Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/vi1tK98OH5-PGwTn20YutTxR_HM.roa
File: vi1tK98OH5-PGwTn20YutTxR_HM.roa (raw, json)
Hash identifier: igaawMxWXKmt6M6JcHR7HDaVBbWwmYnqtYE+M0W8ucw=
Subject key identifier: BE:2D:6D:2B:DF:0E:1F:9F:8F:1B:04:E7:DB:46:2E:B5:3C:51:FC:73
Certificate issuer: /CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Certificate serial: 0125
Authority key identifier: 06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/vi1tK98OH5-PGwTn20YutTxR_HM.roa
Signing time: Fri 22 Jul 2022 05:36:13 +0000
ROA not before: Fri 22 Jul 2022 05:36:13 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 1239
IP address blocks: 114.66.180.0/22 maxlen: 24
114.66.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060C00BF17A55FDB85CAF4578BE833056E028B43
Validity
Not Before: Jul 22 05:36:13 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=BE2D6D2BDF0E1F9F8F1B04E7DB462EB53C51FC73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:c4:21:2a:e7:44:32:52:1d:50:c8:c5:3e:
55:ae:07:69:66:72:c2:74:45:70:91:ce:b9:4d:ac:
f3:ff:3c:2b:f0:3d:53:ec:a0:7c:44:b3:91:ed:b1:
8b:a8:b7:02:15:50:a6:58:cb:f6:69:db:10:86:1f:
9b:2a:b6:b3:2e:36:f1:ab:8c:2f:a9:3d:b2:e1:e1:
94:66:fb:ae:16:4e:7d:56:be:97:90:54:88:02:2a:
70:ea:53:26:6e:11:30:d2:08:98:cb:a8:18:15:42:
dc:3d:d7:b4:4f:e9:be:5f:3b:6d:54:40:06:82:d7:
0b:62:89:26:82:59:b9:01:d1:af:3a:6b:72:7f:e1:
e0:29:e6:05:03:f5:32:fb:61:5f:18:21:35:e7:f4:
6e:f2:10:32:b3:75:3a:bd:37:16:ac:1a:6d:0d:bc:
97:72:84:82:8a:a0:1d:ea:6d:8a:d6:74:7c:f2:5d:
48:c7:bd:20:3f:35:b6:eb:84:49:2f:5f:c6:7d:68:
00:f2:31:6f:83:c4:04:43:71:0b:22:3a:82:5d:ee:
89:62:f3:b0:ad:51:95:60:59:83:bc:b7:f1:70:b2:
5a:a7:d0:ca:1e:72:7a:03:bf:bd:fa:eb:db:99:36:
e9:a4:6e:78:2b:b5:54:11:8d:d0:a5:c2:dd:a1:85:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:6D:2B:DF:0E:1F:9F:8F:1B:04:E7:DB:46:2E:B5:3C:51:FC:73
X509v3 Authority Key Identifier:
keyid:06:0C:00:BF:17:A5:5F:DB:85:CA:F4:57:8B:E8:33:05:6E:02:8B:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/BgwAvxelX9uFyvRXi-gzBW4Ci0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BgwAvxelX9uFyvRXi-gzBW4Ci0M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/vi1tK98OH5-PGwTn20YutTxR_HM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.66.180.0-114.66.187.255
Signature Algorithm: sha256WithRSAEncryption
