Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/cJpd4fAh0olmJKRNkfDFIW1HqU0.roa
File: cJpd4fAh0olmJKRNkfDFIW1HqU0.roa (raw, json)
Hash identifier: KL3D16YnC/OZMlFWWLkXay0EbkNO98xTzuaSkEOeKK4=
Subject key identifier: 70:9A:5D:E1:F0:21:D2:89:66:24:A4:4D:91:F0:C5:21:6D:47:A9:4D
Certificate issuer: /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial: 0A6A
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/cJpd4fAh0olmJKRNkfDFIW1HqU0.roa
Signing time: Wed 20 Jul 2022 06:29:39 +0000
ROA not before: Wed 20 Jul 2022 06:29:39 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 996
IP address blocks: 101.49.128.0/19 maxlen: 24
101.49.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2666 (0xa6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Validity
Not Before: Jul 20 06:29:39 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=709A5DE1F021D2896624A44D91F0C5216D47A94D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:7f:ab:24:d6:c7:75:90:2b:5f:87:70:72:
60:f2:69:fb:53:b9:da:d1:57:79:01:00:33:b5:bf:
fd:6d:33:cf:de:ab:26:c1:ff:73:db:ed:88:34:2e:
f5:9f:94:4e:9e:d2:bf:da:0d:bb:8a:8c:8e:45:86:
50:c1:bc:e8:98:d2:ee:8d:23:40:37:58:18:64:fa:
0a:d9:71:9e:14:46:81:e0:70:6b:6d:f0:41:22:74:
ef:c4:b7:55:9f:50:92:76:52:79:77:90:50:ff:13:
ae:4a:ab:ad:69:6e:cf:d2:82:13:a5:27:4c:43:4d:
ab:1c:d6:21:e2:38:d8:48:d2:fb:25:61:2f:f2:4c:
e2:42:67:0c:9e:de:b6:2f:d9:17:11:91:1c:98:84:
3f:36:8e:78:3c:20:0e:c4:7a:46:22:4c:ab:7f:e3:
7d:a8:b4:ad:19:c7:71:35:84:8c:d6:b4:5b:f4:b8:
91:4c:d7:ee:41:59:10:ab:ea:95:8c:0d:01:e2:0c:
e9:03:cc:e0:db:c6:5b:aa:b9:f8:99:85:7e:cd:8d:
82:e7:00:10:7e:30:c4:2e:f0:f6:35:4d:f8:cb:7e:
5c:ec:57:44:ec:d5:91:77:02:53:df:ae:f6:65:94:
18:ce:07:51:77:d6:5b:29:71:90:d5:71:70:3e:ac:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9A:5D:E1:F0:21:D2:89:66:24:A4:4D:91:F0:C5:21:6D:47:A9:4D
X509v3 Authority Key Identifier:
keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/cJpd4fAh0olmJKRNkfDFIW1HqU0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a4:80:71:47:e3:23:74:eb:f4:08:d0:5c:46:8a:72:b0:1d:a6:
31:1a:58:fa:47:de:2b:66:71:20:92:b6:72:a8:92:cd:46:c5:
7d:35:b7:a3:f5:cb:a8:d7:14:65:a0:53:5e:d1:7d:8e:c5:c3:
b2:b3:ef:c4:2c:2a:ae:2f:4c:26:62:c3:f2:de:91:c9:4d:80:
bc:29:e3:b0:3d:98:bb:6d:57:d9:60:f7:03:7a:d9:d2:75:ea:
bf:7c:60:7b:d0:6e:c0:df:08:eb:9b:e5:9e:1b:df:e0:5f:60:
65:0e:22:8f:b7:1f:e9:13:a2:a1:75:b5:8c:28:2c:8b:ce:1c:
02:4f:c2:5a:c4:06:65:3b:de:27:95:50:77:ec:11:2e:4c:a3:
d8:91:b7:03:6e:dc:c3:c1:17:52:30:95:c8:8e:6f:4b:b7:26:
f8:7c:2a:f9:2a:b6:11:9c:bc:e0:4e:6b:5f:18:fc:75:14:bb:
7d:6d:b2:88:69:eb:99:ac:b9:23:20:f0:54:7d:b7:0d:d9:54:
f9:18:5a:52:b6:a3:fc:c9:af:1f:50:02:26:38:f4:ba:52:56:
b3:d2:bf:ee:e6:c7:43:1c:f4:30:93:44:fa:ce:9e:b4:a1:1c:
06:08:b7:45:29:03:34:4d:50:e9:2f:e9:1e:d8:6d:67:79:2c:
12:c8:e9:47
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICCmowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkU4
M0VCMEUxQ0I3QjRBNzYxN0EwNEFEN0E4MjYyOUQ5OEI5NUI5NDAeFw0yMjA3MjAw
NjI5MzlaFw0yMzA3MTkwMTIwMDNaMDMxMTAvBgNVBAMTKDcwOUE1REUxRjAyMUQy
ODk2NjI0QTQ0RDkxRjBDNTIxNkQ0N0E5NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC03+rJNbHdZArX4dwcmDyaftTudrRV3kBADO1v/1tM8/eqybB
/3Pb7Yg0LvWflE6e0r/aDbuKjI5FhlDBvOiY0u6NI0A3WBhk+grZcZ4URoHgcGtt
8EEidO/Et1WfUJJ2Unl3kFD/E65Kq61pbs/SghOlJ0xDTasc1iHiONhI0vslYS/y
TOJCZwye3rYv2RcRkRyYhD82jng8IA7EekYiTKt/432otK0Zx3E1hIzWtFv0uJFM
1+5BWRCr6pWMDQHiDOkDzODbxluqufiZhX7NjYLnABB+MMQu8PY1TfjLflzsV0Ts
1ZF3AlPfrvZllBjOB1F31lspcZDVcXA+rDQVAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUcJpd4fAh0olmJKRNkfDFIW1HqU0wHwYDVR0jBBgwFoAULoPrDhy3tKdhegSt
eoJinZi5W5QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEz
L0xvUHJEaHkzdEtkaGVnU3Rlb0ppblppNVc1US5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvTG9QckRoeTN0S2RoZWdTdGVvSmluWmk1VzVRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjEzL2NKcGQ0ZkFoMG9sbUpL
Uk5rZkRGSVcxSHFVMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAZlMYAwDQYJKoZIhvcNAQELBQADggEBAKSAcUfjI3Tr9AjQXEaKcrAdpjEaWPpH
3itmcSCStnKoks1GxX01t6P1y6jXFGWgU17RfY7Fw7Kz78QsKq4vTCZiw/LekclN
gLwp47A9mLttV9lg9wN62dJ16r98YHvQbsDfCOub5Z4b3+BfYGUOIo+3H+kToqF1
tYwoLIvOHAJPwlrEBmU73ieVUHfsES5Mo9iRtwNu3MPBF1IwlciOb0u3Jvh8Kvkq
thGcvOBOa18Y/HUUu31tsohp65msuSMg8FR9tw3ZVPkYWlK2o/zJrx9QAiY49LpS
VrPSv+7mx0Mc9DCTRPrOnrShHAYIt0UpAzRNUOkv6R7YbWd5LBLI6Uc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org