Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/DV2rK4_e8xsDC_YeQkxXMGfvo3o.roa
File: DV2rK4_e8xsDC_YeQkxXMGfvo3o.roa (raw, json)
Hash identifier: BIW2hyWufIrNUbxb2kxtxy1y7cP/QvDQZXIVYWheLOg=
Subject key identifier: 0D:5D:AB:2B:8F:DE:F3:1B:03:0B:F6:1E:42:4C:57:30:67:EF:A3:7A
Certificate issuer: /CN=32891C582E37674795E9690ABA407FC676ECA1E1
Certificate serial: 05
Authority key identifier: 32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/DV2rK4_e8xsDC_YeQkxXMGfvo3o.roa
Signing time: Thu 27 May 2021 05:03:15 +0000
ROA not before: Thu 27 May 2021 05:03:15 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 9808
IP address blocks: 121.255.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32891C582E37674795E9690ABA407FC676ECA1E1
Validity
Not Before: May 27 05:03:15 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=0D5DAB2B8FDEF31B030BF61E424C573067EFA37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:67:8b:7c:8a:ee:ee:9b:76:8e:49:c0:94:
ca:ef:97:d8:38:1d:eb:ce:33:3b:37:c2:89:fc:3b:
a4:18:2f:9a:ae:53:29:c7:17:d0:dc:a2:96:fc:6f:
62:d4:b2:4d:6c:aa:1d:70:53:ae:b8:07:4b:44:64:
69:17:1d:d2:65:f9:6c:a2:99:29:04:4c:d6:00:b4:
69:44:ba:58:cb:8d:ff:87:0a:c7:b2:d7:3f:73:a6:
61:78:5e:85:b8:c7:88:5b:e0:54:1d:70:40:84:c6:
e7:e4:1c:e7:ac:9e:df:0d:4b:e0:29:c6:10:91:89:
73:ed:b6:98:ff:51:7b:6b:6d:65:36:6a:c1:be:17:
49:8b:01:8e:d6:61:18:2d:39:86:a9:22:42:89:c2:
e6:43:29:db:6e:be:cd:b8:a2:95:eb:01:6a:85:bb:
cb:fc:50:46:e8:1c:59:4a:3f:b1:2b:58:ef:6e:4a:
45:d9:4a:11:2c:32:9d:26:15:89:fe:41:84:33:0a:
54:ba:92:b3:ec:73:83:f7:0f:e5:83:cc:3c:5f:4b:
de:e3:18:4f:ca:4c:1a:f9:11:c0:3b:64:0c:70:37:
72:e4:e9:44:33:ee:22:05:9d:6a:ba:f7:89:5d:da:
f2:90:82:b7:da:73:5b:15:e3:74:b3:a0:d1:e2:81:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5D:AB:2B:8F:DE:F3:1B:03:0B:F6:1E:42:4C:57:30:67:EF:A3:7A
X509v3 Authority Key Identifier:
keyid:32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/MokcWC43Z0eV6WkKukB_xnbsoeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/DV2rK4_e8xsDC_YeQkxXMGfvo3o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:53:fd:0a:1c:6c:e1:20:3b:c1:e3:ee:72:da:61:5a:4f:76:
3e:93:41:56:f5:d3:85:85:d9:28:f9:d0:f5:7b:4a:65:a9:64:
3d:f4:ca:ab:1c:38:3a:74:9e:f3:3e:9e:82:2d:21:75:6d:d4:
ca:74:5c:20:5f:00:0c:b9:ef:75:8d:06:40:07:49:b3:f2:47:
cb:13:50:0a:56:f2:c7:34:0c:20:71:82:06:61:31:5f:5d:33:
80:95:98:02:c5:e1:8a:05:58:75:5d:70:03:82:14:f4:35:4d:
4e:07:88:d2:a9:41:39:bd:1f:d2:df:13:01:42:70:2b:08:5c:
bf:10:e0:c8:67:04:07:68:e2:e3:e3:f3:b5:9c:c8:48:a8:81:
a0:61:65:61:2d:28:27:f0:7c:0b:73:d3:9c:c4:6a:07:e0:c0:
b1:fe:17:0d:05:2d:9e:c2:72:d9:b4:f0:1f:81:b3:71:33:f6:
d1:aa:5a:b6:4d:c4:d3:bd:6a:d4:b7:af:e0:fb:f4:85:d9:84:
fd:d5:91:cb:7d:ef:3d:8d:6b:68:fb:2f:15:25:f1:ae:84:df:
b3:2d:69:39:95:58:50:2c:c4:62:fe:3b:76:83:cf:94:66:78:
28:06:2c:a3:38:fa:68:33:bc:a0:71:29:38:78:f7:b1:16:9a:
d6:03:0a:9b
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMjg5
MUM1ODJFMzc2NzQ3OTVFOTY5MEFCQTQwN0ZDNjc2RUNBMUUxMB4XDTIxMDUyNzA1
MDMxNVoXDTIyMDUyNzA0NTk1MlowMzExMC8GA1UEAxMoMEQ1REFCMkI4RkRFRjMx
QjAzMEJGNjFFNDI0QzU3MzA2N0VGQTM3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM09Z4t8iu7um3aOScCUyu+X2Dgd684zOzfCifw7pBgvmq5TKccX
0NyilvxvYtSyTWyqHXBTrrgHS0RkaRcd0mX5bKKZKQRM1gC0aUS6WMuN/4cKx7LX
P3OmYXhehbjHiFvgVB1wQITG5+Qc56ye3w1L4CnGEJGJc+22mP9Re2ttZTZqwb4X
SYsBjtZhGC05hqkiQonC5kMp226+zbiilesBaoW7y/xQRugcWUo/sStY725KRdlK
ESwynSYVif5BhDMKVLqSs+xzg/cP5YPMPF9L3uMYT8pMGvkRwDtkDHA3cuTpRDPu
IgWdarr3iV3a8pCCt9pzWxXjdLOg0eKBV80CAwEAAaOCAfAwggHsMB0GA1UdDgQW
BBQNXasrj97zGwML9h5CTFcwZ++jejAfBgNVHSMEGDAWgBQyiRxYLjdnR5XpaQq6
QH/Gduyh4TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xOTIv
TW9rY1dDNDNaMGVWNldrS3VrQl94bmJzb2VFLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9Nb2tjV0M0M1owZVY2V2tLdWtCX3huYnNvZUUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8xOTIvRFYycks0X2U4eHNEQ19Z
ZVFreFhNR2Z2bzNvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AHn/MA0GCSqGSIb3DQEBCwUAA4IBAQCqU/0KHGzhIDvB4+5y2mFaT3Y+k0FW9dOF
hdko+dD1e0plqWQ99MqrHDg6dJ7zPp6CLSF1bdTKdFwgXwAMue91jQZAB0mz8kfL
E1AKVvLHNAwgcYIGYTFfXTOAlZgCxeGKBVh1XXADghT0NU1OB4jSqUE5vR/S3xMB
QnArCFy/EODIZwQHaOLj4/O1nMhIqIGgYWVhLSgn8HwLc9OcxGoH4MCx/hcNBS2e
wnLZtPAfgbNxM/bRqlq2TcTTvWrUt6/g+/SF2YT91ZHLfe89jWto+y8VJfGuhN+z
LWk5lVhQLMRi/jt2g8+UZngoBiyjOPpoM7ygcSk4ePexFprWAwqb
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org