Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1534/7qC-16jAh9FSJMdwz_y1u5dek7c.roa
File: 7qC-16jAh9FSJMdwz_y1u5dek7c.roa (raw, json)
Hash identifier: vkYkoSfrs2XjrPwvuJIhHgSIzQVAmPFglScd/1cpYWo=
Subject key identifier: EE:A0:BE:D7:A8:C0:87:D1:52:24:C7:70:CF:FC:B5:BB:97:5E:93:B7
Certificate issuer: /CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Certificate serial: 15F2
Authority key identifier: 0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/7qC-16jAh9FSJMdwz_y1u5dek7c.roa
Signing time: Fri 19 May 2023 05:54:51 +0000
ROA not before: Fri 19 May 2023 05:54:51 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 59067
IP address blocks: 202.89.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5618 (0x15f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CA4F183C659ED57FB46D59AD5483D6FE9B34F4E
Validity
Not Before: May 19 05:54:51 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=EEA0BED7A8C087D15224C770CFFCB5BB975E93B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:8c:2a:c3:20:b6:da:8a:a7:e7:2e:43:15:
d0:74:c0:63:66:96:27:03:be:b0:b3:59:b3:83:f5:
b8:19:14:7a:9c:0b:e6:e8:3f:96:76:8d:04:50:52:
65:8d:4f:aa:e7:6c:9c:c4:b5:e9:51:a7:43:3a:c0:
c1:b8:f8:71:9b:95:2b:9b:47:9b:ef:5f:06:6a:6f:
83:c8:d7:b3:63:cf:e0:ac:94:54:5b:c2:84:85:6c:
13:b2:9d:94:3b:18:cf:11:32:22:d6:1d:47:60:1a:
3a:6c:42:55:bf:05:22:d3:92:0d:72:90:04:ab:75:
80:bd:e1:3a:e8:0d:da:a9:9b:e0:1d:4d:6a:c9:a1:
63:69:6a:00:85:ee:e3:66:3a:26:86:d1:7e:90:eb:
b5:70:16:cd:c0:27:94:5f:f6:6c:1c:e3:ce:d3:8f:
30:27:8f:60:61:3a:41:38:bf:59:46:70:32:4f:a2:
be:b0:28:92:0c:53:5a:50:6e:6b:bf:11:8a:85:74:
0d:ba:5f:4e:06:06:f4:00:e4:cf:12:f5:f6:99:71:
b5:7c:f4:a3:03:ce:69:d4:cd:56:d3:6d:68:58:d1:
c0:72:a8:ff:b1:60:a6:84:67:a8:6c:3a:4b:14:94:
ba:f9:8e:23:69:65:06:55:9d:96:94:e0:31:29:4b:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A0:BE:D7:A8:C0:87:D1:52:24:C7:70:CF:FC:B5:BB:97:5E:93:B7
X509v3 Authority Key Identifier:
keyid:0C:A4:F1:83:C6:59:ED:57:FB:46:D5:9A:D5:48:3D:6F:E9:B3:4F:4E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DKTxg8ZZ7Vf7RtWa1Ug9b-mzT04.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1534/7qC-16jAh9FSJMdwz_y1u5dek7c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.89.232.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:dc:01:7c:f5:c5:32:c9:0c:90:66:8d:03:a6:09:8d:da:c7:
62:2d:8d:f1:f5:87:5b:7f:48:03:dd:eb:74:ae:50:90:29:94:
f9:89:8c:ad:82:18:70:91:58:25:79:bf:1c:e3:c9:80:8a:6a:
2b:e9:64:d7:6f:18:88:18:ca:34:e8:c3:bf:a6:20:d2:ae:17:
37:de:dd:25:c8:c2:6f:2e:85:3d:92:33:ec:c6:09:3f:bf:b4:
12:e9:5f:ec:57:30:8e:91:2e:25:d7:04:b9:20:49:d8:e6:b7:
6c:1f:c9:71:ae:a3:21:98:67:03:bf:32:78:ca:f8:aa:50:ec:
b1:d6:5a:ba:7e:9c:a0:70:0e:7b:8f:df:56:13:19:8b:3c:d7:
72:de:e0:4e:31:6c:a0:fa:1a:e8:81:dd:36:d4:e6:41:f5:07:
51:f4:47:2b:69:01:24:e7:39:c7:46:cf:52:9e:d1:be:15:15:
3f:64:ba:33:16:1b:6f:6a:c9:03:19:b5:e3:01:11:c8:5c:0a:
22:50:49:d5:40:78:17:ee:d9:2c:20:df:66:c2:7b:d5:08:55:
c5:a7:03:af:0e:35:1e:a1:56:62:60:0a:25:5d:34:28:06:b7:
7d:3b:a9:fa:2f:dd:47:12:28:6e:99:57:60:05:36:67:4e:8a:
a4:67:55:c3
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENB
NEYxODNDNjU5RUQ1N0ZCNDZENTlBRDU0ODNENkZFOUIzNEY0RTAeFw0yMzA1MTkw
NTU0NTFaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKEVFQTBCRUQ3QThDMDg3
RDE1MjI0Qzc3MENGRkNCNUJCOTc1RTkzQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9F4wqwyC22oqn5y5DFdB0wGNmlicDvrCzWbOD9bgZFHqcC+bo
P5Z2jQRQUmWNT6rnbJzEtelRp0M6wMG4+HGblSubR5vvXwZqb4PI17Njz+CslFRb
woSFbBOynZQ7GM8RMiLWHUdgGjpsQlW/BSLTkg1ykASrdYC94TroDdqpm+AdTWrJ
oWNpagCF7uNmOiaG0X6Q67VwFs3AJ5Rf9mwc487TjzAnj2BhOkE4v1lGcDJPor6w
KJIMU1pQbmu/EYqFdA26X04GBvQA5M8S9faZcbV89KMDzmnUzVbTbWhY0cByqP+x
YKaEZ6hsOksUlLr5jiNpZQZVnZaU4DEpS/8jAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU7qC+16jAh9FSJMdwz/y1u5dek7cwHwYDVR0jBBgwFoAUDKTxg8ZZ7Vf7RtWa
1Ug9b+mzT04wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTUz
NC9ES1R4ZzhaWjdWZjdSdFdhMVVnOWItbXpUMDQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0RLVHhnOFpaN1ZmN1J0V2ExVWc5Yi1telQwNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1MzQvN3FDLTE2akFoOUZT
Sk1kd3pfeTF1NWRlazdjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8pZ6DANBgkqhkiG9w0BAQsFAAOCAQEADNwBfPXFMskMkGaNA6YJjdrHYi2N
8fWHW39IA93rdK5QkCmU+YmMrYIYcJFYJXm/HOPJgIpqK+lk128YiBjKNOjDv6Yg
0q4XN97dJcjCby6FPZIz7MYJP7+0Eulf7FcwjpEuJdcEuSBJ2Oa3bB/Jca6jIZhn
A78yeMr4qlDssdZaun6coHAOe4/fVhMZizzXct7gTjFsoPoa6IHdNtTmQfUHUfRH
K2kBJOc5x0bPUp7RvhUVP2S6MxYbb2rJAxm14wERyFwKIlBJ1UB4F+7ZLCDfZsJ7
1QhVxacDrw41HqFWYmAKJV00KAa3fTup+i/dRxIobplXYAU2Z06KpGdVww==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org