Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1411/JJKIuWKJ9HfsozNj1ISU-zRwvcE.roa
File: JJKIuWKJ9HfsozNj1ISU-zRwvcE.roa (raw, json)
Hash identifier: T0cCz7+DtsBebn3pSQUugN9Xoj0haGB+6DPj+3+6/Sg=
Subject key identifier: 24:92:88:B9:62:89:F4:77:EC:A3:33:63:D4:84:94:FB:34:70:BD:C1
Certificate issuer: /CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Certificate serial: 0D55
Authority key identifier: 49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/JJKIuWKJ9HfsozNj1ISU-zRwvcE.roa
Signing time: Tue 07 Jun 2022 02:16:46 +0000
ROA not before: Tue 07 Jun 2022 02:16:46 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 209242
IP address blocks: 103.244.116.0/22 maxlen: 24
103.244.118.0/24 maxlen: 24
103.244.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3413 (0xd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911CB6D544B3B6905532964C8E1A472BDCBC267
Validity
Not Before: Jun 7 02:16:46 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=249288B96289F477ECA33363D48494FB3470BDC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:ff:a9:5b:69:f9:f2:af:f2:df:8d:66:ef:
38:cf:3e:86:a3:78:8d:04:91:04:1f:38:f1:23:d5:
77:f3:a4:07:55:eb:14:a0:85:ec:5a:82:5c:bf:5b:
f2:04:4f:92:ed:9e:83:59:0d:6a:f7:13:74:b1:83:
2f:60:a8:b1:4f:f1:8f:b6:d3:3e:e3:9b:86:1a:e8:
c9:ca:fd:33:02:68:f6:78:11:6d:b2:21:f3:77:2f:
2b:9d:79:72:59:81:26:e9:cc:d1:08:87:df:26:57:
a9:7f:f7:60:34:b6:80:12:68:3b:47:33:0e:d1:d9:
6d:ac:4a:c2:ce:de:cf:e1:e9:b0:7e:e5:fe:30:84:
36:4a:dc:8d:8a:f5:9b:8a:27:5b:92:3e:47:5e:42:
8a:55:03:ef:f3:41:c6:a7:cc:3c:6d:52:14:53:84:
36:e8:41:8d:91:ff:12:ce:6b:5f:b4:d0:6c:1e:b9:
45:5d:bc:3c:80:94:dd:96:e7:50:bf:72:19:f5:b5:
5b:36:20:ff:b2:12:e9:d5:49:df:60:a5:99:3a:ac:
dd:07:ce:76:84:cc:7f:5f:91:a3:26:ce:98:87:a0:
87:8c:cb:6c:36:85:23:b3:50:9f:5d:a8:16:6d:d3:
ab:ca:c5:00:4c:56:da:28:94:f5:fe:42:82:6e:7c:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:92:88:B9:62:89:F4:77:EC:A3:33:63:D4:84:94:FB:34:70:BD:C1
X509v3 Authority Key Identifier:
keyid:49:11:CB:6D:54:4B:3B:69:05:53:29:64:C8:E1:A4:72:BD:CB:C2:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/SRHLbVRLO2kFUylkyOGkcr3Lwmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SRHLbVRLO2kFUylkyOGkcr3Lwmc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1411/JJKIuWKJ9HfsozNj1ISU-zRwvcE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.244.116.0/22
Signature Algorithm: sha256WithRSAEncryption
e5:2b:25:fc:c7:ab:94:ae:45:83:47:a1:d7:01:ba:88:0f:51:
ca:1f:d8:57:c8:36:5f:56:f5:2a:29:d7:9e:37:af:38:73:1c:
22:b4:e3:dc:de:9c:cc:89:da:42:8e:0e:a8:3d:bd:84:48:65:
7a:48:93:f1:a4:50:ad:ff:80:5c:f7:3a:64:f4:84:3c:86:00:
43:91:c6:ed:c9:b0:f1:67:ee:0c:82:a7:04:bb:1a:78:a0:02:
a9:44:d4:8e:d4:15:9e:df:1a:57:34:da:53:0d:14:58:61:24:
43:86:85:b5:22:67:46:0d:b0:09:99:a3:1b:18:55:a3:ca:9b:
c7:80:72:74:db:41:bc:0a:9b:71:ed:1f:90:a1:a0:3e:cd:82:
93:e7:74:6a:38:c7:99:60:fa:43:40:62:d7:23:b4:69:01:98:
2f:0a:d1:c5:52:07:51:ba:5c:d1:5c:83:3d:3b:9f:2b:4b:96:
ac:80:98:14:30:07:52:8a:6f:a1:39:23:3d:4f:52:17:9f:ff:
15:56:1a:fa:49:b9:65:e9:b5:bb:85:16:d9:cb:0e:5b:87:5a:
1c:7f:ea:c3:00:88:3e:fb:03:65:21:36:fc:5d:86:79:11:c2:
d3:f5:da:1b:f8:ee:f4:cd:5f:e9:8e:75:8b:1b:19:1d:23:7c:
86:f5:ff:77
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDkx
MUNCNkQ1NDRCM0I2OTA1NTMyOTY0QzhFMUE0NzJCRENCQzI2NzAeFw0yMjA2MDcw
MjE2NDZaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKDI0OTI4OEI5NjI4OUY0
NzdFQ0EzMzM2M0Q0ODQ5NEZCMzQ3MEJEQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCXhP+pW2n58q/y341m7zjPPoajeI0EkQQfOPEj1XfzpAdV6xSg
hexagly/W/IET5LtnoNZDWr3E3Sxgy9gqLFP8Y+20z7jm4Ya6MnK/TMCaPZ4EW2y
IfN3LyudeXJZgSbpzNEIh98mV6l/92A0toASaDtHMw7R2W2sSsLO3s/h6bB+5f4w
hDZK3I2K9ZuKJ1uSPkdeQopVA+/zQcanzDxtUhRThDboQY2R/xLOa1+00GweuUVd
vDyAlN2W51C/chn1tVs2IP+yEunVSd9gpZk6rN0HznaEzH9fkaMmzpiHoIeMy2w2
hSOzUJ9dqBZt06vKxQBMVtoolPX+QoJufIITAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUJJKIuWKJ9HfsozNj1ISU+zRwvcEwHwYDVR0jBBgwFoAUSRHLbVRLO2kFUylk
yOGkcr3LwmcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTQx
MS9TUkhMYlZSTE8ya0ZVeWxreU9Ha2NyM0x3bWMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NSSExiVlJMTzJrRlV5bGt5T0drY3IzTHdtYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE0MTEvSkpLSXVXS0o5SGZz
b3pOajFJU1UtelJ3dmNFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmf0dDANBgkqhkiG9w0BAQsFAAOCAQEA5Ssl/MerlK5Fg0eh1wG6iA9Ryh/Y
V8g2X1b1KinXnjevOHMcIrTj3N6czInaQo4OqD29hEhlekiT8aRQrf+AXPc6ZPSE
PIYAQ5HG7cmw8WfuDIKnBLsaeKACqUTUjtQVnt8aVzTaUw0UWGEkQ4aFtSJnRg2w
CZmjGxhVo8qbx4BydNtBvAqbce0fkKGgPs2Ck+d0ajjHmWD6Q0Bi1yO0aQGYLwrR
xVIHUbpc0VyDPTufK0uWrICYFDAHUopvoTkjPU9SF5//FVYa+km5Zem1u4UW2csO
W4daHH/qwwCIPvsDZSE2/F2GeRHC0/XaG/ju9M1f6Y51ixsZHSN8hvX/dw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:22 2024 by rpki-client on console-ams.rpki-client.org