Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/192/Kwg0AuXfXzHRvVlWjyVqZvOHJf0.roa
File: Kwg0AuXfXzHRvVlWjyVqZvOHJf0.roa (raw, json)
Hash identifier: 1dCA/Xmjw6IHfGoI1zGsyoiTqyk8dVwKMVp4zSAhsvo=
Subject key identifier: 2B:08:34:02:E5:DF:5F:31:D1:BD:59:56:8F:25:6A:66:F3:87:25:FD
Certificate issuer: /CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Certificate serial: 1008
Authority key identifier: F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/Kwg0AuXfXzHRvVlWjyVqZvOHJf0.roa
Signing time: Fri 19 May 2023 05:55:06 +0000
ROA not before: Fri 19 May 2023 05:55:06 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 4134
IP address blocks: 202.141.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4104 (0x1008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6D5AF21959B7F9C1B230D725898F111AAA3F9AE
Validity
Not Before: May 19 05:55:06 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=2B083402E5DF5F31D1BD59568F256A66F38725FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:2b:d1:8a:82:f3:02:1c:5b:54:7f:f4:81:
2e:0f:2e:2c:75:43:75:ba:18:71:91:92:32:6e:a9:
23:4b:21:2b:74:a1:3f:c7:ed:cf:21:0b:18:a4:73:
b4:99:f7:f7:81:d6:7e:07:5d:17:04:25:f9:91:f0:
4b:cb:af:d7:cb:73:b4:3f:dc:d5:a5:11:a2:1c:ba:
78:83:4e:9a:5d:3f:3e:e7:c3:a8:00:d0:93:f9:0d:
5e:13:aa:33:b6:f2:14:36:6e:e9:75:35:a6:b1:9e:
46:56:25:ec:f1:9e:cd:a3:8b:e3:59:45:eb:99:e7:
a6:d5:67:ba:7a:e9:7f:7f:92:de:37:48:39:bb:a3:
e4:e4:e3:29:09:88:5c:3b:5f:eb:9b:50:4d:ce:0a:
a3:94:d3:76:59:94:1f:65:57:72:01:c1:2f:54:da:
c4:1b:84:c2:66:1a:75:62:1d:a6:de:7d:0f:0d:bd:
41:6d:18:e5:d5:2f:43:52:c1:25:24:07:e4:5f:53:
2c:5d:e1:96:e3:c3:bb:3f:07:b1:70:a4:13:da:46:
92:b2:89:42:7b:30:10:10:c4:26:6f:41:bc:37:d4:
7a:3d:8c:8a:16:42:27:14:61:a0:15:a5:fd:09:f1:
ce:b0:63:f5:c9:d9:a6:c0:a8:09:aa:10:87:b0:29:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:08:34:02:E5:DF:5F:31:D1:BD:59:56:8F:25:6A:66:F3:87:25:FD
X509v3 Authority Key Identifier:
keyid:F6:D5:AF:21:95:9B:7F:9C:1B:23:0D:72:58:98:F1:11:AA:A3:F9:AE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/9tWvIZWbf5wbIw1yWJjxEaqj-a4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/9tWvIZWbf5wbIw1yWJjxEaqj-a4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/192/Kwg0AuXfXzHRvVlWjyVqZvOHJf0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.141.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:70:91:34:73:fa:39:b3:6e:32:c2:3b:a9:d7:cb:9a:04:73:
8b:41:bb:9a:cf:fb:63:39:16:16:20:ee:61:ae:03:4a:22:c9:
b0:39:49:af:23:78:05:64:71:56:31:de:d9:f6:c6:04:f0:07:
7d:f6:c7:ce:5f:f2:b5:e6:a3:b5:f7:b7:60:8e:b1:dc:7e:55:
d7:c8:f4:4b:c1:c6:7d:2f:ab:27:ab:ca:a5:98:4b:54:a9:8c:
d5:da:e7:3d:c5:da:b2:d7:dd:6e:d8:e2:cc:4d:83:af:ee:5f:
a4:f6:3e:ea:76:57:0a:fc:45:59:0d:1c:95:34:25:97:ba:a1:
3b:1a:e8:69:f8:fd:e4:cb:bd:80:a2:b8:80:0b:1a:08:71:2d:
e5:3b:e1:94:fd:2c:e7:8c:75:c7:a5:c5:9a:3d:c0:44:19:62:
ca:a8:3b:a5:0f:e2:7e:53:f1:37:bc:dc:7a:c7:d8:3c:ca:e1:
a8:7c:bf:2a:8a:f7:b3:9f:7f:bd:f4:3b:62:bc:2a:ef:b5:34:
18:bb:ff:57:c8:98:65:ce:af:96:0b:df:17:43:a1:72:69:2b:
92:24:fc:0c:f8:e9:36:ef:93:9b:7d:77:f6:42:34:06:20:25:
ea:f1:2e:e0:09:5d:28:c6:cb:f7:4a:69:c5:57:b0:7a:11:d8:
59:7f:13:a1
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICEAgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjZE
NUFGMjE5NTlCN0Y5QzFCMjMwRDcyNTg5OEYxMTFBQUEzRjlBRTAeFw0yMzA1MTkw
NTU1MDZaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKDJCMDgzNDAyRTVERjVG
MzFEMUJENTk1NjhGMjU2QTY2RjM4NzI1RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK3yvRioLzAhxbVH/0gS4PLix1Q3W6GHGRkjJuqSNLISt0oT/H
7c8hCxikc7SZ9/eB1n4HXRcEJfmR8EvLr9fLc7Q/3NWlEaIcuniDTppdPz7nw6gA
0JP5DV4TqjO28hQ2bul1NaaxnkZWJezxns2ji+NZReuZ56bVZ7p66X9/kt43SDm7
o+Tk4ykJiFw7X+ubUE3OCqOU03ZZlB9lV3IBwS9U2sQbhMJmGnViHabefQ8NvUFt
GOXVL0NSwSUkB+RfUyxd4Zbjw7s/B7FwpBPaRpKyiUJ7MBAQxCZvQbw31Ho9jIoW
QicUYaAVpf0J8c6wY/XJ2abAqAmqEIewKV0jAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUKwg0AuXfXzHRvVlWjyVqZvOHJf0wHwYDVR0jBBgwFoAU9tWvIZWbf5wbIw1y
WJjxEaqj+a4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTky
Lzl0V3ZJWldiZjV3Ykl3MXlXSmp4RWFxai1hNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvOXRXdklaV2JmNXdiSXcxeVdKanhFYXFqLWE0LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTkyL0t3ZzBBdVhmWHpIUnZW
bFdqeVZxWnZPSEpmMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BATKjaAwDQYJKoZIhvcNAQELBQADggEBAD1wkTRz+jmzbjLCO6nXy5oEc4tBu5rP
+2M5FhYg7mGuA0oiybA5Sa8jeAVkcVYx3tn2xgTwB332x85f8rXmo7X3t2COsdx+
VdfI9EvBxn0vqyeryqWYS1SpjNXa5z3F2rLX3W7Y4sxNg6/uX6T2Pup2Vwr8RVkN
HJU0JZe6oTsa6Gn4/eTLvYCiuIALGghxLeU74ZT9LOeMdcelxZo9wEQZYsqoO6UP
4n5T8Te83HrH2DzK4ah8vyqK97Off730O2K8Ku+1NBi7/1fImGXOr5YL3xdDoXJp
K5Ik/Az46Tbvk5t9d/ZCNAYgJerxLuAJXSjGy/dKacVXsHoR2Fl/E6E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org