Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/861/ohC0N2JJbe4aEa4OXAM8twIGPtw.roa
File: ohC0N2JJbe4aEa4OXAM8twIGPtw.roa (raw, json)
Hash identifier: QXCE55i9z7e3BIBkrhWsAzBv7XZ5iitJ904N1isc0AE=
Subject key identifier: A2:10:B4:37:62:49:6D:EE:1A:11:AE:0E:5C:03:3C:B7:02:06:3E:DC
Certificate issuer: /CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E
Certificate serial: 0A
Authority key identifier: 61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/ohC0N2JJbe4aEa4OXAM8twIGPtw.roa
Signing time: Tue 19 Apr 2022 01:11:04 +0000
ROA not before: Tue 19 Apr 2022 01:11:04 +0000
ROA not after: Tue 18 Apr 2023 06:11:16 +0000
asID: 59043
IP address blocks: 103.56.184.0/24 maxlen: 24
103.56.185.0/24 maxlen: 24
103.56.186.0/24 maxlen: 24
103.56.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615BCE8F7F8A83DB939AE0F42FA05413B285181E
Validity
Not Before: Apr 19 01:11:04 2022 GMT
Not After : Apr 18 06:11:16 2023 GMT
Subject: CN=A210B43762496DEE1A11AE0E5C033CB702063EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:5f:7c:79:ba:6a:b5:9c:95:05:43:be:21:
31:47:ce:94:a8:07:8f:bc:11:84:b7:07:eb:7e:88:
93:f5:fe:d3:53:be:ce:d5:e1:9c:23:05:43:5b:e8:
dd:8c:6f:f4:9e:ae:fb:b6:0d:01:7c:f1:58:fb:7d:
14:53:cf:e9:4c:ac:df:fb:0d:dc:8c:3c:85:e7:b5:
52:48:78:a4:c4:36:db:35:ea:93:9d:ff:c6:c5:1a:
96:6f:19:45:7c:0e:9d:99:d6:84:a9:6d:a8:eb:97:
68:a0:d0:cf:23:d1:da:36:ee:b0:6b:ee:3a:2b:42:
0d:f9:ab:4f:5c:a7:0f:93:06:ee:ba:8f:5f:b2:dc:
57:9f:26:b2:e3:d0:d1:90:2a:b4:e0:aa:26:a9:98:
44:fc:68:d1:b9:e7:b0:bd:5b:96:e6:87:e3:cf:8f:
d1:38:61:70:47:34:b3:6c:f6:58:79:13:31:9d:03:
43:47:86:68:4d:6e:d1:4b:36:c0:8c:14:c3:cc:2f:
02:b7:56:38:0f:57:9e:b6:6f:39:82:81:2c:86:0f:
b4:78:7f:7e:e9:f5:f1:f2:2d:91:56:80:6b:a3:54:
42:e1:71:82:0c:ac:f8:7c:c6:03:0a:ab:c4:ac:82:
03:c4:0f:f8:88:8a:32:ff:80:84:70:bc:c1:7e:7b:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:10:B4:37:62:49:6D:EE:1A:11:AE:0E:5C:03:3C:B7:02:06:3E:DC
X509v3 Authority Key Identifier:
keyid:61:5B:CE:8F:7F:8A:83:DB:93:9A:E0:F4:2F:A0:54:13:B2:85:18:1E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YVvOj3-Kg9uTmuD0L6BUE7KFGB4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/861/ohC0N2JJbe4aEa4OXAM8twIGPtw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.56.184.0/22
Signature Algorithm: sha256WithRSAEncryption
45:8b:09:a6:fd:ca:9b:3f:c6:17:64:65:2d:25:5a:d4:a6:da:
03:db:f4:79:49:9b:7d:2d:55:f5:2a:b4:20:a2:c7:b0:4e:6d:
3e:ac:8e:88:a7:c0:e2:63:ad:04:87:de:2b:60:de:0f:1f:27:
96:30:f7:3f:e4:90:c1:b1:fd:38:32:80:f2:d6:2c:f4:87:36:
0b:b5:99:2d:93:4b:d6:34:04:f6:28:23:0f:2d:66:26:98:94:
68:94:74:70:18:0a:3a:ec:76:a3:80:34:84:54:3a:fa:2d:b5:
35:f9:73:82:5e:c1:8b:74:d2:82:69:08:c7:d6:bf:7a:e9:3e:
bf:f6:5e:18:96:94:ea:25:e2:26:d3:d6:f1:5b:13:6c:af:ed:
f8:61:0e:b5:5c:70:25:ba:6e:44:72:84:a2:63:d6:e9:b9:53:
3e:b7:76:e9:9f:b6:e6:d3:0b:25:28:14:de:dc:48:49:af:ce:
8b:08:80:b3:76:24:3e:78:bd:80:b1:66:5c:2a:b8:d1:9d:ef:
f6:d7:91:b2:0e:cf:76:b6:d3:00:28:fa:38:8b:e7:31:14:60:
43:ea:6c:94:21:77:5a:2b:13:a4:d5:d5:6b:8a:d3:80:15:c3:
5e:84:1f:65:e5:d0:56:b2:8d:88:43:2e:d7:8d:f5:ff:f3:23:
d7:79:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:20 2023 by rpki-client on console-ams.rpki-client.org