Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1672/iedkdW_3rUtCrAyooItK6p4LULo.roa
File: iedkdW_3rUtCrAyooItK6p4LULo.roa (raw, json)
Hash identifier: A5sJOfowwWI9rOAp/wgtF/Gn+4gVooOp3CpsgFfDv2E=
Subject key identifier: 89:E7:64:75:6F:F7:AD:4B:42:AC:0C:A8:A0:8B:4A:EA:9E:0B:50:BA
Certificate issuer: /CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39
Certificate serial: 03
Authority key identifier: E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/iedkdW_3rUtCrAyooItK6p4LULo.roa
Signing time: Wed 01 Jun 2022 07:11:36 +0000
ROA not before: Wed 01 Jun 2022 07:11:36 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 135386
IP address blocks: 103.212.108.0/22 maxlen: 24
139.5.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E06F513D8B444E79A1F584F3C29396A2C26E5F39
Validity
Not Before: Jun 1 07:11:36 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=89E764756FF7AD4B42AC0CA8A08B4AEA9E0B50BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:e6:15:4b:6e:c3:aa:1a:6a:3f:9b:93:a8:
f4:f5:68:1b:ce:84:1c:bf:ce:d5:5d:0a:41:e4:a7:
63:56:3e:15:91:f3:17:77:8d:46:7c:63:b2:f0:2d:
7c:ce:ed:ff:f7:61:7f:25:9a:ee:d6:2d:5f:2f:94:
f1:c6:a5:fd:03:9a:9a:b6:a5:58:b5:11:bd:65:76:
b0:f1:da:2c:89:9a:b0:be:21:46:be:e7:b2:a1:6e:
32:af:d1:1c:1d:ec:20:4f:bb:77:42:e4:0e:b7:6a:
7a:1b:01:79:95:d8:17:ff:5c:29:c1:f7:32:ed:49:
76:62:af:fe:02:0b:a9:98:a2:9d:e3:c8:a0:27:bf:
f5:b4:f4:4e:81:a3:40:e1:92:d3:cf:b6:74:c9:e6:
70:4c:be:2e:58:20:8a:46:ca:4d:36:07:08:14:c7:
a5:2b:16:d4:57:c2:e1:bd:22:0e:51:ac:ec:e8:a8:
f9:42:34:50:4a:10:d8:13:51:51:37:55:40:01:7d:
0b:3a:49:e5:19:d0:b5:c8:f7:be:5c:b7:95:18:ea:
c7:9b:08:6d:96:76:7e:05:75:6d:94:0e:83:85:8d:
14:73:9e:b8:1b:f6:e1:c1:98:b5:2d:a4:e7:0e:59:
10:69:c9:3c:f3:58:3d:7f:c5:a2:ae:30:4d:50:9b:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:64:75:6F:F7:AD:4B:42:AC:0C:A8:A0:8B:4A:EA:9E:0B:50:BA
X509v3 Authority Key Identifier:
keyid:E0:6F:51:3D:8B:44:4E:79:A1:F5:84:F3:C2:93:96:A2:C2:6E:5F:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/4G9RPYtETnmh9YTzwpOWosJuXzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/4G9RPYtETnmh9YTzwpOWosJuXzk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/iedkdW_3rUtCrAyooItK6p4LULo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.108.0/22
