Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/C2zFiwAjtrczT_TDqYbfyf5Aks0.roa
File: C2zFiwAjtrczT_TDqYbfyf5Aks0.roa (raw, json)
Hash identifier: SmevBqzJDng22wCvuzykIfW8/LoUueCOl8RXYebwIK0=
Subject key identifier: 0B:6C:C5:8B:00:23:B6:B7:33:4F:F4:C3:A9:86:DF:C9:FE:40:92:CD
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 1007
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/C2zFiwAjtrczT_TDqYbfyf5Aks0.roa
Signing time: Fri 19 May 2023 05:55:06 +0000
ROA not before: Fri 19 May 2023 05:55:06 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 9808
IP address blocks: 121.255.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4103 (0x1007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: May 19 05:55:06 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=0B6CC58B0023B6B7334FF4C3A986DFC9FE4092CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:b2:cc:dc:49:34:ee:8a:a6:07:b3:05:74:
1b:dd:d8:9d:c9:27:cd:b7:e1:d9:71:44:14:bd:27:
8c:52:65:a3:33:c6:1b:4b:53:2c:aa:e8:70:39:eb:
88:b5:9c:62:7b:c4:fd:7e:41:80:a7:5e:5b:3c:c0:
00:72:3d:dd:1d:f4:14:79:a7:5c:e5:1a:35:41:60:
49:80:7c:0e:bf:0f:8c:f9:b8:ad:5b:b4:e5:81:ee:
f0:17:ae:f9:a4:05:15:1f:22:ac:09:26:67:f6:76:
28:b9:b7:de:dd:dd:55:5c:26:1e:f4:f1:17:4b:d5:
14:37:77:1d:20:ab:c4:4a:27:87:98:bc:f2:4a:f8:
84:43:22:ee:ae:36:0c:f3:ab:c5:23:da:0f:4f:83:
bb:57:76:15:20:de:2f:72:ca:d7:e1:3a:8e:38:2d:
44:00:03:5f:1d:6f:b6:ba:4d:18:e0:69:34:f4:ab:
81:89:e3:8a:c6:be:73:e5:2d:8c:7a:30:fe:de:35:
89:a6:7b:6f:6d:1d:64:4e:2d:c6:81:62:d5:25:f0:
f3:69:3e:f3:75:e2:9e:97:ee:ec:90:e2:cc:59:c8:
4f:36:41:ee:49:fd:0b:30:0a:cd:54:1c:9d:cf:ae:
89:8b:f6:5f:5a:87:f1:99:4e:dc:e2:c8:30:5b:95:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6C:C5:8B:00:23:B6:B7:33:4F:F4:C3:A9:86:DF:C9:FE:40:92:CD
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/C2zFiwAjtrczT_TDqYbfyf5Aks0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:2c:2c:0b:1c:2d:88:c3:3e:dc:0a:b5:2a:09:40:91:4e:f2:
3e:9e:da:47:bd:c9:5c:f7:14:d8:d7:b8:80:ca:ed:38:d8:2f:
d4:c4:bb:0a:b0:3a:32:03:72:81:a8:d4:0d:ea:37:7f:fb:de:
00:bf:3a:21:64:28:64:f1:ea:d0:bd:cb:83:b4:d7:1f:6f:a5:
c0:e1:a2:f3:f9:7d:38:ed:15:58:95:b0:f7:7b:6d:59:87:bc:
22:a8:76:aa:69:1c:c1:2c:ca:f5:7d:02:32:2f:69:d2:39:fe:
d9:5e:b7:15:90:9d:c8:12:2b:b3:da:9a:77:7b:07:a3:ae:0d:
83:63:2a:51:b9:7e:98:6b:02:e7:a4:cc:a4:9e:61:0c:c0:f0:
07:14:0c:63:d8:dd:f4:62:b0:65:dd:c8:7c:f0:b5:f1:26:04:
2d:61:63:fb:bf:2f:68:be:d5:f4:4c:cc:11:20:bd:90:ef:8d:
5f:9e:57:6a:66:f8:cc:3a:ac:00:73:c3:9f:15:af:eb:71:63:
92:70:0e:f2:3e:a8:d0:12:c0:80:09:47:2f:ec:96:f4:77:1c:
96:f7:1e:3b:a3:07:1b:a2:45:9b:93:30:92:b1:46:85:cd:35:
74:b2:62:60:38:dd:b2:6a:8d:80:06:dd:95:a6:18:59:64:b1:
9d:25:64:98
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjZE
NUFGMjE5NTlCN0Y5QzFCMjMwRDcyNTg5OEYxMTFBQUEzRjlBRTAeFw0yMzA1MTkw
NTU1MDZaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDBCNkNDNThCMDAyM0I2
QjczMzRGRjRDM0E5ODZERkM5RkU0MDkyQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCt7LM3Ek07oqmB7MFdBvd2J3JJ8234dlxRBS9J4xSZaMzxhtL
Uyyq6HA564i1nGJ7xP1+QYCnXls8wAByPd0d9BR5p1zlGjVBYEmAfA6/D4z5uK1b
tOWB7vAXrvmkBRUfIqwJJmf2dii5t97d3VVcJh708RdL1RQ3dx0gq8RKJ4eYvPJK
+IRDIu6uNgzzq8Uj2g9Pg7tXdhUg3i9yytfhOo44LUQAA18db7a6TRjgaTT0q4GJ
44rGvnPlLYx6MP7eNYmme29tHWROLcaBYtUl8PNpPvN14p6X7uyQ4sxZyE82Qe5J
/QswCs1UHJ3PromL9l9ah/GZTtziyDBblf2FAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUC2zFiwAjtrczT/TDqYbfyf5Aks0wHwYDVR0jBBgwFoAU9tWvIZWbf5wbIw1y
WJjxEaqj+a4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky
Lzl0V3ZJWldiZjV3Ykl3MXlXSmp4RWFxai1hNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOXRXdklaV2JmNXdiSXcxeVdKanhFYXFqLWE0LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTkyL0MyekZpd0FqdHJjelRf
VERxWWJmeWY1QWtzMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwB5/zANBgkqhkiG9w0BAQsFAAOCAQEAgSwsCxwtiMM+3Aq1KglAkU7yPp7aR73J
XPcU2Ne4gMrtONgv1MS7CrA6MgNygajUDeo3f/veAL86IWQoZPHq0L3Lg7TXH2+l
wOGi8/l9OO0VWJWw93ttWYe8Iqh2qmkcwSzK9X0CMi9p0jn+2V63FZCdyBIrs9qa
d3sHo64Ng2MqUbl+mGsC56TMpJ5hDMDwBxQMY9jd9GKwZd3IfPC18SYELWFj+78v
aL7V9EzMESC9kO+NX55Xamb4zDqsAHPDnxWv63FjknAO8j6o0BLAgAlHL+yW9Hcc
lvceO6MHG6JFm5MwkrFGhc01dLJiYDjdsmqNgAbdlaYYWWSxnSVkmA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org