Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/H4JZUfHNmdnIeku_mp4NkbpT_C0.roa
File:                     H4JZUfHNmdnIeku_mp4NkbpT_C0.roa (raw, json)
Hash identifier:          8rH9yyyIC4G3jtq/IMvi2R9YB9+89F1CHTW8m2KCf2Q=
Subject key identifier:   1F:82:59:51:F1:CD:99:D9:C8:7A:4B:BF:9A:9E:0D:91:BA:53:FC:2D
Certificate issuer:       /CN=32891C582E37674795E9690ABA407FC676ECA1E1
Certificate serial:       06
Authority key identifier: 32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/H4JZUfHNmdnIeku_mp4NkbpT_C0.roa
Signing time:             Thu 27 May 2021 05:03:15 +0000
ROA not before:           Thu 27 May 2021 05:03:15 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     4134
IP address blocks:        202.141.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32891C582E37674795E9690ABA407FC676ECA1E1
        Validity
            Not Before: May 27 05:03:15 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=1F825951F1CD99D9C87A4BBF9A9E0D91BA53FC2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:35:97:75:c4:05:a0:a4:5d:9f:5d:89:db:33:
                    5a:d6:f7:0e:5b:47:7b:e1:b5:21:5f:43:be:c8:bd:
                    b0:55:ee:8a:3d:6f:7e:83:ef:52:1b:b3:ab:fd:00:
                    56:3a:ab:26:c6:08:06:20:7f:f6:0b:87:70:0f:27:
                    20:ee:c7:ad:f5:60:d9:74:d4:84:94:44:db:af:f7:
                    7b:c8:9d:a6:ff:24:a5:4d:e3:59:bc:95:30:43:fe:
                    43:5b:04:23:34:6e:96:bb:9a:b3:8b:21:cb:fa:69:
                    50:12:d5:f5:94:fb:f1:2a:ba:77:c0:6c:b7:e9:c8:
                    43:6b:4b:3a:74:a8:69:6e:b0:1c:18:f0:ff:9f:6a:
                    6e:a3:31:76:37:f8:c3:1b:6c:db:4e:04:24:ad:9d:
                    01:e6:bd:98:a7:61:f2:a2:51:13:fc:6c:e1:20:f2:
                    be:4f:72:23:a5:6c:3a:03:78:b3:05:13:00:3d:b2:
                    6c:55:9a:81:99:41:ba:dd:a9:a5:17:1b:ac:9d:fb:
                    75:d0:e8:1a:49:7f:e3:62:6d:d1:06:b8:d8:e7:49:
                    23:23:c7:2f:0c:c0:1a:8b:7f:d7:dc:c8:07:c5:9c:
                    88:c0:23:1d:93:87:f6:90:09:65:c1:a3:cb:64:c8:
                    22:68:6d:a9:56:10:4d:c5:85:8b:4f:ab:b1:8d:5a:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:59:51:F1:CD:99:D9:C8:7A:4B:BF:9A:9E:0D:91:BA:53:FC:2D
            X509v3 Authority Key Identifier:
                keyid:32:89:1C:58:2E:37:67:47:95:E9:69:0A:BA:40:7F:C6:76:EC:A1:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/MokcWC43Z0eV6WkKukB_xnbsoeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/MokcWC43Z0eV6WkKukB_xnbsoeE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/H4JZUfHNmdnIeku_mp4NkbpT_C0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.141.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:06:d1:5c:a5:5e:02:96:8c:5c:8d:e3:98:9b:5d:f0:bf:a6:
         8e:30:ed:b6:a4:26:7d:e1:64:24:df:ea:90:e3:c8:53:fa:32:
         b2:ce:c7:3b:88:c1:9a:36:a3:bb:82:01:85:bb:d8:28:fd:03:
         cc:4c:bf:23:39:f8:fe:6c:de:6d:05:a9:f7:73:dc:9c:ce:cc:
         64:0b:74:c6:e7:a8:1c:8f:c1:bf:2f:d6:05:fb:f7:87:89:80:
         b2:2c:70:1a:c4:b8:66:06:20:83:51:bc:77:2a:16:45:01:d6:
         bd:9f:eb:c6:20:8d:cd:c6:fe:3f:b3:c8:1b:b8:29:8e:ac:d5:
         ac:42:6a:e9:6b:96:d2:06:4d:88:d3:12:bb:f9:3d:ed:cf:7e:
         21:ef:4d:5b:a3:17:51:bb:9a:64:1f:78:43:71:24:d1:2f:94:
         52:57:31:da:46:53:c9:a6:41:df:e0:c3:df:f5:b9:92:14:1c:
         ac:d0:fb:66:3b:5f:cf:30:38:de:95:14:b1:3d:6e:27:42:b0:
         ef:e7:9d:a8:24:3d:5d:f7:e5:77:38:e4:c8:55:64:f8:26:3c:
         2a:a7:d3:eb:fd:af:02:56:12:15:6f:fe:18:09:55:29:fb:d0:
         5e:c6:3a:37:75:91:4a:0a:0b:d7:6b:c3:df:fc:00:60:43:da:
         0e:a9:03:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org