Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/187/8tgouDxahWloqFWg92kjndNpzus.roa
File:                     8tgouDxahWloqFWg92kjndNpzus.roa (raw, json)
Hash identifier:          9Ixk32eM9b0hpvvV8PIfR97wjUQHSfIPhLQGPQhu5mE=
Subject key identifier:   F2:D8:28:B8:3C:5A:85:69:68:A8:55:A0:F7:69:23:9D:D3:69:CE:EB
Certificate issuer:       /CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
Certificate serial:       070B
Authority key identifier: 2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/8tgouDxahWloqFWg92kjndNpzus.roa
Signing time:             Fri 05 Aug 2022 02:43:24 +0000
ROA not before:           Fri 05 Aug 2022 02:43:24 +0000
ROA not after:            Wed 19 Jul 2023 01:20:03 +0000
asID:                     18118
IP address blocks:        219.72.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803 (0x70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8C1DE19474035CBEA678054B6D94F5AFA53361
        Validity
            Not Before: Aug  5 02:43:24 2022 GMT
            Not After : Jul 19 01:20:03 2023 GMT
        Subject: CN=F2D828B83C5A856968A855A0F769239DD369CEEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:d4:39:11:fd:c7:c8:91:f7:00:49:61:aa:
                    0c:09:8c:41:08:f6:88:7f:c9:f8:80:e3:4a:7c:71:
                    e3:06:56:84:eb:e8:5b:3f:96:7f:fc:1e:73:13:ae:
                    6d:e5:b1:3c:0d:22:89:3a:b2:aa:5c:cc:b9:4e:63:
                    56:cd:a5:4f:85:5d:76:70:a1:cd:17:d0:5a:74:0e:
                    14:5d:e4:e0:77:db:62:9d:ae:d9:dd:e2:08:0c:dd:
                    a6:88:4c:5f:60:6a:4a:c8:55:09:e2:18:d5:58:75:
                    3f:eb:27:6b:bb:19:27:ae:ae:4f:bf:d0:88:a9:98:
                    4e:c3:f5:16:b8:87:84:21:3e:bb:0a:4c:cd:d0:38:
                    df:c8:3a:7e:10:95:da:2d:40:52:da:3d:6a:ce:f9:
                    8f:04:3c:f1:25:b8:f8:59:dc:49:fc:d4:ec:f6:04:
                    16:c5:d6:fc:7e:96:2d:38:69:81:dc:61:ea:6b:45:
                    b8:56:a5:a5:cd:01:4e:6f:94:ec:a8:e5:a8:9a:2a:
                    09:29:de:7b:31:dd:92:03:14:4f:d0:47:97:66:97:
                    48:59:cc:cd:43:b0:b2:b2:b2:98:a4:40:0f:43:f0:
                    e6:07:b1:4d:80:f0:73:47:43:be:2a:cd:ca:25:a6:
                    e9:a0:95:cc:ed:44:d5:ed:07:5c:86:71:7f:e1:89:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D8:28:B8:3C:5A:85:69:68:A8:55:A0:F7:69:23:9D:D3:69:CE:EB
            X509v3 Authority Key Identifier:
                keyid:2E:8C:1D:E1:94:74:03:5C:BE:A6:78:05:4B:6D:94:F5:AF:A5:33:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/Lowd4ZR0A1y-pngFS22U9a-lM2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Lowd4ZR0A1y-pngFS22U9a-lM2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/187/8tgouDxahWloqFWg92kjndNpzus.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ac:93:f6:db:3e:f4:df:2d:c1:52:77:b6:ce:3e:dd:a4:d6:
         f0:10:55:e0:45:2f:ec:13:76:b2:15:df:63:11:5a:42:cc:6c:
         d2:b0:0c:84:8d:6c:c5:32:c3:36:aa:07:1c:83:79:ac:fa:09:
         43:75:18:ec:45:a5:28:b4:b8:cb:91:1c:5a:5e:46:c1:25:5b:
         4b:d1:d2:27:2a:5a:a2:38:84:82:9b:02:1e:c8:23:1d:1f:d4:
         27:c9:5a:43:e1:49:76:ec:4b:ea:cc:40:1f:29:1d:44:07:53:
         07:17:ee:55:58:75:e0:ea:34:83:09:01:4a:a5:ea:c7:18:6f:
         71:2a:43:fd:a2:dc:85:b8:21:01:10:3a:13:11:fd:c4:08:e2:
         54:8f:0a:26:aa:53:eb:14:12:6a:63:cc:ab:23:ee:73:55:01:
         47:7b:4c:e3:15:0c:ca:5e:f3:f6:5b:20:de:4e:48:6a:88:25:
         a7:3e:2c:ac:f7:1e:9d:20:6b:18:55:0d:39:31:06:f7:75:f4:
         6a:97:46:5d:11:01:e3:27:2b:27:05:07:75:0c:95:96:5e:77:
         86:7e:12:33:c3:13:5d:a0:52:1a:2d:f6:b0:0e:84:07:af:1d:
         ff:31:a6:ab:85:69:79:a2:ae:5d:7e:9a:89:84:a2:1b:3e:5e:
         68:e2:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org