Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/762Tkq8nSOXAR_OPz9s_RqNcXgY.roa
File: 762Tkq8nSOXAR_OPz9s_RqNcXgY.roa (raw, json)
Hash identifier: SuwmTTrpBN9bVDWRRh0/gPJ14xAghX2UYi9Yuc2TlyU=
Subject key identifier: EF:AD:93:92:AF:27:48:E5:C0:47:F3:8F:CF:DB:3F:46:A3:5C:5E:06
Certificate issuer: /CN=DBCEA01717CCD8B0D00CFDBDA23A56C8E94BB546
Certificate serial: 06FF
Authority key identifier: DB:CE:A0:17:17:CC:D8:B0:D0:0C:FD:BD:A2:3A:56:C8:E9:4B:B5:46
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/286gFxfM2LDQDP29ojpWyOlLtUY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/762Tkq8nSOXAR_OPz9s_RqNcXgY.roa
Signing time: Sat 23 Oct 2021 02:10:33 +0000
ROA not before: Sat 23 Oct 2021 02:10:33 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 24424
IP address blocks: 103.203.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBCEA01717CCD8B0D00CFDBDA23A56C8E94BB546
Validity
Not Before: Oct 23 02:10:33 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=EFAD9392AF2748E5C047F38FCFDB3F46A35C5E06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:41:29:54:42:a9:4e:e6:8f:6d:79:d9:c8:
d7:47:f2:6b:9d:13:c3:b7:f1:8c:a3:65:c1:6d:bd:
fa:53:81:1d:cd:b1:64:10:dd:4a:a8:e4:30:a5:e1:
dc:11:3b:7f:eb:0e:05:99:e2:d4:50:49:b9:08:d6:
8c:33:81:56:90:a1:f2:a2:77:89:2a:e8:7c:6f:08:
47:89:a9:92:eb:50:6b:35:7b:f4:86:bd:f1:f7:40:
e1:fc:c5:bb:5e:8d:83:ff:a8:b0:2b:9c:5a:b7:d9:
40:b6:0a:e2:87:f5:a4:96:05:41:ad:c1:e6:e4:21:
c9:5d:92:12:91:e8:91:69:b6:f2:03:e4:b4:a4:c1:
d5:1d:28:f7:6a:5b:5e:dc:51:e7:7f:85:1a:4b:bd:
8b:70:a7:13:75:7b:fb:68:bb:d0:4d:0f:c8:96:86:
2f:3f:85:33:64:ec:8e:38:31:f3:85:e9:64:fe:79:
e0:b0:c5:a9:c6:d0:00:c0:d4:43:2d:71:70:50:14:
4c:79:12:a8:05:18:0f:75:16:db:bf:f3:cd:25:af:
9f:ca:67:c4:13:61:3a:3a:17:b8:bf:79:74:ff:bd:
fb:7b:4b:77:53:bc:91:5f:25:f3:9d:fb:b0:69:fa:
81:d1:75:44:24:03:50:39:16:27:bd:db:09:9c:68:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AD:93:92:AF:27:48:E5:C0:47:F3:8F:CF:DB:3F:46:A3:5C:5E:06
X509v3 Authority Key Identifier:
keyid:DB:CE:A0:17:17:CC:D8:B0:D0:0C:FD:BD:A2:3A:56:C8:E9:4B:B5:46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/286gFxfM2LDQDP29ojpWyOlLtUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/286gFxfM2LDQDP29ojpWyOlLtUY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/762Tkq8nSOXAR_OPz9s_RqNcXgY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.212.0/22
