Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1628/zyqKrSsEQTh-uxoqaeQhTj2xlAc.roa
File: zyqKrSsEQTh-uxoqaeQhTj2xlAc.roa (raw, json)
Hash identifier: 0tGTwFblaUxh+2jH1Kjjs89C9ovJ2U0VII/EASpm4cc=
Subject key identifier: CF:2A:8A:AD:2B:04:41:38:7E:BB:1A:2A:69:E4:21:4E:3D:B1:94:07
Certificate issuer: /CN=997C0DD494819E9C1F3BFD3AA98031FEF8EB7DA3
Certificate serial: 0954
Authority key identifier: 99:7C:0D:D4:94:81:9E:9C:1F:3B:FD:3A:A9:80:31:FE:F8:EB:7D:A3
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mXwN1JSBnpwfO_06qYAx_vjrfaM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/zyqKrSsEQTh-uxoqaeQhTj2xlAc.roa
Signing time: Tue 07 Jun 2022 02:12:28 +0000
ROA not before: Tue 07 Jun 2022 02:12:28 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 63679
IP address blocks: 103.208.40.0/22 maxlen: 24
103.208.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388 (0x954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997C0DD494819E9C1F3BFD3AA98031FEF8EB7DA3
Validity
Not Before: Jun 7 02:12:28 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=CF2A8AAD2B0441387EBB1A2A69E4214E3DB19407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:02:06:8d:2e:dc:a3:f5:b1:12:d5:64:e2:
67:5f:da:5e:a2:a8:09:75:a8:4a:be:f2:4b:1b:5a:
f6:84:94:89:b2:d0:74:ae:b1:ee:ca:57:49:9b:88:
e2:a5:32:e1:85:16:b1:51:1c:c9:a4:4e:da:46:06:
0a:ab:cb:fa:ef:12:5a:78:8d:87:d8:85:e9:cb:70:
f9:55:64:04:c6:6e:66:f3:b7:05:60:f0:fa:58:ab:
57:82:c0:f5:6c:23:0d:6b:7c:71:62:af:b4:ee:92:
dd:c5:5e:8b:c1:40:89:6e:19:53:7f:29:fc:9b:d0:
6e:59:9c:e1:1b:2d:62:5a:e7:fb:11:5e:f6:32:d7:
7b:50:d4:2d:6f:dd:a9:77:e3:30:ea:cf:6f:c7:46:
b8:1d:95:c1:cc:30:4b:42:e7:47:fc:c2:3c:35:f6:
13:ba:89:fb:92:14:b9:4f:bc:5c:26:76:39:d9:69:
41:99:45:45:ba:a4:3d:cc:48:01:bd:b2:2b:c3:f9:
fc:e9:d3:b5:95:ed:8f:8a:f4:87:51:7c:99:61:a5:
8b:1f:1f:df:d2:f8:6d:48:4f:06:7c:97:9e:65:9a:
7e:12:c1:56:70:a7:77:8c:1d:9d:f1:2e:e6:a3:f4:
b1:b1:a6:70:2e:3b:f6:a1:30:58:b4:5c:39:3a:86:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2A:8A:AD:2B:04:41:38:7E:BB:1A:2A:69:E4:21:4E:3D:B1:94:07
X509v3 Authority Key Identifier:
keyid:99:7C:0D:D4:94:81:9E:9C:1F:3B:FD:3A:A9:80:31:FE:F8:EB:7D:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/mXwN1JSBnpwfO_06qYAx_vjrfaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mXwN1JSBnpwfO_06qYAx_vjrfaM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1628/zyqKrSsEQTh-uxoqaeQhTj2xlAc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.208.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:64:d1:be:a4:04:5b:11:c3:e3:f0:ef:b2:91:49:df:15:a3:
