Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1672/v_7Be0Ege3xIkTcGbIDnaldgUfw.roa
File: v_7Be0Ege3xIkTcGbIDnaldgUfw.roa (raw, json)
Hash identifier: uLLiI81VUO7wisbJD1i0q7pg7yGw5jGuNdsBYtvwPS0=
Subject key identifier: BF:FE:C1:7B:41:20:7B:7C:48:91:37:06:6C:80:E7:6A:57:60:51:FC
Certificate issuer: /CN=BF0BF67FD0C8E02FAFCC34B676BA05F33A98BC19
Certificate serial: 084A
Authority key identifier: BF:0B:F6:7F:D0:C8:E0:2F:AF:CC:34:B6:76:BA:05:F3:3A:98:BC:19
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vwv2f9DI4C-vzDS2droF8zqYvBk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/v_7Be0Ege3xIkTcGbIDnaldgUfw.roa
Signing time: Tue 15 Jun 2021 19:59:27 +0000
ROA not before: Tue 15 Jun 2021 19:59:27 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 135386
IP address blocks: 103.212.108.0/22 maxlen: 24
139.5.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2122 (0x84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF0BF67FD0C8E02FAFCC34B676BA05F33A98BC19
Validity
Not Before: Jun 15 19:59:27 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=BFFEC17B41207B7C489137066C80E76A576051FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:89:a0:ed:93:b9:fc:23:cd:ed:6f:d0:16:
3c:f5:f1:49:92:3b:4d:85:03:e4:d7:0b:4b:3e:31:
b3:b7:94:d2:65:c4:e3:c0:cd:ca:c1:c8:11:d5:c6:
64:82:ee:52:ed:f9:c7:60:93:cb:b8:f2:12:d0:70:
ec:9f:2d:3e:9f:7f:ab:82:5c:33:90:49:ed:81:f2:
f7:45:6f:b5:a2:ed:e2:5c:de:2a:88:ba:de:da:af:
15:bb:f0:d0:24:b7:27:eb:c5:3b:ac:ed:e9:be:38:
d5:6e:72:02:f7:ec:97:07:3f:75:23:2b:90:4b:72:
c4:a9:58:2b:16:0f:00:1d:27:4d:61:b4:1f:5f:af:
77:42:77:3d:fe:ec:4b:9a:53:a9:97:d3:74:96:47:
c6:c6:dc:c1:fd:e2:fe:30:c2:d1:b4:a7:0a:20:52:
07:9b:d1:d6:b4:7e:8b:61:18:1d:36:20:58:cd:76:
90:fb:5d:be:74:94:f1:5d:ca:a8:83:eb:00:24:b3:
85:cd:7e:ca:7e:54:20:fe:51:87:3e:8a:5a:c2:33:
43:e8:44:b0:97:f3:5b:bd:bb:67:43:aa:39:fc:ac:
22:3c:1f:b6:1d:1f:83:fe:1c:51:97:03:e4:a6:ae:
53:85:dd:48:7f:a4:6d:20:d8:99:f2:7c:68:63:8d:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:C1:7B:41:20:7B:7C:48:91:37:06:6C:80:E7:6A:57:60:51:FC
X509v3 Authority Key Identifier:
keyid:BF:0B:F6:7F:D0:C8:E0:2F:AF:CC:34:B6:76:BA:05:F3:3A:98:BC:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/vwv2f9DI4C-vzDS2droF8zqYvBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vwv2f9DI4C-vzDS2droF8zqYvBk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1672/v_7Be0Ege3xIkTcGbIDnaldgUfw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.108.0/22
