Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/bCgXT2tFtSKVwY4UZDmBzvd_nEg.roa
File: bCgXT2tFtSKVwY4UZDmBzvd_nEg.roa (raw, json)
Hash identifier: s6AzUIpUu+Mkt/CouoLrOCLmSvBLDFjwwBAXXrevcnE=
Subject key identifier: 6C:28:17:4F:6B:45:B5:22:95:C1:8E:14:64:39:81:CE:F7:7F:9C:48
Certificate issuer: /CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Certificate serial: 0658
Authority key identifier: 7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/bCgXT2tFtSKVwY4UZDmBzvd_nEg.roa
Signing time: Wed 13 Apr 2022 06:38:51 +0000
ROA not before: Wed 13 Apr 2022 06:38:51 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 7018
IP address blocks: 101.49.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1624 (0x658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Validity
Not Before: Apr 13 06:38:51 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=6C28174F6B45B52295C18E14643981CEF77F9C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:44:6f:24:10:01:fe:27:ce:6d:9a:a6:70:
e9:dd:b8:17:d4:46:db:1b:10:47:2e:08:c4:b0:14:
76:7a:59:4f:29:fc:0b:ad:44:f3:60:08:4a:4e:a4:
e7:8e:7e:4f:3c:82:4d:02:0d:2a:1c:72:11:85:0a:
4c:b1:53:7f:39:91:d2:33:75:5c:f9:f3:25:4b:7f:
ca:92:f3:45:79:64:6a:fa:c0:f3:e5:af:d6:5b:9b:
fd:eb:39:6c:a6:a5:5b:b6:7b:c7:00:ca:20:ee:e1:
0a:e1:34:ea:ab:36:6f:9b:5f:1a:c9:1c:79:a9:ef:
59:c2:eb:2f:f7:91:2c:30:5f:3a:06:c1:6a:15:8f:
4c:1d:d8:6b:07:21:18:d8:ea:ab:53:12:7b:b4:fb:
3b:73:4e:64:08:81:72:b7:59:0a:49:fe:92:63:ff:
05:f0:fc:5d:80:75:c6:2d:cf:49:2a:cf:b1:1f:ba:
49:49:60:4b:31:e3:a7:5b:7f:3b:8d:5e:96:c5:63:
a0:ca:f7:73:16:ad:f2:67:b2:ba:09:bd:bb:32:36:
a1:9e:fd:a7:db:2f:89:4d:8c:9f:ec:fc:8d:d7:f8:
c0:e3:e3:f8:9b:2b:1a:0c:c4:c6:1d:ad:5d:18:23:
07:1e:cc:fa:82:ac:15:c7:67:c8:60:da:e0:35:b7:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:28:17:4F:6B:45:B5:22:95:C1:8E:14:64:39:81:CE:F7:7F:9C:48
X509v3 Authority Key Identifier:
keyid:7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/fxbsYdIUp0ANAGShh6E9zMHnhUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/bCgXT2tFtSKVwY4UZDmBzvd_nEg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.0.0/17
Signature Algorithm: sha256WithRSAEncryption
22:21:98:9f:4e:4b:3f:71:21:5d:6c:8b:04:44:7b:fa:dc:23:
7f:2d:d1:bd:bb:ec:06:0e:a1:92:cb:56:ff:be:11:f6:9f:7c:
35:5a:77:d9:98:7e:3e:b9:cf:d3:f4:a4:ef:fd:14:3b:94:9f:
9e:7e:98:5d:59:26:b7:84:18:45:06:84:9e:10:78:27:e9:62:
c4:82:a4:64:f9:20:a2:0d:8f:70:ca:93:cc:c1:a5:c7:9a:9e:
c4:9e:a5:d9:e6:7f:99:4a:b9:b7:0d:16:45:fc:14:c4:42:e5:
96:bc:83:98:13:b7:dd:14:0a:51:59:63:5e:a3:a5:07:56:05:
7e:3c:ba:9e:95:49:10:30:b3:ed:aa:2c:d9:28:68:be:e4:ca:
5c:34:0a:bd:48:f7:12:b6:a6:cd:dd:a6:0e:c6:bf:7f:13:59:
3f:dd:bc:a5:8a:cf:83:fe:80:72:a1:8f:9a:52:78:1a:26:95:
6d:37:04:2d:18:80:af:18:d8:1f:a5:43:5c:1a:f9:7e:ca:43:
f9:09:8a:8a:79:d4:8f:ed:c2:39:f9:6f:9e:81:f0:a1:bf:a9:
2f:5f:f4:c5:bb:63:b4:6b:f2:df:65:fe:ed:75:30:6e:43:51:
de:99:80:08:cb:52:2b:48:7b:dd:dc:dc:ee:1c:98:9f:d2:aa:
fb:bf:3f:6c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICBlgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0Yx
NkVDNjFEMjE0QTc0MDBEMDA2NEExODdBMTNEQ0NDMUU3ODU0QTAeFw0yMjA0MTMw
NjM4NTFaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDZDMjgxNzRGNkI0NUI1
MjI5NUMxOEUxNDY0Mzk4MUNFRjc3RjlDNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCm0RvJBAB/ifObZqmcOnduBfURtsbEEcuCMSwFHZ6WU8p/Aut
RPNgCEpOpOeOfk88gk0CDSocchGFCkyxU385kdIzdVz58yVLf8qS80V5ZGr6wPPl
r9Zbm/3rOWympVu2e8cAyiDu4QrhNOqrNm+bXxrJHHmp71nC6y/3kSwwXzoGwWoV
j0wd2GsHIRjY6qtTEnu0+ztzTmQIgXK3WQpJ/pJj/wXw/F2AdcYtz0kqz7EfuklJ
YEsx46dbfzuNXpbFY6DK93MWrfJnsroJvbsyNqGe/afbL4lNjJ/s/I3X+MDj4/ib
KxoMxMYdrV0YIwcezPqCrBXHZ8hg2uA1t25FAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUbCgXT2tFtSKVwY4UZDmBzvd/nEgwHwYDVR0jBBgwFoAUfxbsYdIUp0ANAGSh
h6E9zMHnhUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz
L2Z4YnNZZElVcDBBTkFHU2hoNkU5ek1IbmhVby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZnhic1lkSVVwMEFOQUdTaGg2RTl6TUhuaFVvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzL2JDZ1hUMnRGdFNLVndZ
NFVaRG1CenZkX25FZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAdlMQAwDQYJKoZIhvcNAQELBQADggEBACIhmJ9OSz9xIV1siwREe/rcI38t0b27
7AYOoZLLVv++EfaffDVad9mYfj65z9P0pO/9FDuUn55+mF1ZJreEGEUGhJ4QeCfp
YsSCpGT5IKINj3DKk8zBpceansSepdnmf5lKubcNFkX8FMRC5Za8g5gTt90UClFZ
Y16jpQdWBX48up6VSRAws+2qLNkoaL7kylw0Cr1I9xK2ps3dpg7Gv38TWT/dvKWK
z4P+gHKhj5pSeBomlW03BC0YgK8Y2B+lQ1wa+X7KQ/kJiop51I/twjn5b56B8KG/
qS9f9MW7Y7Rr8t9l/u11MG5DUd6ZgAjLUitIe93c3O4cmJ/Sqvu/P2w=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org