Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2292/7UlXh2lt5_mHIHX8NMfYceQo7kU.roa
File: 7UlXh2lt5_mHIHX8NMfYceQo7kU.roa (raw, json)
Hash identifier: WBTL6IghbdrAUL/sTlpsCuMzIsZxp7DdlzY7KizuGx8=
Subject key identifier: ED:49:57:87:69:6D:E7:F9:87:20:75:FC:34:C7:D8:71:E4:28:EE:45
Certificate issuer: /CN=9084038B66F4526C41C7668D1428CD22B33FBE78
Certificate serial: 03
Authority key identifier: 90:84:03:8B:66:F4:52:6C:41:C7:66:8D:14:28:CD:22:B3:3F:BE:78
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kIQDi2b0UmxBx2aNFCjNIrM_vng.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2292/7UlXh2lt5_mHIHX8NMfYceQo7kU.roa
Signing time: Wed 20 Jul 2022 08:20:44 +0000
ROA not before: Wed 20 Jul 2022 08:20:44 +0000
ROA not after: Thu 20 Jul 2023 08:14:03 +0000
asID: 398704
IP address blocks: 115.174.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9084038B66F4526C41C7668D1428CD22B33FBE78
Validity
Not Before: Jul 20 08:20:44 2022 GMT
Not After : Jul 20 08:14:03 2023 GMT
Subject: CN=ED495787696DE7F9872075FC34C7D871E428EE45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:3d:7e:68:d6:8b:d5:84:b1:ed:e0:18:28:
ff:49:1a:a6:97:fd:98:c8:84:93:b3:30:10:2a:f3:
7b:94:79:8c:4a:a9:27:c1:87:23:66:10:05:d3:19:
85:d8:aa:bb:2f:9b:07:6f:41:5e:ad:e6:42:72:cc:
d6:3b:51:61:80:10:82:f1:1a:35:45:a2:7d:42:ff:
c0:1f:ce:80:9f:fb:3c:22:a3:74:7c:45:4a:ed:60:
8d:d0:41:ab:d8:32:03:ad:4d:4b:32:28:7e:e8:01:
af:5f:d8:02:9f:88:05:6b:7d:84:96:6b:98:aa:a4:
7f:53:55:16:8a:88:85:e2:02:a5:05:31:bd:d1:83:
bb:40:38:83:00:ea:fc:ed:ce:e8:ef:de:88:ee:3d:
b2:a9:e2:71:aa:fd:3d:b7:04:ca:09:08:d1:43:62:
fd:46:dd:6b:10:ab:75:e4:e1:ef:9e:e4:81:a6:e4:
23:01:97:cd:f9:a8:9c:97:87:30:90:28:b8:75:2d:
65:e6:05:c7:b9:b6:e3:01:66:ac:66:2f:de:30:40:
93:ad:e5:bf:5e:23:64:56:0f:df:3b:01:d9:25:27:
2f:ab:5f:ad:40:f6:8f:0e:42:1b:de:46:64:b9:61:
27:01:82:34:3b:b8:27:60:f6:98:b0:ad:ac:16:62:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:49:57:87:69:6D:E7:F9:87:20:75:FC:34:C7:D8:71:E4:28:EE:45
X509v3 Authority Key Identifier:
keyid:90:84:03:8B:66:F4:52:6C:41:C7:66:8D:14:28:CD:22:B3:3F:BE:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2292/kIQDi2b0UmxBx2aNFCjNIrM_vng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/kIQDi2b0UmxBx2aNFCjNIrM_vng.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2292/7UlXh2lt5_mHIHX8NMfYceQo7kU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.174.74.0/24
