Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/IpLF2Opr0kPpvcUDfm8RUoufNI0.roa
File: IpLF2Opr0kPpvcUDfm8RUoufNI0.roa (raw, json)
Hash identifier: FpPOPxlnFAmfcleqY4QO6eYKy/Tx/Ph+7ofAP9pNeJY=
Subject key identifier: 22:92:C5:D8:EA:6B:D2:43:E9:BD:C5:03:7E:6F:11:52:8B:9F:34:8D
Certificate issuer: /CN=BFB8536CF70F41D00B32505B278CAFCB387116CA
Certificate serial: 05
Authority key identifier: BF:B8:53:6C:F7:0F:41:D0:0B:32:50:5B:27:8C:AF:CB:38:71:16:CA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v7hTbPcPQdALMlBbJ4yvyzhxFso.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/IpLF2Opr0kPpvcUDfm8RUoufNI0.roa
Signing time: Thu 27 May 2021 05:02:38 +0000
ROA not before: Thu 27 May 2021 05:02:38 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 131530
IP address blocks: 103.72.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFB8536CF70F41D00B32505B278CAFCB387116CA
Validity
Not Before: May 27 05:02:38 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=2292C5D8EA6BD243E9BDC5037E6F11528B9F348D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:22:f1:fd:e1:c8:b4:9b:3f:3c:9a:da:5e:
fb:ef:02:ad:60:28:9b:1a:d9:e4:17:4e:4f:c3:4f:
bf:d4:45:33:ad:ea:1d:f8:7f:0f:55:47:a4:0a:d4:
72:87:d0:dd:7c:e0:81:e7:ad:38:a9:20:8a:d3:6b:
c4:ab:42:82:62:1f:70:c6:8a:64:a1:e1:c1:2e:7d:
ef:8a:75:7a:ea:c1:78:30:9e:57:f1:2e:0f:7e:d3:
53:2c:12:6d:67:30:4f:61:33:b8:8e:4b:b1:40:0a:
74:af:a7:11:90:8e:5c:d3:40:ea:aa:9e:9f:27:0d:
b6:5e:ab:84:e1:c0:17:f8:fb:47:e8:cf:24:28:60:
7f:b3:33:f5:d6:90:11:ae:85:fc:d8:18:7f:07:7a:
ef:81:1a:ff:6d:01:80:70:99:54:df:26:21:98:12:
79:5a:e1:63:07:0c:fe:0d:f9:51:83:f7:ee:0a:e2:
f7:ec:bb:06:9d:f7:e7:be:56:bf:9c:65:39:b1:18:
ba:98:3e:44:89:db:43:0e:bd:18:54:30:04:4f:f2:
7e:08:b9:77:50:91:10:66:96:15:19:40:2a:c5:5b:
fa:20:81:97:7f:48:c1:10:60:da:0e:4c:33:c9:4b:
56:c6:07:de:12:82:ee:d1:16:82:59:38:19:e8:c8:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:C5:D8:EA:6B:D2:43:E9:BD:C5:03:7E:6F:11:52:8B:9F:34:8D
X509v3 Authority Key Identifier:
keyid:BF:B8:53:6C:F7:0F:41:D0:0B:32:50:5B:27:8C:AF:CB:38:71:16:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/v7hTbPcPQdALMlBbJ4yvyzhxFso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v7hTbPcPQdALMlBbJ4yvyzhxFso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/IpLF2Opr0kPpvcUDfm8RUoufNI0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
