Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/5aGOEA2ReXFEDNUyQhd9hSlOY5s.roa
File: 5aGOEA2ReXFEDNUyQhd9hSlOY5s.roa (raw, json)
Hash identifier: kwPpnbZII1l+UNLoiVPYIlqyMhn2U84nykBRPOrVf6M=
Subject key identifier: E5:A1:8E:10:0D:91:79:71:44:0C:D5:32:42:17:7D:85:29:4E:63:9B
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 0AAD
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5aGOEA2ReXFEDNUyQhd9hSlOY5s.roa
Signing time: Wed 22 Jun 2022 10:03:35 +0000
ROA not before: Wed 22 Jun 2022 10:03:35 +0000
ROA not after: Fri 09 Jun 2023 06:51:49 +0000
asID: 4812
IP address blocks: 103.237.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2733 (0xaad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jun 22 10:03:35 2022 GMT
Not After : Jun 9 06:51:49 2023 GMT
Subject: CN=E5A18E100D917971440CD53242177D85294E639B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:01:4c:b4:a5:ce:ff:0a:ba:65:ea:8c:d7:6d:
76:04:d7:b2:fe:ca:0d:68:98:63:46:95:73:84:f5:
1d:ca:d6:a8:91:6e:96:78:d3:00:be:cd:32:a7:8f:
e9:be:46:da:83:63:43:a4:63:46:99:f0:27:db:fc:
d2:45:e7:e9:e6:3f:f4:8f:da:89:cf:2a:35:3d:2a:
b6:dc:be:dd:2d:1d:a9:26:66:e1:99:cc:74:42:7c:
96:39:62:6a:9f:cc:9c:32:e9:ad:00:80:ee:7f:a8:
78:9d:37:d8:8f:c1:e7:43:dd:03:70:68:ff:54:30:
02:8b:d4:6d:3f:bf:34:ba:2f:e9:79:a4:91:a2:a8:
4a:f9:a7:8e:4b:cb:25:60:4d:70:18:2f:ed:1a:8f:
3f:4a:b7:4d:11:c6:78:18:49:74:fa:7c:6f:66:1c:
85:4a:9d:45:84:67:31:8a:9e:e2:24:73:5e:05:03:
09:b1:27:0f:ce:b1:58:38:cb:f6:57:10:b6:96:43:
f6:47:35:09:4b:ce:74:93:20:f0:ae:ae:e0:ab:a7:
96:f6:ea:ef:e3:81:81:24:4e:31:cb:20:85:54:b4:
f9:3e:91:7d:ef:90:a1:c1:2b:f2:bd:9b:20:f8:7e:
55:22:9b:39:46:91:4e:bd:e3:bb:0d:a7:13:fa:37:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A1:8E:10:0D:91:79:71:44:0C:D5:32:42:17:7D:85:29:4E:63:9B
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5aGOEA2ReXFEDNUyQhd9hSlOY5s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.237.28.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:65:f4:03:8a:50:3e:a2:ca:41:d5:6e:64:2a:2a:c5:28:d0:
d4:36:34:cb:59:db:11:03:f6:c4:59:a3:ae:e9:64:20:de:69:
f7:9b:8e:70:7a:7c:55:41:79:e4:b4:cb:43:52:b3:cf:fa:63:
31:a6:a0:74:b9:98:7b:9a:b6:c9:df:c9:6d:15:f6:92:ce:69:
05:da:e0:9d:0b:d9:ba:03:1b:fe:84:14:9c:6a:b8:1d:30:b6:
63:ee:1c:ca:16:e2:f6:13:e0:eb:28:a9:91:65:b0:a8:b7:27:
43:91:bb:24:fd:f6:05:4f:7f:3f:f7:51:1a:f9:a8:14:2e:71:
8e:4c:17:06:4c:59:71:35:4e:02:95:77:98:04:03:b6:ae:9e:
10:84:f7:c3:30:6d:1f:7e:ea:6f:4a:7a:bf:31:0b:22:ae:3f:
44:df:0e:c0:a1:65:c8:ec:ab:c6:b6:e2:10:eb:18:35:14:f7:
a1:72:c1:db:6f:e2:eb:dc:80:9b:ea:ee:04:ff:61:64:48:76:
03:e4:b8:55:1e:17:94:11:ab:7b:15:f1:84:31:14:50:b1:ba:
01:4a:47:2e:62:6b:3e:b1:bb:61:01:bf:0c:31:58:15:f9:87:
98:f3:b9:47:ba:dc:49:32:ad:ad:bb:b6:ff:c0:cb:e0:37:e0:
cb:3c:d7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org