Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1375/G_v9hsWsNcjFaV54FL66EUqiqvc.roa
File:                     G_v9hsWsNcjFaV54FL66EUqiqvc.roa (raw, json)
Hash identifier:          22OzS0F0+dDNzA+eMlDxG7D9tr2iXg8MISbnXF1VX/k=
Subject key identifier:   1B:FB:FD:86:C5:AC:35:C8:C5:69:5E:78:14:BE:BA:11:4A:A2:AA:F7
Certificate issuer:       /CN=B42E9FF44C38FE040FC81B18C066A1D76F38A543
Certificate serial:       06F7
Authority key identifier: B4:2E:9F:F4:4C:38:FE:04:0F:C8:1B:18:C0:66:A1:D7:6F:38:A5:43
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tC6f9Ew4_gQPyBsYwGah1284pUM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/G_v9hsWsNcjFaV54FL66EUqiqvc.roa
Signing time:             Wed 11 May 2022 03:20:23 +0000
ROA not before:           Wed 11 May 2022 03:20:23 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     132369
IP address blocks:        45.127.216.0/22 maxlen: 24
                          210.16.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B42E9FF44C38FE040FC81B18C066A1D76F38A543
        Validity
            Not Before: May 11 03:20:23 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=1BFBFD86C5AC35C8C5695E7814BEBA114AA2AAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:5f:7a:2a:be:18:b3:fd:56:d9:20:d7:be:
                    1c:df:67:01:fd:c7:d0:2f:a6:a4:2a:ea:b6:56:b9:
                    80:9e:13:12:1b:31:7e:37:23:ed:4e:77:c6:0d:96:
                    0b:a9:d8:4c:69:f6:1d:7f:0a:31:96:7b:bc:2a:5f:
                    13:99:f7:65:0e:7e:70:9b:72:58:1a:d0:b7:89:5a:
                    4e:1f:5b:a3:6e:0a:86:f6:09:13:cb:d1:c2:e6:5b:
                    21:ae:07:a7:87:2f:9d:c2:72:fe:12:05:58:72:f8:
                    26:bb:8d:57:9c:21:f8:cf:99:a7:44:9f:72:b7:be:
                    7f:13:a2:80:ee:b1:42:ed:84:c9:7f:c6:19:15:4e:
                    1e:b8:fd:43:87:8c:15:6b:bc:5c:f6:96:06:ca:74:
                    eb:18:1c:78:4d:d9:38:90:6f:0b:13:ea:73:2a:a9:
                    dd:fc:67:c1:6b:46:2e:06:c9:34:d6:8c:26:c5:83:
                    f5:28:41:51:1e:e6:16:37:b7:f3:0e:6e:72:eb:f5:
                    23:14:f5:1b:f4:5d:f0:6a:3b:49:9a:9d:4d:08:c4:
                    a5:19:26:a9:fd:c6:41:e8:9f:db:1c:31:ac:33:63:
                    87:6b:21:68:c9:7f:a7:93:33:7b:f2:79:00:34:10:
                    cb:02:df:3e:ac:36:22:0a:09:b5:fe:06:1c:07:4e:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FB:FD:86:C5:AC:35:C8:C5:69:5E:78:14:BE:BA:11:4A:A2:AA:F7
            X509v3 Authority Key Identifier:
                keyid:B4:2E:9F:F4:4C:38:FE:04:0F:C8:1B:18:C0:66:A1:D7:6F:38:A5:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/tC6f9Ew4_gQPyBsYwGah1284pUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tC6f9Ew4_gQPyBsYwGah1284pUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1375/G_v9hsWsNcjFaV54FL66EUqiqvc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.216.0/22
                  210.16.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:b5:67:4a:1f:0c:91:91:01:af:ed:84:fc:a3:70:16:0e:3d:
         e3:b1:71:31:b3:76:f5:89:82:68:14:09:f8:df:dc:b7:e2:9e:
         bc:f5:90:cd:da:fa:1b:be:17:05:a0:18:64:9f:13:93:4c:95:
         d1:e3:17:05:06:f4:63:d6:ac:b2:72:46:e4:af:eb:2d:44:54:
         3b:25:34:05:4a:1a:7d:3b:3e:a9:e7:8b:5b:59:a0:4c:76:20:
         d2:1b:f2:65:99:6e:32:17:06:e1:a2:02:aa:bf:e2:fb:34:e2:
         9a:f3:74:27:5f:8c:a1:5f:1d:d5:32:87:bd:85:bf:19:9c:9e:
         a1:c1:b8:ad:49:cf:af:f0:b4:a0:e9:fb:dc:52:90:6e:80:c4:
         d4:62:02:5a:68:54:ff:0e:37:e8:2c:91:71:b6:63:f4:51:02:
         66:1d:74:9f:ac:fa:63:d0:8e:53:6c:64:47:37:66:42:18:fd:
         6a:84:f3:ea:57:0c:f9:62:66:4e:9e:46:5d:ce:92:7d:30:49:
         f9:13:ca:98:17:e9:23:96:36:53:51:48:2f:40:81:db:83:5c:
         0e:52:dd:36:5d:58:a5:44:79:7d:53:d2:96:59:35:dd:bc:8b:
         a8:43:63:fd:cd:52:16:2e:4b:ec:98:f0:80:39:1f:3b:fd:a9:
         3a:86:83:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org