22:9a:38:a6:3e:11:e7:9a:72:a6:e2:67:9d:34:19:f7:83:85:
80:f4:d9:19:bc:ac:f7:e4:e8:4d:ad:87:ca:d8:14:49:a5:42:
a1:ee:30:2b:35:a3:05:3e:bf:eb:9e:be:a2:f8:f5:3e:18:02:
c8:88:9f:5a:e1:51:0d:cd:d7:fb:8f:60:15:97:24:26:53:04:
90:93:5c:a1:4b:0d:fd:22:93:e6:2c:53:64:b9:0d:f2:b0:97:
3e:e1:a9:d9:5d:38:52:f6:c0:40:c3:f4:b6:23:66:60:11:35:
ac:45:7e:27:30:3f:ad:2c:66:3a:88:d2:4a:99:9a:35:b6:55:
b8:ed:b2:84:b5:25:34:ed:f5:a8:24:60:c6:da:3d:e5:55:ba:
8c:f2:66:5f:04:7c:67:10:02:a7:e1:b3:cb:3d:63:89:e0:52:
71:c3:05:e8:28:18:a2:52:94:e1:ad:d8:bb:42:7b:0d:03:78:
1e:fb:bc:16:e1:d8:3d:78:51:ac:06:48:cc:eb:db:d8:bf:02:
44:e1:33:a8:d0:05:f3:6d:83:07:ea:0d:f1:fb:48:d0:8a:b9:
8b:86:4a:4d:f5:d6:e2:87:5c:88:8c:3a:7e:51:24:22:67:30:
ec:d4:4f:dc:19:11:ed:13:e7:17:69:33:bf:74:3f:c1:ab:47:
71:1d:f7:56
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCRkI4
NTM2Q0Y3MEY0MUQwMEIzMjUwNUIyNzhDQUZDQjM4NzExNkNBMB4XDTIxMDUyNzA1
MDIzOFoXDTIyMDUyNzA0NTk1MlowMzExMC8GA1UEAxMoMjI5MkM1RDhFQTZCRDI0
M0U5QkRDNTAzN0U2RjExNTI4QjlGMzQ4RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALAiIvH94ci0mz88mtpe++8CrWAomxrZ5BdOT8NPv9RFM63qHfh/
D1VHpArUcofQ3XzggeetOKkgitNrxKtCgmIfcMaKZKHhwS5974p1eurBeDCeV/Eu
D37TUywSbWcwT2EzuI5LsUAKdK+nEZCOXNNA6qqenycNtl6rhOHAF/j7R+jPJChg
f7Mz9daQEa6F/NgYfwd674Ea/20BgHCZVN8mIZgSeVrhYwcM/g35UYP37gri9+y7
Bp33575Wv5xlObEYupg+RInbQw69GFQwBE/yfgi5d1CREGaWFRlAKsVb+iCBl39I
wRBg2g5MM8lLVsYH3hKC7tEWglk4GejItr0CAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBQiksXY6mvSQ+m9xQN+bxFSi580jTAfBgNVHSMEGDAWgBS/uFNs9w9B0AsyUFsn
jK/LOHEWyjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMDc1
L3Y3aFRiUGNQUWRBTE1sQmJKNHl2eXpoeEZzby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdjdoVGJQY1BRZEFMTWxCYko0eXZ5emh4RnNvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA3NS9JcExGMk9wcjBrUHB2
Y1VEZm04UlVvdWZOSTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ0h4MA0GCSqGSIb3DQEBCwUAA4IBAQAimjimPhHnmnKm4medNBn3g4WA9NkZ
vKz35OhNrYfK2BRJpUKh7jArNaMFPr/rnr6i+PU+GALIiJ9a4VENzdf7j2AVlyQm
UwSQk1yhSw39IpPmLFNkuQ3ysJc+4anZXThS9sBAw/S2I2ZgETWsRX4nMD+tLGY6
iNJKmZo1tlW47bKEtSU07fWoJGDG2j3lVbqM8mZfBHxnEAKn4bPLPWOJ4FJxwwXo
KBiiUpThrdi7QnsNA3ge+7wW4dg9eFGsBkjM69vYvwJE4TOo0AXzbYMH6g3x+0jQ
irmLhkpN9dbih1yIjDp+USQiZzDs1E/cGRHtE+cXaTO/dD/Bq0dxHfdW
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org