59:e2:91:08:fd:c0:38:4c:a1:42:60:02:94:03:30:54:da:9c:
67:4a:11:a2:36:a0:69:fc:0e:d6:e6:a7:5e:1e:29:c2:4c:bb:
5a:db:51:f3:f1:2f:b7:45:c4:e3:89:04:e1:47:dc:da:b7:d9:
32:c9:4b:70:99:86:46:cc:b4:16:43:f0:12:2a:df:4d:63:a6:
b2:f4:82:48:88:ae:1b:4d:d3:26:57:13:83:9b:f2:da:c7:27:
a0:8b:37:66:85:b3:42:ee:40:e0:06:70:d7:e6:58:85:6f:1e:
77:57:40:b7:fa:25:6e:28:e7:8e:e0:81:39:98:80:81:7d:5d:
4a:c5:5d:96:30:62:8d:7d:28:c7:00:3e:64:7e:0d:32:16:90:
22:5a:ad:23:c9:a1:c8:13:7c:08:fa:55:35:23:85:e0:04:9f:
17:67:80:46:3c:dd:0c:41:b2:d9:3f:52:3e:30:81:42:4f:d6:
2c:f8:8d:46:08:a8:27:4f:c1:65:75:93:ca:42:90:c7:c2:ec:
f0:56:1f:65:15:e3:b2:00:58:d3:8d:b1:6f:47:a4:8f:7c:4e:
37:59:79:c1:e0:61:45:8c:af:50:76:1a:d4:3d:71:a0:2b:66:
a6:ac:17:12:f7:e0:a0:b0:d8:ae:0e:5c:ac:32:87:7f:24:44:
ca:2c:e2:15
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgICASUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDYw
QzAwQkYxN0E1NUZEQjg1Q0FGNDU3OEJFODMzMDU2RTAyOEI0MzAeFw0yMjA3MjIw
NTM2MTNaFw0yMzA3MTkwMTIwMDNaMDMxMTAvBgNVBAMTKEJFMkQ2RDJCREYwRTFG
OUY4RjFCMDRFN0RCNDYyRUI1M0M1MUZDNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRjsQhKudEMlIdUMjFPlWuB2lmcsJ0RXCRzrlNrPP/PCvwPVPs
oHxEs5HtsYuotwIVUKZYy/Zp2xCGH5sqtrMuNvGrjC+pPbLh4ZRm+64WTn1WvpeQ
VIgCKnDqUyZuETDSCJjLqBgVQtw917RP6b5fO21UQAaC1wtiiSaCWbkB0a86a3J/
4eAp5gUD9TL7YV8YITXn9G7yEDKzdTq9NxasGm0NvJdyhIKKoB3qbYrWdHzyXUjH
vSA/NbbrhEkvX8Z9aADyMW+DxARDcQsiOoJd7oli87CtUZVgWYO8t/Fwslqn0Moe
cnoDv73669uZNumkbngrtVQRjdClwt2hhVi7AgMBAAGjggH7MIIB9zAdBgNVHQ4E
FgQUvi1tK98OH5+PGwTn20YutTxR/HMwHwYDVR0jBBgwFoAUBgwAvxelX9uFyvRX
i+gzBW4Ci0MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw
OS9CZ3dBdnhlbFg5dUZ5dlJYaS1nekJXNENpME0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0Jnd0F2eGVsWDl1Rnl2UlhpLWd6Qlc0Q2kwTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvdmkxdEs5OE9INS1Q
R3dUbjIwWXV0VHhSX0hNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEw
DjAMAwQCckK0AwQCckK4MA0GCSqGSIb3DQEBCwUAA4IBAQBZ4pEI/cA4TKFCYAKU
AzBU2pxnShGiNqBp/A7W5qdeHinCTLta21Hz8S+3RcTjiQThR9zat9kyyUtwmYZG
zLQWQ/ASKt9NY6ay9IJIiK4bTdMmVxODm/LaxyegizdmhbNC7kDgBnDX5liFbx53
V0C3+iVuKOeO4IE5mICBfV1KxV2WMGKNfSjHAD5kfg0yFpAiWq0jyaHIE3wI+lU1
I4XgBJ8XZ4BGPN0MQbLZP1I+MIFCT9Ys+I1GCKgnT8FldZPKQpDHwuzwVh9lFeOy
AFjTjbFvR6SPfE43WXnB4GFFjK9QdhrUPXGgK2amrBcS9+CgsNiuDlysMod/JETK
LOIV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org