:03:2c:97:ba:78:fc:f3:e8:eb:37:c8:63:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:29:9C:55:3B:2C:21:BB:14:0C:7B:45:D8:6B:CE:2E:97:A8:B8
X509v3 Authority Key Identifier:
keyid:01:8C:7B:C0:7F:7E:C1:81:3F:EC:A8:2E:6E:E6:4E:CE:B1:97:4D:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/AYx7wH9-wYE_7KgubuZOzrGXTcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AYx7wH9-wYE_7KgubuZOzrGXTcw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/nSMpnFU7LCG7FAx7Rdhrzi6XqLg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.3.139.0/24
Signature Algorithm: sha256WithRSAEncryption
45:64:e4:8c:5e:9b:b1:45:95:c4:29:ab:68:91:7f:84:42:3c:
71:aa:fa:db:d7:02:10:1a:91:93:f7:92:ad:8b:71:f6:3b:eb:
28:18:72:c1:2a:57:a9:ba:a9:83:1a:bc:c7:c9:82:98:12:cb:
72:7a:09:57:f8:03:18:35:45:fa:67:8d:1c:cd:28:41:3d:47:
a9:05:76:95:b7:e7:20:2a:7f:63:cc:eb:b1:7d:8d:b4:ce:3f:
df:46:1b:18:68:9d:43:11:33:4a:5c:d5:ce:5c:0c:5d:3b:88:
38:59:8a:be:99:fd:0c:18:2d:ec:0e:98:fb:c5:eb:8e:67:a0:
c0:a4:7b:f1:11:bc:2e:9a:7e:19:e1:83:64:97:ce:82:1b:23:
ce:00:8a:41:be:b2:eb:07:48:2f:8c:d0:66:e8:af:77:83:41:
d6:6b:34:92:8e:23:49:10:f0:46:9e:2f:a9:a2:aa:ec:e6:07:
6d:3e:24:d4:18:03:b6:25:62:a5:18:60:ab:6b:13:38:56:6b:
e8:3c:19:43:2f:27:4d:0f:0e:72:16:3d:de:9e:ae:89:56:21:
a2:f9:f8:29:ee:09:7e:13:76:08:f6:48:6e:b4:8e:ae:ba:da:
a4:b7:ce:ed:d6:c6:3c:b3:53:ac:f0:c8:c6:ff:3e:55:5a:75:
61:a8:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org