Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1630/R7Z2XHiU3r01xsHA9aSi5TlvkMU.roa
File: R7Z2XHiU3r01xsHA9aSi5TlvkMU.roa (raw, json)
Hash identifier: 7PmUA9FrLO3x3u21atk99IGs+a22ZuKG/2n/DCGM2Dc=
Subject key identifier: 47:B6:76:5C:78:94:DE:BD:35:C6:C1:C0:F5:A4:A2:E5:39:6F:90:C5
Certificate issuer: /CN=A68DCF97A1BFF797FBA88969B7D17DD03E6A13A4
Certificate serial: 03
Authority key identifier: A6:8D:CF:97:A1:BF:F7:97:FB:A8:89:69:B7:D1:7D:D0:3E:6A:13:A4
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/po3Pl6G_95f7qIlpt9F90D5qE6Q.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/R7Z2XHiU3r01xsHA9aSi5TlvkMU.roa
Signing time: Thu 27 May 2021 05:05:48 +0000
ROA not before: Thu 27 May 2021 05:05:48 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 63677
IP address blocks: 27.0.204.0/22 maxlen: 24
27.0.208.0/22 maxlen: 24
27.0.212.0/22 maxlen: 24
103.208.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A68DCF97A1BFF797FBA88969B7D17DD03E6A13A4
Validity
Not Before: May 27 05:05:48 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=47B6765C7894DEBD35C6C1C0F5A4A2E5396F90C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:13:4f:56:e5:c5:11:fd:b5:0f:2f:aa:81:20:
67:f2:cd:be:81:b1:e4:24:93:d9:f7:8a:5c:20:24:
82:d2:04:2f:d2:b8:b5:a9:95:a8:8e:0f:21:a4:ad:
21:d4:44:9a:7e:13:de:51:85:30:b1:ae:aa:ca:82:
d3:35:b0:16:32:3a:c0:96:de:4e:5a:a3:24:09:84:
a0:24:17:53:25:b2:bc:f3:c9:21:b0:be:08:5f:b6:
fa:a2:45:f8:7f:4e:85:70:ff:5c:77:3e:d7:38:da:
e9:e5:02:e2:83:0d:ca:72:cd:6d:95:fa:83:66:96:
b9:18:de:af:31:b1:3d:a7:2f:d6:5c:38:77:dd:ef:
82:a1:44:cf:e0:66:a2:7a:48:c3:83:0f:6c:e2:9d:
2a:f9:60:0b:63:e4:a0:cc:66:7b:c0:d4:a6:e4:47:
14:66:87:5d:c5:63:80:27:2d:a4:74:23:74:4d:a3:
e5:06:20:63:a3:b3:b2:9c:43:c5:ee:1e:72:7b:aa:
90:65:14:f2:af:cc:88:4f:08:b3:49:55:31:d6:bb:
82:10:0d:45:19:3d:fe:95:80:2c:23:4d:49:2b:cd:
3c:76:51:de:b1:93:94:8c:35:02:c3:91:60:f4:6f:
1b:32:fc:2f:78:1d:cb:c5:44:ea:ad:75:04:f9:32:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B6:76:5C:78:94:DE:BD:35:C6:C1:C0:F5:A4:A2:E5:39:6F:90:C5
X509v3 Authority Key Identifier:
keyid:A6:8D:CF:97:A1:BF:F7:97:FB:A8:89:69:B7:D1:7D:D0:3E:6A:13:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/po3Pl6G_95f7qIlpt9F90D5qE6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/po3Pl6G_95f7qIlpt9F90D5qE6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1630/R7Z2XHiU3r01xsHA9aSi5TlvkMU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.204.0-27.0.215.255
