Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/187/0RcQy3MtCxILBVCpovVeEe_VYzg.roa
File: 0RcQy3MtCxILBVCpovVeEe_VYzg.roa (raw, json)
Hash identifier: xsMEWUnJOLFS/YT6XEboyz9gyiAlu47nEsoAv3ozvtE=
Subject key identifier: D1:17:10:CB:73:2D:0B:12:0B:05:50:A9:A2:F5:5E:11:EF:D5:63:38
Certificate issuer: /CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Certificate serial: 04
Authority key identifier: 2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/0RcQy3MtCxILBVCpovVeEe_VYzg.roa
Signing time: Thu 19 Aug 2021 02:56:08 +0000
ROA not before: Thu 19 Aug 2021 02:56:08 +0000
ROA not after: Fri 19 Aug 2022 02:28:36 +0000
asID: 398704
IP address blocks: 219.72.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Validity
Not Before: Aug 19 02:56:08 2021 GMT
Not After : Aug 19 02:28:36 2022 GMT
Subject: CN=D11710CB732D0B120B0550A9A2F55E11EFD56338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:06:3f:95:01:bf:4e:e9:de:08:7c:0a:85:
11:22:e5:f0:08:e3:14:16:fe:55:8a:c6:cf:47:9a:
6b:1a:72:15:64:a1:44:fa:8c:ea:ed:39:a7:80:7e:
c8:b3:68:a0:17:9b:d6:b0:5d:ea:6e:15:88:c0:22:
ac:c7:23:40:c6:3b:c9:83:cf:27:77:b0:de:66:59:
cb:66:1e:66:ac:04:a0:af:00:18:fd:21:6c:69:a5:
b8:55:9f:89:9f:26:0b:86:cf:d1:5b:d9:b2:64:d9:
2e:b7:af:57:4e:8f:c5:0c:84:53:e5:ed:ab:30:c4:
ca:cd:20:75:7e:7c:b5:67:18:23:5a:b4:15:d2:d1:
43:71:a1:61:11:91:ec:bc:22:6d:ee:14:be:8a:b6:
19:99:7d:41:11:61:0f:97:32:2a:68:54:dd:ab:db:
01:8b:3a:db:da:02:ad:11:22:06:e0:ef:29:58:06:
4c:c9:13:e4:45:f6:3a:fe:2e:58:e2:77:eb:be:0c:
c4:92:44:3a:3c:5a:e0:00:3c:2a:61:34:e0:48:c1:
36:99:a3:64:28:80:02:e1:54:25:14:36:d9:69:b9:
cc:f2:48:d7:d6:53:86:7a:80:ff:a4:69:ce:52:a4:
55:1f:3e:d8:b9:27:9a:5f:cb:ff:36:b4:75:c2:99:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:10:CB:73:2D:0B:12:0B:05:50:A9:A2:F5:5E:11:EF:D5:63:38
X509v3 Authority Key Identifier:
keyid:2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/0RcQy3MtCxILBVCpovVeEe_VYzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.72.160.0/24
Signature Algorithm: sha256WithRSAEncryption
61:24:91:da:82:5c:4e:a9:88:86:fa:70:fe:5a:8a:7d:54:d6:
80:da:09:15:41:72:39:8a:dc:fc:2a:2d:24:15:ba:f5:2b:e1:
a0:5c:c7:5b:26:70:5b:20:91:3f:9b:a3:e3:c5:bb:85:52:d1:
59:d3:46:6c:a7:36:c4:05:0e:7e:64:23:e7:2e:26:ef:01:79:
e3:6a:17:9b:ce:45:c3:f4:fd:73:2c:da:84:1f:7b:ed:49:7e:
a2:4f:91:37:1a:1e:c6:41:5f:82:16:39:28:2a:a4:0e:39:02:
06:fb:fc:73:a8:96:5a:0d:e5:c6:a0:e9:ed:d9:2a:d4:ee:f7:
99:5b:63:63:e6:d9:1c:6e:49:4a:db:55:85:31:ee:9b:f6:1c:
95:26:e0:5d:b3:33:7e:aa:35:77:da:0b:64:92:aa:8e:10:8f:
84:9c:59:51:3c:89:b1:aa:21:e9:58:a4:e3:24:22:21:1a:b9:
4e:28:64:3a:9d:8d:e5:44:80:4c:62:bd:d5:7b:90:5e:0a:44:
12:b3:88:12:bc:54:99:ec:bb:65:a9:df:4c:1f:01:9d:3f:fa:
0b:1a:5d:6a:3e:66:bc:a6:a2:23:fd:f2:40:80:57:7e:68:95:
ac:15:4e:85:4e:7b:e2:e9:ca:12:99:10:97:88:6f:9a:a5:d1:
a7:13:83:77
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRThD
MURFMTk0NzQwMzVDQkVBNjc4MDU0QjZEOTRGNUFGQTUzMzYxMB4XDTIxMDgxOTAy
NTYwOFoXDTIyMDgxOTAyMjgzNlowMzExMC8GA1UEAxMoRDExNzEwQ0I3MzJEMEIx
MjBCMDU1MEE5QTJGNTVFMTFFRkQ1NjMzODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMiIBj+VAb9O6d4IfAqFESLl8AjjFBb+VYrGz0eaaxpyFWShRPqM
6u05p4B+yLNooBeb1rBd6m4ViMAirMcjQMY7yYPPJ3ew3mZZy2YeZqwEoK8AGP0h
bGmluFWfiZ8mC4bP0VvZsmTZLrevV06PxQyEU+XtqzDEys0gdX58tWcYI1q0FdLR
Q3GhYRGR7Lwibe4Uvoq2GZl9QRFhD5cyKmhU3avbAYs629oCrREiBuDvKVgGTMkT
5EX2Ov4uWOJ3674MxJJEOjxa4AA8KmE04EjBNpmjZCiAAuFUJRQ22Wm5zPJI19ZT
hnqA/6RpzlKkVR8+2Lknml/L/za0dcKZ0QsCAwEAAaOCAfEwggHtMB0GA1UdDgQW
BBTRFxDLcy0LEgsFUKmi9V4R79VjODAfBgNVHSMEGDAWgBQujB3hlHQDXL6meAVL
bZT1r6UzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xODcv
TG93ZDRaUjBBMXktcG5nRlMyMlU5YS1sTTJFLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9Mb3dkNFpSMEExeS1wbmdGUzIyVTlhLWxNMkUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xODcvMFJjUXkzTXRDeElMQlZD
cG92VmVFZV9WWXpnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANtIoDANBgkqhkiG9w0BAQsFAAOCAQEAYSSR2oJcTqmIhvpw/lqKfVTWgNoJFUFy
OYrc/CotJBW69SvhoFzHWyZwWyCRP5uj48W7hVLRWdNGbKc2xAUOfmQj5y4m7wF5
42oXm85Fw/T9cyzahB977Ul+ok+RNxoexkFfghY5KCqkDjkCBvv8c6iWWg3lxqDp
7dkq1O73mVtjY+bZHG5JSttVhTHum/YclSbgXbMzfqo1d9oLZJKqjhCPhJxZUTyJ
saoh6Vik4yQiIRq5TihkOp2N5USATGK91XuQXgpEErOIErxUmey7ZanfTB8BnT/6
Cxpdaj5mvKaiI/3yQIBXfmiVrBVOhU574unKEpkQl4hvmqXRpxODdw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:14 2023 by rpki-client on console-fra.rpki-client.org