Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/_4m8mmSgSrauRiQgutC0HhoK6Ms.roa
File: _4m8mmSgSrauRiQgutC0HhoK6Ms.roa (raw, json)
Hash identifier: 6KmDczuaorKEgZRa75FHPIKfLZ0eVEx0DsVGy/rokOU=
Subject key identifier: FF:89:BC:9A:64:A0:4A:B6:AE:46:24:20:BA:D0:B4:1E:1A:0A:E8:CB
Certificate issuer: /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial: 03
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/_4m8mmSgSrauRiQgutC0HhoK6Ms.roa
Signing time: Wed 01 Jun 2022 07:09:33 +0000
ROA not before: Wed 01 Jun 2022 07:09:33 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 59022
IP address blocks: 45.115.244.0/22 maxlen: 22
103.56.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Validity
Not Before: Jun 1 07:09:33 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=FF89BC9A64A04AB6AE462420BAD0B41E1A0AE8CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:15:38:52:1d:88:55:f7:d0:6b:d8:cb:40:
04:fc:2a:29:c4:9f:76:36:0e:3e:d6:e2:27:d7:da:
0e:53:1c:c0:4d:fb:b3:43:51:2e:d7:6c:0c:53:90:
e2:d3:59:b3:7f:2e:d9:bd:d8:cc:23:2f:91:b7:98:
ec:1c:72:d3:04:23:71:3a:39:f1:4e:5a:1b:7c:4a:
c1:19:8e:c0:c9:ef:f3:d4:f5:40:80:c2:27:50:cb:
46:51:51:02:d3:5f:e6:1a:97:ce:6d:72:2b:33:3e:
e0:be:11:98:46:cf:aa:71:92:e5:18:5e:cb:79:b6:
ad:27:06:3f:ba:d1:fd:ed:6b:8d:d3:f9:fa:1f:57:
7b:48:59:e3:d8:de:c9:41:98:a2:dd:26:e5:50:cc:
f8:a0:ed:09:ac:fb:9e:cd:17:b5:c3:d6:46:de:ec:
aa:1c:95:f1:5c:b5:d0:98:1c:7f:bd:41:e5:7c:db:
0e:42:eb:f8:41:b5:03:9b:61:8d:22:01:1a:d2:83:
57:89:7c:f8:1c:a1:d3:5f:83:db:e1:5e:2d:e2:bf:
b0:2a:64:f4:28:ab:0f:32:17:ca:46:98:e9:88:e6:
f1:82:3d:81:d4:41:c9:69:c4:54:81:7d:57:06:55:
31:ff:c5:bf:bc:5b:d4:5b:a7:e0:c1:e8:e2:86:31:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:89:BC:9A:64:A0:4A:B6:AE:46:24:20:BA:D0:B4:1E:1A:0A:E8:CB
X509v3 Authority Key Identifier:
keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/_4m8mmSgSrauRiQgutC0HhoK6Ms.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.244.0/22
103.56.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:b1:70:0a:c6:1e:a7:c3:51:e6:1d:eb:d2:73:a2:22:79:8d:
5c:a6:1e:a4:21:3f:26:01:80:e1:23:64:09:e2:4d:98:a4:e3:
78:2f:af:50:0f:6d:f6:77:ee:8a:eb:43:78:b1:61:5f:5c:b1:
86:6a:55:c1:e6:bd:b5:06:e3:68:b8:14:ef:15:06:f3:a2:2e:
e7:99:b9:25:d3:04:af:38:fd:2b:60:13:04:b7:a2:be:a5:88:
a9:47:e8:bb:2c:0d:2a:81:18:26:6e:dd:d7:c1:b3:63:30:87:
cc:fb:d9:6e:c0:5a:08:32:e6:4d:e8:94:54:da:8d:6a:10:d1:
c8:3f:26:64:78:ea:8a:41:b4:ad:83:ae:b7:97:36:15:ba:0b:
11:d8:58:8b:3a:90:c8:7c:1c:d0:6d:0b:52:e6:b5:23:de:41:
38:4d:a7:72:92:17:ce:3e:51:f5:81:2f:ae:e4:05:23:66:6b:
30:fe:ea:07:c5:46:4c:9b:1c:8d:80:b6:bc:3b:42:f8:6a:35:
9b:00:49:15:f4:1d:ff:68:92:c2:11:79:64:a6:86:c7:c5:69:
b9:61:37:2d:48:c9:59:a6:5f:14:8b:3a:4c:f5:d6:94:d5:eb:
1c:8d:18:84:4f:95:cd:1c:89:21:3e:3f:73:37:74:02:ae:21:
ab:0e:eb:0c
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MTkx
QUFDRENFNTYwQTc0RDgzQzA1REE4RUE5MzI3QUY5NDREQkJEMB4XDTIyMDYwMTA3
MDkzM1oXDTIzMDYwMTA2NTg1NFowMzExMC8GA1UEAxMoRkY4OUJDOUE2NEEwNEFC
NkFFNDYyNDIwQkFEMEI0MUUxQTBBRThDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALksFThSHYhV99Br2MtABPwqKcSfdjYOPtbiJ9faDlMcwE37s0NR
LtdsDFOQ4tNZs38u2b3YzCMvkbeY7Bxy0wQjcTo58U5aG3xKwRmOwMnv89T1QIDC
J1DLRlFRAtNf5hqXzm1yKzM+4L4RmEbPqnGS5Rhey3m2rScGP7rR/e1rjdP5+h9X
e0hZ49jeyUGYot0m5VDM+KDtCaz7ns0XtcPWRt7sqhyV8Vy10Jgcf71B5XzbDkLr
+EG1A5thjSIBGtKDV4l8+Byh01+D2+FeLeK/sCpk9CirDzIXykaY6Yjm8YI9gdRB
yWnEVIF9VwZVMf/Fv7xb1Fun4MHo4oYx2n0CAwEAAaOCAfkwggH1MB0GA1UdDgQW
BBT/ibyaZKBKtq5GJCC60LQeGgroyzAfBgNVHSMEGDAWgBRhkarNzlYKdNg8BdqO
qTJ6+UTbvTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xMjAw
L1laR3F6YzVXQ25UWVBBWGFqcWt5ZXZsRTI3MC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWVpHcXpjNVdDblRZUEFYYWpxa3lldmxFMjcwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTIwMC9fNG04bW1TZ1NyYXVS
aVFndXRDMEhob0s2TXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM
AwQCLXP0AwQCZzgUMA0GCSqGSIb3DQEBCwUAA4IBAQBOsXAKxh6nw1HmHevSc6Ii
eY1cph6kIT8mAYDhI2QJ4k2YpON4L69QD232d+6K60N4sWFfXLGGalXB5r21BuNo
uBTvFQbzoi7nmbkl0wSvOP0rYBMEt6K+pYipR+i7LA0qgRgmbt3XwbNjMIfM+9lu
wFoIMuZN6JRU2o1qENHIPyZkeOqKQbStg663lzYVugsR2FiLOpDIfBzQbQtS5rUj
3kE4TadykhfOPlH1gS+u5AUjZmsw/uoHxUZMmxyNgLa8O0L4ajWbAEkV9B3/aJLC
EXlkpobHxWm5YTctSMlZpl8UizpM9daU1escjRiET5XNHIkhPj9zN3QCriGrDusM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org