Signature Algorithm: sha256WithRSAEncryption
88:c2:92:7d:dc:98:85:b2:1d:9a:4a:a5:df:90:ae:62:7b:1d:
5c:af:9f:b2:3c:bc:44:1a:f4:86:24:f9:1b:6a:dc:d1:bd:e0:
96:8d:84:6a:ca:da:4e:9f:45:1b:84:c9:4c:0e:5a:0e:a7:93:
99:a2:f6:4a:7a:65:b6:e8:4b:a6:5a:81:d7:5f:67:c4:85:35:
70:07:85:03:51:61:73:0c:54:5f:61:f8:c5:d5:73:f3:d2:a3:
f9:3d:2c:02:fe:80:ad:b4:8c:52:fd:cc:12:52:15:af:11:87:
3c:6f:6a:af:0a:df:10:a3:34:37:cd:c0:dd:dc:0d:7d:10:01:
0e:14:b2:6b:0d:e4:c6:a4:90:e5:87:28:e9:9d:a8:26:66:c1:
76:e7:15:c9:e5:13:da:9d:cc:64:24:e7:14:ee:38:cf:36:99:
72:47:e0:a1:b3:28:de:83:10:5a:34:d3:bf:87:15:dd:7e:ec:
22:2a:a2:30:d4:03:a6:32:aa:f8:74:57:0e:2f:c0:96:5d:44:
2b:e6:53:52:36:ff:26:62:9f:60:a0:ba:b7:98:39:03:9b:57:
54:f5:61:92:c3:d3:b5:b6:4c:4b:2a:a5:b4:a6:26:ac:a0:3a:
cd:6b:6f:5b:01:0c:51:6e:1f:82:45:81:34:90:30:12:56:ac:
5f:32:fa:16
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREJD
RUEwMTcxN0NDRDhCMEQwMENGREJEQTIzQTU2QzhFOTRCQjU0NjAeFw0yMTEwMjMw
MjEwMzNaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEVGQUQ5MzkyQUYyNzQ4
RTVDMDQ3RjM4RkNGREIzRjQ2QTM1QzVFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiNEEpVEKpTuaPbXnZyNdH8mudE8O38YyjZcFtvfpTgR3NsWQQ
3Uqo5DCl4dwRO3/rDgWZ4tRQSbkI1owzgVaQofKid4kq6HxvCEeJqZLrUGs1e/SG
vfH3QOH8xbtejYP/qLArnFq32UC2CuKH9aSWBUGtwebkIcldkhKR6JFptvID5LSk
wdUdKPdqW17cUed/hRpLvYtwpxN1e/tou9BND8iWhi8/hTNk7I44MfOF6WT+eeCw
xanG0ADA1EMtcXBQFEx5EqgFGA91Ftu/880lr5/KZ8QTYTo6F7i/eXT/vft7S3dT
vJFfJfOd+7Bp+oHRdUQkA1A5Fie92wmcaIWnAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU762Tkq8nSOXAR/OPz9s/RqNcXgYwHwYDVR0jBBgwFoAU286gFxfM2LDQDP29
ojpWyOlLtUYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4
NC8yODZnRnhmTTJMRFFEUDI5b2pwV3lPbEx0VVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzI4NmdGeGZNMkxEUURQMjlvanBXeU9sTHRVWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODQvNzYyVGtxOG5TT1hB
Ul9PUHo5c19ScU5jWGdZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfL1DANBgkqhkiG9w0BAQsFAAOCAQEAiMKSfdyYhbIdmkql35CuYnsdXK+f
sjy8RBr0hiT5G2rc0b3glo2EasraTp9FG4TJTA5aDqeTmaL2SnpltuhLplqB119n
xIU1cAeFA1FhcwxUX2H4xdVz89Kj+T0sAv6ArbSMUv3MElIVrxGHPG9qrwrfEKM0
N83A3dwNfRABDhSyaw3kxqSQ5Yco6Z2oJmbBducVyeUT2p3MZCTnFO44zzaZckfg
obMo3oMQWjTTv4cV3X7sIiqiMNQDpjKq+HRXDi/All1EK+ZTUjb/JmKfYKC6t5g5
A5tXVPVhksPTtbZMSyqltKYmrKA6zWtvWwEMUW4fgkWBNJAwElasXzL6Fg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org