Signature Algorithm: sha256WithRSAEncryption
24:75:c5:19:62:fd:9e:05:53:ad:fe:4b:ab:04:d1:cb:74:e8:
e9:64:83:71:f0:64:9f:48:c2:bb:98:42:ee:fd:af:aa:95:ed:
98:98:e3:68:31:63:41:d7:43:fb:7b:ad:47:b3:78:02:18:c6:
15:1e:03:19:24:10:d6:9b:06:48:7b:7b:9d:3d:84:80:61:10:
5c:7d:9b:bc:3d:55:4b:70:31:02:ee:c2:42:2d:8e:d8:40:c8:
d4:58:04:af:e5:00:d0:5f:5b:aa:fa:db:01:09:13:9c:f9:6a:
85:69:d9:83:68:ce:8b:9e:be:b1:4b:2a:19:0f:57:5e:b2:45:
ca:ec:62:a5:af:a3:a4:a5:64:a7:d0:b5:da:d5:af:f6:01:1e:
30:01:4e:3c:e8:46:fc:a9:bc:0f:b7:75:48:23:22:0f:ef:ef:
ed:f5:b7:93:5f:1b:5b:c0:69:07:a2:e1:91:0b:f1:af:8e:79:
e8:5f:16:d3:3a:1f:75:b1:1d:22:12:8a:df:f4:c4:b5:17:cf:
6d:c7:4a:e0:62:59:95:16:2f:a5:1e:80:fc:5e:f6:76:72:3e:
41:c8:df:00:c3:47:53:34:ae:f7:b8:66:21:71:b3:28:8e:28:
a5:60:36:0c:9e:2b:a7:46:92:7e:5c:c1:74:af:81:eb:45:07:
fb:8a:30:93
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MDg0
MDM4QjY2RjQ1MjZDNDFDNzY2OEQxNDI4Q0QyMkIzM0ZCRTc4MB4XDTIyMDcyMDA4
MjA0NFoXDTIzMDcyMDA4MTQwM1owMzExMC8GA1UEAxMoRUQ0OTU3ODc2OTZERTdG
OTg3MjA3NUZDMzRDN0Q4NzFFNDI4RUU0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL5vPX5o1ovVhLHt4Bgo/0kappf9mMiEk7MwECrze5R5jEqpJ8GH
I2YQBdMZhdiquy+bB29BXq3mQnLM1jtRYYAQgvEaNUWifUL/wB/OgJ/7PCKjdHxF
Su1gjdBBq9gyA61NSzIofugBr1/YAp+IBWt9hJZrmKqkf1NVFoqIheICpQUxvdGD
u0A4gwDq/O3O6O/eiO49sqnicar9PbcEygkI0UNi/UbdaxCrdeTh757kgabkIwGX
zfmonJeHMJAouHUtZeYFx7m24wFmrGYv3jBAk63lv14jZFYP3zsB2SUnL6tfrUD2
jw5CG95GZLlhJwGCNDu4J2D2mLCtrBZi+skCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBTtSVeHaW3n+Ycgdfw0x9hx5CjuRTAfBgNVHSMEGDAWgBSQhAOLZvRSbEHHZo0U
KM0isz++eDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMjky
L2tJUURpMmIwVW14QngyYU5GQ2pOSXJNX3ZuZy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAva0lRRGkyYjBVbXhCeDJhTkZDak5Jck1fdm5nLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjI5Mi83VWxYaDJsdDVfbUhJ
SFg4Tk1mWWNlUW83a1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAc65KMA0GCSqGSIb3DQEBCwUAA4IBAQAkdcUZYv2eBVOt/kurBNHLdOjpZINx
8GSfSMK7mELu/a+qle2YmONoMWNB10P7e61Hs3gCGMYVHgMZJBDWmwZIe3udPYSA
YRBcfZu8PVVLcDEC7sJCLY7YQMjUWASv5QDQX1uq+tsBCROc+WqFadmDaM6Lnr6x
SyoZD1deskXK7GKlr6OkpWSn0LXa1a/2AR4wAU486Eb8qbwPt3VIIyIP7+/t9beT
XxtbwGkHouGRC/GvjnnoXxbTOh91sR0iEorf9MS1F89tx0rgYlmVFi+lHoD8XvZ2
cj5ByN8Aw0dTNK73uGYhcbMojiilYDYMniunRpJ+XMF0r4HrRQf7ijCT
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:14 2023 by rpki-client on console-fra.rpki-client.org