Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/v1f0xw6khXK-p0yH_Jh8DV0wdKE.roa
File: v1f0xw6khXK-p0yH_Jh8DV0wdKE.roa (raw, json)
Hash identifier: f7+w2OBteiQDAbySlGGqpH00eTWog96Lh159dOMz6yY=
Subject key identifier: BF:57:F4:C7:0E:A4:85:72:BE:A7:4C:87:FC:98:7C:0D:5D:30:74:A1
Certificate issuer: /CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Certificate serial: 0698
Authority key identifier: 7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/v1f0xw6khXK-p0yH_Jh8DV0wdKE.roa
Signing time: Mon 25 Apr 2022 04:08:42 +0000
ROA not before: Mon 25 Apr 2022 04:08:42 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 7018
IP address blocks: 101.49.0.0/17 maxlen: 24
101.49.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1688 (0x698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Validity
Not Before: Apr 25 04:08:42 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=BF57F4C70EA48572BEA74C87FC987C0D5D3074A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:c9:d0:8f:63:4e:68:82:74:a9:de:f3:b1:
a5:73:d2:a0:a1:ab:c3:c4:01:9b:9e:b1:82:2e:60:
23:dc:67:f3:09:dc:60:af:d5:f8:79:92:6b:df:11:
13:85:da:1a:05:fd:c3:9e:15:d1:c1:a1:0a:22:b7:
41:44:bf:cf:39:ab:ba:d7:be:0f:32:1c:c5:2c:9e:
52:f3:b9:4a:3e:d3:31:a9:0e:bd:4e:4e:ba:77:9b:
fd:c0:7d:8a:ab:c3:f9:6d:3a:89:50:76:9f:14:eb:
72:c8:9a:ee:40:f2:fe:b7:fa:5f:00:68:9b:fb:37:
f3:ec:bf:c2:2f:51:57:10:26:a6:03:48:8c:1a:34:
b5:31:89:1e:fd:3c:0b:aa:63:ff:de:30:9f:4c:25:
64:2e:36:3e:f2:fa:b9:30:fa:18:83:f6:e6:89:88:
ca:ea:ba:dd:37:c4:89:d9:d4:e2:8b:61:6d:1e:98:
8c:62:b6:80:c2:f9:09:c1:18:31:b8:5e:0e:02:87:
ac:65:fd:56:8f:8c:4c:56:84:5a:94:fc:cb:77:f9:
e3:04:3a:14:e3:35:73:2c:df:23:46:3c:70:cd:64:
45:19:55:07:1b:ef:b6:72:9f:82:51:b4:db:8c:f4:
a0:d5:f2:fa:3b:e1:c3:12:23:9a:1b:12:f8:1b:59:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:57:F4:C7:0E:A4:85:72:BE:A7:4C:87:FC:98:7C:0D:5D:30:74:A1
X509v3 Authority Key Identifier:
keyid:7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/fxbsYdIUp0ANAGShh6E9zMHnhUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/v1f0xw6khXK-p0yH_Jh8DV0wdKE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.0.0/17
101.49.160.0/19
Signature Algorithm: sha256WithRSAEncryption
20:73:b8:3a:04:b7:93:9b:fa:78:5d:75:93:ee:69:1d:b5:44:
e0:50:16:86:c1:58:dc:15:7d:9b:a9:fd:e5:b3:0c:ae:a1:c4:
42:d9:82:4d:c3:7f:e2:9d:7a:88:15:70:b8:d7:1f:fe:e2:a9:
c5:ce:32:57:5e:b2:13:22:0c:9c:52:35:be:f9:e9:df:04:64:
55:47:64:ee:60:f7:37:34:16:75:7c:68:f4:fa:ad:c9:48:71:
94:63:2d:e6:61:d9:d5:47:26:cf:08:55:28:1d:75:f3:87:92:
52:00:02:01:67:be:ee:66:87:d1:4d:b0:26:3e:fc:1c:f3:f1:
f8:97:9c:8f:e5:44:76:1b:34:2b:3d:0e:99:d0:27:b7:14:35:
93:d9:51:07:bc:af:7e:5f:a8:f8:20:3a:57:d0:4d:e3:54:07:
9e:5b:9a:87:78:8a:18:76:f3:f1:b3:59:98:75:7f:fb:35:f6:
6c:7f:10:a0:e6:0d:e4:56:10:ef:76:15:40:a6:d6:ee:76:11:
d3:6a:b2:c5:0a:62:89:21:fb:5e:89:79:3e:cc:75:c7:40:57:
35:ba:bc:1c:25:21:64:aa:5b:f9:45:c9:d1:9f:47:19:e6:8a:
12:bc:e2:2f:fc:4c:b7:f8:14:f1:ee:f9:34:21:24:34:fa:d7:
b9:e1:f9:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org