Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/RgtClfGerG9KX4T6bEmX6sz6d8Y.roa
File: RgtClfGerG9KX4T6bEmX6sz6d8Y.roa (raw, json)
Hash identifier: Lo1jy+U60m76NDZPQElc6F4edvgTt/2cJ1O7ZRsDWM4=
Subject key identifier: 46:0B:42:95:F1:9E:AC:6F:4A:5F:84:FA:6C:49:97:EA:CC:FA:77:C6
Certificate issuer: /CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Certificate serial: 06E4
Authority key identifier: 7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/RgtClfGerG9KX4T6bEmX6sz6d8Y.roa
Signing time: Thu 18 May 2023 07:25:31 +0000
ROA not before: Thu 18 May 2023 07:25:31 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 131530
IP address blocks: 103.43.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1764 (0x6e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Validity
Not Before: May 18 07:25:31 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=460B4295F19EAC6F4A5F84FA6C4997EACCFA77C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9d:c7:05:99:d6:47:f0:8a:8c:21:0c:e5:22:
80:24:3e:6c:b9:88:35:7a:09:86:5b:38:72:af:49:
18:05:a0:f5:c8:74:5a:d9:5a:44:d8:2f:ee:b2:8f:
dd:e7:5d:b9:85:77:bc:9b:15:0d:f8:e2:b3:47:18:
f8:9d:63:ec:17:85:9c:3f:c2:ba:e5:0f:16:73:e9:
37:74:eb:6c:0f:f0:00:1c:34:93:03:46:b6:59:a7:
34:65:8a:ac:6f:ed:ac:d8:2a:31:bd:25:ec:9f:b3:
4e:fb:62:1b:50:55:09:03:67:bb:d0:91:46:38:9a:
f3:7f:12:ed:71:5b:9a:3f:bc:dd:01:c3:65:51:f9:
17:84:4c:a6:12:a5:78:9c:6b:f7:70:76:82:ed:e0:
44:f4:48:cf:d3:c3:02:b5:3f:fd:c3:f9:f5:fb:22:
5f:a6:60:fb:ca:23:61:d1:35:20:b6:02:8b:db:b0:
aa:de:55:c8:df:b5:31:9f:9c:e2:29:e3:79:26:6a:
f6:75:99:b7:ec:ab:c2:ad:28:9a:a4:cc:5f:27:eb:
08:2f:1b:a9:5a:88:4c:fe:95:06:86:b5:4e:f0:b2:
54:03:10:0b:1e:ae:c8:02:98:78:87:5f:24:36:1d:
b3:2d:62:0d:33:9d:db:7d:bd:1a:96:0f:b3:34:9c:
66:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0B:42:95:F1:9E:AC:6F:4A:5F:84:FA:6C:49:97:EA:CC:FA:77:C6
X509v3 Authority Key Identifier:
keyid:7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/RgtClfGerG9KX4T6bEmX6sz6d8Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
83:7a:8d:df:d6:d7:99:54:15:a4:8c:37:ca:5e:73:e5:a4:e7:
c7:cb:7f:de:26:6a:ac:bf:27:6b:92:45:37:6a:6c:11:a4:38:
54:3b:75:c2:f8:3e:15:1a:74:8e:cd:c2:1c:0c:39:f3:c4:5d:
f3:a3:1a:b5:9a:f2:f5:a2:55:3d:82:c9:b3:4e:53:06:71:72:
19:c1:f5:8e:d0:19:99:79:9a:31:97:17:2a:9e:00:ba:23:db:
02:d3:8d:1d:75:f8:19:74:92:eb:f8:7e:a4:f2:38:23:04:eb:
71:83:6d:61:c4:d4:05:71:ed:70:ae:4f:00:d2:9a:c4:02:5d:
96:d3:06:1b:bc:a5:01:4f:ae:df:a1:6a:7e:21:fd:a1:58:6a:
88:c6:96:72:35:04:3a:5d:41:5b:80:f1:c3:04:5b:48:58:e8:
38:5a:9b:b1:8a:ca:f1:8d:35:02:e7:cd:ed:e9:37:b0:13:02:
88:7e:95:68:30:b1:fa:99:f7:1c:b0:00:4c:31:9d:e7:2e:71:
23:01:84:bd:86:e7:59:1d:ad:bc:1b:ad:5d:a7:41:5b:b2:d9:
fd:0c:a9:b6:ba:33:35:5d:81:74:c0:46:09:75:05:10:23:72:
fb:65:87:35:ed:0f:61:bc:5e:20:4d:d9:52:d2:b0:b4:bf:9c:
82:21:4d:6c
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0FC
NkUyRjRDNDU3MzFEMDNDMjdBRUFGREQ2MDg2MTE4NzFCNDIzQzAeFw0yMzA1MTgw
NzI1MzFaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDQ2MEI0Mjk1RjE5RUFD
NkY0QTVGODRGQTZDNDk5N0VBQ0NGQTc3QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDenccFmdZH8IqMIQzlIoAkPmy5iDV6CYZbOHKvSRgFoPXIdFrZ
WkTYL+6yj93nXbmFd7ybFQ344rNHGPidY+wXhZw/wrrlDxZz6Td062wP8AAcNJMD
RrZZpzRliqxv7azYKjG9Jeyfs077YhtQVQkDZ7vQkUY4mvN/Eu1xW5o/vN0Bw2VR
+ReETKYSpXica/dwdoLt4ET0SM/TwwK1P/3D+fX7Il+mYPvKI2HRNSC2AovbsKre
VcjftTGfnOIp43kmavZ1mbfsq8KtKJqkzF8n6wgvG6laiEz+lQaGtU7wslQDEAse
rsgCmHiHXyQ2HbMtYg0zndt9vRqWD7M0nGb5AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQURgtClfGerG9KX4T6bEmX6sz6d8YwHwYDVR0jBBgwFoAUerbi9MRXMdA8J66v
3WCGEYcbQjwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAz
MC9lcmJpOU1SWE1kQThKNjZ2M1dDR0VZY2JRancuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2VyYmk5TVJYTWRBOEo2NnYzV0NHRVljYlFqdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMzAvUmd0Q2xmR2VyRzlL
WDRUNmJFbVg2c3o2ZDhZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcrwDANBgkqhkiG9w0BAQsFAAOCAQEAg3qN39bXmVQVpIw3yl5z5aTnx8t/
3iZqrL8na5JFN2psEaQ4VDt1wvg+FRp0js3CHAw588Rd86MatZry9aJVPYLJs05T
BnFyGcH1jtAZmXmaMZcXKp4AuiPbAtONHXX4GXSS6/h+pPI4IwTrcYNtYcTUBXHt
cK5PANKaxAJdltMGG7ylAU+u36FqfiH9oVhqiMaWcjUEOl1BW4DxwwRbSFjoOFqb
sYrK8Y01AufN7ek3sBMCiH6VaDCx+pn3HLAATDGd5y5xIwGEvYbnWR2tvButXadB
W7LZ/QyptrozNV2BdMBGCXUFECNy+2WHNe0PYbxeIE3ZUtKwtL+cgiFNbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org