139.5.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:c0:b8:17:29:1b:60:da:3f:8d:18:0f:43:b4:fa:6b:32:3a:
76:2d:e0:7b:50:ee:94:85:c0:da:41:b4:05:23:2f:bb:60:d1:
73:6b:fe:99:2b:a9:67:c4:c3:5b:ce:00:2a:cb:a1:e2:2a:7f:
40:69:0f:67:b5:ad:0d:f8:db:12:a7:c0:54:a7:09:f2:40:21:
c2:ef:04:ea:aa:c5:ad:69:1c:86:a0:40:c6:76:2c:fc:21:71:
17:54:e6:3c:14:a4:dd:b2:fc:49:36:ca:df:a7:1e:e8:a2:3e:
99:14:d1:84:cd:2f:83:7c:9d:59:1c:13:86:c9:3b:e4:cb:c3:
58:55:08:55:8c:66:1f:50:dd:02:49:6d:c7:f0:c3:ad:a7:c7:
fa:e2:6f:74:00:3f:38:54:17:82:d6:33:dc:ae:c1:e3:bb:e9:
9f:ad:a4:06:00:4c:27:ee:06:92:38:b1:64:4c:5a:f6:3b:be:
18:cb:f7:6e:45:94:c2:70:8b:79:8e:94:28:c8:3d:e2:f5:95:
37:ea:e0:3c:6a:d5:3b:76:10:b0:65:7b:34:85:4b:ff:f7:fb:
33:40:dc:ac:5c:d9:d3:01:96:3f:4f:0f:59:85:34:21:a0:47:
9d:71:46:fe:86:3b:a7:bb:bf:f6:2c:e7:d3:78:27:f1:f8:ce:
a0:ad:35:d3
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDZG
NTEzRDhCNDQ0RTc5QTFGNTg0RjNDMjkzOTZBMkMyNkU1RjM5MB4XDTIyMDYwMTA3
MTEzNloXDTIzMDYwMTA2NTg1NFowMzExMC8GA1UEAxMoODlFNzY0NzU2RkY3QUQ0
QjQyQUMwQ0E4QTA4QjRBRUE5RTBCNTBCQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOrh5hVLbsOqGmo/m5Oo9PVoG86EHL/O1V0KQeSnY1Y+FZHzF3eN
RnxjsvAtfM7t//dhfyWa7tYtXy+U8cal/QOamralWLURvWV2sPHaLImasL4hRr7n
sqFuMq/RHB3sIE+7d0LkDrdqehsBeZXYF/9cKcH3Mu1JdmKv/gILqZiinePIoCe/
9bT0ToGjQOGS08+2dMnmcEy+LlggikbKTTYHCBTHpSsW1FfC4b0iDlGs7Oio+UI0
UEoQ2BNRUTdVQAF9CzpJ5RnQtcj3vly3lRjqx5sIbZZ2fgV1bZQOg4WNFHOeuBv2
4cGYtS2k5w5ZEGnJPPNYPX/Foq4wTVCb4DECAwEAAaOCAfkwggH1MB0GA1UdDgQW
BBSJ52R1b/etS0KsDKigi0rqngtQujAfBgNVHSMEGDAWgBTgb1E9i0ROeaH1hPPC
k5aiwm5fOTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xNjcy
LzRHOVJQWXRFVG5taDlZVHp3cE9Xb3NKdVh6ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNEc5UlBZdEVUbm1oOVlUendwT1dvc0p1WHprLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY3Mi9pZWRrZFdfM3JVdENy
QXlvb0l0SzZwNExVTG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM
AwQCZ9RsAwQCiwXUMA0GCSqGSIb3DQEBCwUAA4IBAQCbwLgXKRtg2j+NGA9DtPpr
Mjp2LeB7UO6UhcDaQbQFIy+7YNFza/6ZK6lnxMNbzgAqy6HiKn9AaQ9nta0N+NsS
p8BUpwnyQCHC7wTqqsWtaRyGoEDGdiz8IXEXVOY8FKTdsvxJNsrfpx7ooj6ZFNGE
zS+DfJ1ZHBOGyTvky8NYVQhVjGYfUN0CSW3H8MOtp8f64m90AD84VBeC1jPcrsHj
u+mfraQGAEwn7gaSOLFkTFr2O74Yy/duRZTCcIt5jpQoyD3i9ZU36uA8atU7dhCw
ZXs0hUv/9/szQNysXNnTAZY/Tw9ZhTQhoEedcUb+hjunu7/2LOfTeCfx+M6grTXT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org