139.5.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:e2:36:6b:0b:ea:9b:a1:40:54:8c:71:15:46:b1:33:6a:32:
d5:8e:90:6c:4a:7b:0f:0f:8d:2f:0e:f2:bd:7e:7c:af:0d:f1:
b6:13:c9:95:ef:ba:c8:3b:56:15:e4:1c:1b:03:93:3d:07:db:
8b:be:e1:2c:75:07:5a:60:2d:f2:0d:97:de:3a:be:4c:bb:92:
95:52:76:4f:50:0a:a5:8b:79:fa:b1:ae:b1:14:b1:7d:3d:8d:
82:5e:dd:2a:e8:1c:b8:fc:37:c8:47:11:b6:fc:ca:73:27:2d:
c8:cb:65:b9:41:0e:34:a6:6a:80:02:ff:1d:2b:39:dd:af:95:
9b:8c:4d:9a:68:a7:4b:bb:14:c8:91:a7:4d:d0:09:e5:42:18:
b2:5e:96:e2:c5:3a:0a:62:e3:44:c9:e1:74:26:48:7b:83:f7:
92:b2:63:a6:46:b2:f1:19:35:5b:b0:06:d2:2b:b7:a0:4a:93:
26:11:cc:41:67:a3:ea:16:0f:e7:9d:db:78:b1:31:ba:89:27:
28:ac:a3:ff:c5:18:63:1a:e4:b3:b2:03:34:af:91:78:e8:07:
bc:3b:8f:73:02:be:3a:05:44:24:f3:84:f0:3f:ee:1a:15:14:
b0:f8:7b:28:c9:1d:da:d7:4e:56:91:af:af:69:bd:1c:35:dd:
da:90:b4:b2
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICCEowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkYw
QkY2N0ZEMEM4RTAyRkFGQ0MzNEI2NzZCQTA1RjMzQTk4QkMxOTAeFw0yMTA2MTUx
OTU5MjdaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEJGRkVDMTdCNDEyMDdC
N0M0ODkxMzcwNjZDODBFNzZBNTc2MDUxRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwNomg7ZO5/CPN7W/QFjz18UmSO02FA+TXC0s+MbO3lNJlxOPA
zcrByBHVxmSC7lLt+cdgk8u48hLQcOyfLT6ff6uCXDOQSe2B8vdFb7Wi7eJc3iqI
ut7arxW78NAktyfrxTus7em+ONVucgL37JcHP3UjK5BLcsSpWCsWDwAdJ01htB9f
r3dCdz3+7EuaU6mX03SWR8bG3MH94v4wwtG0pwogUgeb0da0fothGB02IFjNdpD7
Xb50lPFdyqiD6wAks4XNfsp+VCD+UYc+ilrCM0PoRLCX81u9u2dDqjn8rCI8H7Yd
H4P+HFGXA+SmrlOF3Uh/pG0g2JnyfGhjjZgXAgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQUv/7Be0Ege3xIkTcGbIDnaldgUfwwHwYDVR0jBBgwFoAUvwv2f9DI4C+vzDS2
droF8zqYvBkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY3
Mi92d3YyZjlESTRDLXZ6RFMyZHJvRjh6cVl2QmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3Z3djJmOURJNEMtdnpEUzJkcm9GOHpxWXZCay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NzIvdl83QmUwRWdlM3hJ
a1RjR2JJRG5hbGRnVWZ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEw
DAMEAmfUbAMEAosF1DANBgkqhkiG9w0BAQsFAAOCAQEApuI2awvqm6FAVIxxFUax
M2oy1Y6QbEp7Dw+NLw7yvX58rw3xthPJle+6yDtWFeQcGwOTPQfbi77hLHUHWmAt
8g2X3jq+TLuSlVJ2T1AKpYt5+rGusRSxfT2Ngl7dKugcuPw3yEcRtvzKcyctyMtl
uUEONKZqgAL/HSs53a+Vm4xNmminS7sUyJGnTdAJ5UIYsl6W4sU6CmLjRMnhdCZI
e4P3krJjpkay8Rk1W7AG0iu3oEqTJhHMQWej6hYP553beLExuoknKKyj/8UYYxrk
s7IDNK+ReOgHvDuPcwK+OgVEJPOE8D/uGhUUsPh7KMkd2tdOVpGvr2m9HDXd2pC0
sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org