Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/wfj9SBFHTrtSwNCnl3VJZ3YvEUE.roa
File: wfj9SBFHTrtSwNCnl3VJZ3YvEUE.roa (raw, json)
Hash identifier: zM95Z6oczmt3PUqNQVDe+JxE+gZd6382t+en0vqnDxY=
Subject key identifier: C1:F8:FD:48:11:47:4E:BB:52:C0:D0:A7:97:75:49:67:76:2F:11:41
Certificate issuer: /CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Certificate serial: 03
Authority key identifier: 59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/wfj9SBFHTrtSwNCnl3VJZ3YvEUE.roa
Signing time: Wed 01 Jun 2022 07:10:12 +0000
ROA not before: Wed 01 Jun 2022 07:10:12 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 398704
IP address blocks: 103.232.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591C5B03C97CE0FE3EC78E23C6856F792C20D404
Validity
Not Before: Jun 1 07:10:12 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=C1F8FD4811474EBB52C0D0A797754967762F1141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:a1:20:8c:43:2b:4b:33:5e:dd:32:e7:74:
f8:85:1f:c4:69:93:3e:17:fb:0c:b7:e0:c4:af:79:
1d:2b:a4:fa:1e:8a:50:b9:48:cb:6b:3b:57:9f:a3:
a0:5f:2f:2c:49:f2:de:33:30:17:a4:4d:6c:f3:aa:
a5:7d:3d:39:0e:56:03:3a:a7:91:91:8a:49:81:d5:
87:45:ec:bd:3e:3d:43:35:ab:29:2d:da:72:be:56:
e3:6b:56:5e:9d:fa:b7:75:0b:33:53:85:ee:5d:b4:
82:a0:ae:66:7a:53:40:57:c5:a3:53:4f:d0:00:32:
c3:8f:61:d3:6a:fc:d1:2e:4c:52:ef:bb:80:f4:0a:
c9:8e:b3:a7:7f:31:08:45:b0:b3:8d:d1:67:1b:65:
af:9a:eb:51:1f:d7:0d:de:a5:09:81:11:6a:59:57:
a5:b0:92:10:0d:87:a7:84:69:7c:2c:22:b7:66:c4:
b9:94:63:c6:7f:d1:f1:6c:cc:82:60:12:7d:a5:e1:
3d:02:7f:d9:e1:7c:38:7c:93:b5:75:23:de:8b:7d:
82:cd:b0:a0:ec:60:2f:c3:27:81:39:cd:de:85:1d:
e9:63:6b:5d:d5:82:96:a7:46:46:eb:0a:d9:40:1d:
eb:77:d2:4a:b0:70:54:3e:77:41:1b:42:b9:34:86:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:FD:48:11:47:4E:BB:52:C0:D0:A7:97:75:49:67:76:2F:11:41
X509v3 Authority Key Identifier:
keyid:59:1C:5B:03:C9:7C:E0:FE:3E:C7:8E:23:C6:85:6F:79:2C:20:D4:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/WRxbA8l84P4-x44jxoVveSwg1AQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WRxbA8l84P4-x44jxoVveSwg1AQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/wfj9SBFHTrtSwNCnl3VJZ3YvEUE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.232.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:c1:2a:d7:8d:46:16:7b:4e:e7:da:5c:bb:67:50:30:b2:41:
2a:72:b9:74:47:7a:3d:b2:17:c7:68:1e:d4:64:14:3e:cd:1a:
e4:17:ef:a7:b5:41:ee:c2:ff:e5:6e:98:72:48:b5:06:68:ca:
ca:ea:4b:95:08:8d:35:e0:cd:ea:79:2d:f1:84:5e:37:1e:7e:
c2:11:51:e4:59:2e:07:6d:89:a1:ae:75:d6:59:25:35:f6:0d:
55:d2:d0:22:04:02:ee:95:ff:dc:fe:90:33:8c:0e:d8:eb:d6:
e4:bd:0b:c6:46:53:e4:b3:c2:78:24:f1:08:cf:b8:44:1e:7f:
eb:4b:75:15:f6:2e:ae:44:58:bc:0c:0e:5f:75:b4:1f:83:0e:
a5:d7:73:4e:ef:4b:aa:c1:d7:37:e1:2f:43:40:0b:64:e3:80:
48:c8:fd:b7:29:3b:f0:de:d4:49:f4:cb:3b:b1:f9:76:37:69:
21:43:29:fa:ea:9f:48:47:95:8b:bb:37:cf:3e:26:4b:a3:b4:
0e:d6:fd:1a:c7:0d:78:bd:e9:66:d3:f4:65:fe:b4:2f:d9:53:
06:04:ec:a6:6a:37:1f:b9:23:d3:aa:41:53:55:b2:e4:ec:3b:
d8:a1:bf:38:94:2c:06:e3:dc:d9:91:5a:bd:c0:8e:e4:12:f8:
dc:08:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org