103.208.48.0/22
Signature Algorithm: sha256WithRSAEncryption
92:d7:aa:f9:c1:83:dc:6b:08:31:06:8c:af:a8:40:3b:fe:82:
a0:71:c6:2b:b0:b5:c2:98:6e:7f:6b:d8:07:cf:f9:cf:ea:71:
5a:63:8e:1a:b3:ab:8b:e4:1c:62:7a:12:ce:d0:c3:1c:a7:e6:
de:e0:e3:30:02:0a:1a:35:ec:4e:ac:80:68:35:38:35:47:91:
1a:54:c8:5c:07:59:cc:ac:c6:3d:b3:a4:b3:df:14:ee:c6:52:
63:40:3a:64:a7:87:af:3f:ea:73:bf:63:2b:1e:27:19:44:b4:
93:e6:df:87:83:6a:f4:10:9b:4c:bb:8a:3d:4b:6e:ed:46:cd:
c8:f5:e7:46:67:cd:8a:b0:38:81:33:7b:ac:b8:b9:27:c6:e6:
b5:e8:4d:35:ae:e2:a2:b3:d5:a2:39:f6:21:fd:fd:7b:4f:fd:
0e:2a:ab:e5:e6:d0:36:a0:f0:3b:08:39:86:9f:a2:95:eb:fb:
8d:1e:47:28:63:00:ca:30:a3:ae:1e:6b:97:16:34:fe:04:0c:
e3:6f:55:2e:51:14:65:6d:d6:a1:44:80:44:42:50:8c:e9:43:
92:f0:66:fd:ab:67:01:9c:6f:57:5b:68:b1:70:b3:6e:8e:e8:
34:cb:6e:b2:51:ee:1b:cc:b7:2f:d3:8e:af:e6:40:15:0e:67:
77:77:32:50
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjhE
Q0Y5N0ExQkZGNzk3RkJBODg5NjlCN0QxN0REMDNFNkExM0E0MB4XDTIxMDUyNzA1
MDU0OFoXDTIyMDUyNzA0NTk1MlowMzExMC8GA1UEAxMoNDdCNjc2NUM3ODk0REVC
RDM1QzZDMUMwRjVBNEEyRTUzOTZGOTBDNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANQTT1blxRH9tQ8vqoEgZ/LNvoGx5CST2feKXCAkgtIEL9K4tamV
qI4PIaStIdREmn4T3lGFMLGuqsqC0zWwFjI6wJbeTlqjJAmEoCQXUyWyvPPJIbC+
CF+2+qJF+H9OhXD/XHc+1zja6eUC4oMNynLNbZX6g2aWuRjerzGxPacv1lw4d93v
gqFEz+BmonpIw4MPbOKdKvlgC2PkoMxme8DUpuRHFGaHXcVjgCctpHQjdE2j5QYg
Y6OzspxDxe4ecnuqkGUU8q/MiE8Is0lVMda7ghANRRk9/pWALCNNSSvNPHZR3rGT
lIw1AsORYPRvGzL8L3gdy8VE6q11BPkymEUCAwEAAaOCAgEwggH9MB0GA1UdDgQW
BBRHtnZceJTevTXGwcD1pKLlOW+QxTAfBgNVHSMEGDAWgBSmjc+Xob/3l/uoiWm3
0X3QPmoTpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjMw
L3BvM1BsNkdfOTVmN3FJbHB0OUY5MEQ1cUU2US5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvcG8zUGw2R185NWY3cUlscHQ5RjkwRDVxRTZRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTYzMC9SN1oyWEhpVTNyMDF4
c0hBOWFTaTVUbHZrTVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAU
MAwDBAIbAMwDBAMbANADBAJn0DAwDQYJKoZIhvcNAQELBQADggEBAJLXqvnBg9xr
CDEGjK+oQDv+gqBxxiuwtcKYbn9r2AfP+c/qcVpjjhqzq4vkHGJ6Es7Qwxyn5t7g
4zACCho17E6sgGg1ODVHkRpUyFwHWcysxj2zpLPfFO7GUmNAOmSnh68/6nO/Yyse
JxlEtJPm34eDavQQm0y7ij1Lbu1Gzcj150ZnzYqwOIEze6y4uSfG5rXoTTWu4qKz
1aI59iH9/XtP/Q4qq+Xm0Dag8DsIOYafopXr+40eRyhjAMowo64ea5cWNP4EDONv
VS5RFGVt1qFEgERCUIzpQ5LwZv2rZwGcb1dbaLFws26O6DTLbrJR7hvMty/Tjq/m
QBUOZ3d3MlA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org