Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/6Runi75WfAcDoxmExM1Jd-4YTmk.roa
File:                     6Runi75WfAcDoxmExM1Jd-4YTmk.roa (raw, json)
Hash identifier:          MVz+0p2FXAnqoiY/+WCUbjKpbcPz8YLr8XDsjjTIcXI=
Subject key identifier:   E9:1B:A7:8B:BE:56:7C:07:03:A3:19:84:C4:CD:49:77:EE:18:4E:69
Certificate issuer:       /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial:       101D
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/6Runi75WfAcDoxmExM1Jd-4YTmk.roa
Signing time:             Fri 19 May 2023 05:53:46 +0000
ROA not before:           Fri 19 May 2023 05:53:46 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     23650
IP address blocks:        118.184.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4125 (0x101d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
        Validity
            Not Before: May 19 05:53:46 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=E91BA78BBE567C0703A31984C4CD4977EE184E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a9:47:39:17:02:fe:c2:75:76:0d:10:65:14:
                    c4:70:fa:0c:f5:6d:d1:b1:3f:9f:6e:74:81:ab:15:
                    28:51:bc:28:cf:05:44:40:88:29:c5:bb:0f:1b:f2:
                    65:8b:87:e7:b6:1f:2e:3d:43:aa:93:b7:66:c8:c1:
                    13:9c:2c:1d:72:74:d1:23:a6:88:95:fa:da:79:47:
                    8b:0c:01:18:70:ce:d7:e4:94:3d:4e:a2:5e:b3:d7:
                    54:9a:18:ea:09:d1:25:84:6e:be:ad:47:65:af:90:
                    e3:02:d5:cd:ee:6f:1c:a7:02:da:a0:53:32:70:4d:
                    9f:b4:73:dd:82:58:1b:29:d5:49:e0:e1:c9:46:ea:
                    80:89:d6:47:fc:9e:d7:c8:4f:35:ef:7b:dd:83:84:
                    2c:d3:aa:ab:da:39:1b:68:b0:04:bb:35:a3:13:f6:
                    58:80:4d:2f:e3:a5:40:e7:ed:0b:36:97:2a:81:3c:
                    4f:2c:ef:01:86:d8:16:ed:90:62:df:55:b6:2d:46:
                    00:1e:ac:41:29:59:19:34:4d:bc:10:78:7a:a2:7f:
                    54:fb:37:85:27:97:9e:36:f1:8c:3a:f7:2e:9e:e6:
                    04:67:84:58:b0:c0:54:85:e3:4d:13:e2:12:a9:a9:
                    21:20:55:dc:0d:d2:d5:55:44:f6:53:9b:da:6e:6b:
                    9e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1B:A7:8B:BE:56:7C:07:03:A3:19:84:C4:CD:49:77:EE:18:4E:69
            X509v3 Authority Key Identifier:
                keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/6Runi75WfAcDoxmExM1Jd-4YTmk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.184.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         24:cd:4a:a3:82:35:15:b0:c3:3f:8c:f6:bd:5e:26:39:c3:b8:
         3e:ae:24:52:2a:44:d7:f5:dc:ba:bf:61:2d:ab:30:77:05:ab:
         cd:aa:59:f0:7e:57:f7:93:65:7e:f8:0a:33:77:46:0b:22:12:
         3c:cd:9b:bd:b6:35:f3:c2:eb:01:ab:f5:0c:62:ea:00:6d:dd:
         86:ff:d3:b4:d7:59:02:d5:c8:18:7a:b7:09:a0:eb:3d:e8:8b:
         2f:95:60:c2:9e:a0:45:d8:40:54:be:52:f1:bd:37:74:15:5c:
         ef:b1:a7:59:88:4c:83:a8:b3:d3:31:34:50:c0:22:bc:9f:fb:
         67:07:1d:a1:38:5d:8b:e1:a7:ae:03:a8:37:5f:9f:aa:55:93:
         71:31:6f:34:55:aa:7f:fe:35:13:2e:fd:58:43:3a:f6:6e:dd:
         47:34:a4:8e:93:ca:c5:07:04:5d:e3:44:71:71:26:78:57:34:
         47:f3:fa:43:96:97:6d:19:9b:08:94:08:cc:8e:3a:ef:3f:08:
         17:d3:73:c0:f1:f4:12:0c:45:1d:8c:a6:f0:78:03:d5:ca:d9:
         24:2f:31:b4:a9:5c:1b:b7:68:12:c8:22:c8:b2:99:47:5b:ef:
         3d:d7:45:99:d4:b6:bf:a5:a4:90:89:be:26:cf:93:d6:97:e2:
         8a:77:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org