81:4a:61:a9:c5:0a:fd:19:14:8e:ad:03:01:63:20:d6:18:8b:
96:79:72:4a:82:3f:73:e9:f9:d7:8c:23:0e:7c:1a:a7:a2:2f:
7a:75:0f:46:fc:09:69:83:cf:e1:78:a3:42:f5:39:24:21:5d:
f2:05:08:15:ab:10:0e:49:d6:b3:f5:66:79:ed:d7:a7:42:23:
47:a0:d0:61:2f:20:2d:89:0e:3f:25:5c:03:88:6f:4d:e6:02:
37:7d:bb:ca:2a:e3:74:ea:06:05:93:3c:f0:69:65:9d:76:94:
c9:ae:24:7b:61:87:69:e1:ae:30:dd:e4:e5:e6:71:6a:a8:e5:
f5:49:de:71:b6:65:51:49:c2:db:d7:42:18:0a:02:8f:9d:0d:
3c:d9:fd:8f:6a:ba:28:6b:8a:c1:b8:83:c0:f8:a7:b8:0b:a7:
ba:9a:e1:4f:20:69:6c:19:90:e9:65:76:15:89:7a:84:bd:e2:
a1:27:db:c5:fe:95:7e:75:53:38:38:9b:10:ff:4b:aa:7f:ef:
ef:05:62:1c:b5:6d:c8:45:b4:01:21:cd:d5:b8:cb:19:aa:17:
04:28:77:22:77:81:82:37:5a:65:71:a0:e0:41:d4:c1:e0:14:
7c:f3:f3:bc
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk3
QzBERDQ5NDgxOUU5QzFGM0JGRDNBQTk4MDMxRkVGOEVCN0RBMzAeFw0yMjA2MDcw
MjEyMjhaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKENGMkE4QUFEMkIwNDQx
Mzg3RUJCMUEyQTY5RTQyMTRFM0RCMTk0MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFxgIGjS7co/WxEtVk4mdf2l6iqAl1qEq+8ksbWvaElImy0HSu
se7KV0mbiOKlMuGFFrFRHMmkTtpGBgqry/rvElp4jYfYhenLcPlVZATGbmbztwVg
8PpYq1eCwPVsIw1rfHFir7Tukt3FXovBQIluGVN/Kfyb0G5ZnOEbLWJa5/sRXvYy
13tQ1C1v3al34zDqz2/HRrgdlcHMMEtC50f8wjw19hO6ifuSFLlPvFwmdjnZaUGZ
RUW6pD3MSAG9sivD+fzp07WV7Y+K9IdRfJlhpYsfH9/S+G1ITwZ8l55lmn4SwVZw
p3eMHZ3xLuaj9LGxpnAuO/ahMFi0XDk6hpdRAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUzyqKrSsEQTh+uxoqaeQhTj2xlAcwHwYDVR0jBBgwFoAUmXwN1JSBnpwfO/06
qYAx/vjrfaMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYy
OC9tWHdOMUpTQm5wd2ZPXzA2cVlBeF92anJmYU0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL21Yd04xSlNCbnB3Zk9fMDZxWUF4X3ZqcmZhTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2MjgvenlxS3JTc0VRVGgt
dXhvcWFlUWhUajJ4bEFjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfQKDANBgkqhkiG9w0BAQsFAAOCAQEALWTRvqQEWxHD4/DvspFJ3xWjgUph
qcUK/RkUjq0DAWMg1hiLlnlySoI/c+n514wjDnwap6IvenUPRvwJaYPP4XijQvU5
JCFd8gUIFasQDknWs/Vmee3Xp0IjR6DQYS8gLYkOPyVcA4hvTeYCN327yirjdOoG
BZM88GllnXaUya4ke2GHaeGuMN3k5eZxaqjl9UnecbZlUUnC29dCGAoCj50NPNn9
j2q6KGuKwbiDwPinuAunuprhTyBpbBmQ6WV2FYl6hL3ioSfbxf6VfnVTODibEP9L
qn/v7wViHLVtyEW0ASHN1bjLGaoXBCh3IneBgjdaZXGg4EHUweAUfPPzvA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org