Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/AAncExiqnViI9L4Mm6pLHbPW7mg.roa
File: AAncExiqnViI9L4Mm6pLHbPW7mg.roa (raw, json)
Hash identifier: couxCqUnnsKOD2xB8qFUzwYSJT2VWZpuMyRz1AVz+ZA=
Subject key identifier: 00:09:DC:13:18:AA:9D:58:88:F4:BE:0C:9B:AA:4B:1D:B3:D6:EE:68
Certificate issuer: /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial: 0950
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/AAncExiqnViI9L4Mm6pLHbPW7mg.roa
Signing time: Mon 06 Jun 2022 20:06:38 +0000
ROA not before: Mon 06 Jun 2022 20:06:38 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 4837
IP address blocks: 118.184.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2384 (0x950)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Validity
Not Before: Jun 6 20:06:38 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=0009DC1318AA9D5888F4BE0C9BAA4B1DB3D6EE68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c8:16:fb:a3:d7:ed:89:bc:02:1f:75:a1:cb:
c0:c4:7f:93:14:71:63:5b:2b:9c:be:35:e7:91:91:
b5:ca:49:4b:b2:e7:bf:72:cb:77:4c:54:bd:14:6a:
e2:a6:32:71:5a:81:68:a3:87:28:98:1d:2d:0b:c9:
7b:cf:1f:da:c5:12:e2:9a:d7:d3:50:dd:79:9f:b6:
d1:ee:64:d4:8e:4f:49:6b:00:5c:e5:03:22:8d:fa:
73:6a:4a:11:3e:23:dc:ba:01:7a:bc:42:b2:69:ef:
1d:74:ba:c3:90:38:70:47:85:47:21:c3:75:ce:12:
fb:46:0a:b6:86:cf:d7:9d:3a:a4:8c:50:3e:2a:42:
ef:ab:82:5b:a9:f9:8e:5f:9d:32:d7:90:56:ab:62:
58:b2:d8:a2:c2:f1:24:98:26:8f:1a:9f:de:9c:34:
ee:63:f6:b9:c5:06:18:02:13:ed:d1:9a:96:f0:c8:
38:25:6a:f2:25:a5:52:f4:5e:2d:43:7d:29:c4:7d:
8a:89:76:6b:99:4f:7e:56:49:b4:44:d4:3e:85:16:
e4:ca:54:21:35:30:c9:ae:44:31:55:02:59:cd:e2:
95:54:a7:eb:b3:82:60:b0:b0:da:85:61:2c:c3:1b:
29:8e:8d:63:cb:c2:1d:02:01:7d:a3:51:59:b8:45:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:DC:13:18:AA:9D:58:88:F4:BE:0C:9B:AA:4B:1D:B3:D6:EE:68
X509v3 Authority Key Identifier:
keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/AAncExiqnViI9L4Mm6pLHbPW7mg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.128.0/17
Signature Algorithm: sha256WithRSAEncryption
51:d8:46:cc:11:13:6d:53:3d:22:8b:0c:12:c8:3e:ab:bd:e5:
9b:00:df:26:5f:ca:95:d3:2b:8c:01:96:94:d5:7e:e5:2b:ea:
3f:ba:50:dc:af:e6:b8:b4:61:fa:5e:ba:db:18:7a:3c:91:68:
72:e3:86:94:0e:9c:44:ee:3a:ee:64:b3:aa:e4:c7:39:e4:e2:
72:7b:35:7b:6f:3a:4b:51:90:dc:fb:b4:d4:cf:00:e9:6f:59:
be:19:61:a5:ab:54:aa:8f:9e:4c:c9:6e:ee:ec:e7:6a:43:48:
62:0d:01:a5:0e:fa:85:ac:9e:50:d4:f6:b1:25:b7:57:15:1e:
02:28:d7:67:36:db:a0:25:1a:d9:8b:65:8b:a1:f6:14:b9:87:
18:1d:71:07:a4:91:88:04:5a:b1:47:2e:ee:77:8b:cf:1b:11:
6d:ff:4f:cc:b0:3b:84:01:fc:54:18:ff:7f:b5:c3:94:50:b4:
5d:4b:4b:cc:3b:b8:4a:bf:f4:30:90:20:32:c3:07:ef:e5:e2:
14:39:df:aa:83:76:96:f8:02:70:ee:2a:e6:c3:3f:db:fd:db:
d1:63:36:a0:50:45:18:5f:73:ff:a1:31:0e:11:05:d3:a1:19:
15:d5:2c:7a:26:57:b6:65:42:07:28:35:45:05:44:6c:92:7f:
94:9f:c4:aa
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUMx
MEM5MzQ1NTc1OUM2NTlEMkJCODE5RkIwN0ZGNzA2M0NFQ0MzMjAeFw0yMjA2MDYy
MDA2MzhaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKDAwMDlEQzEzMThBQTlE
NTg4OEY0QkUwQzlCQUE0QjFEQjNENkVFNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDryBb7o9ftibwCH3Why8DEf5MUcWNbK5y+NeeRkbXKSUuy579y
y3dMVL0UauKmMnFagWijhyiYHS0LyXvPH9rFEuKa19NQ3XmfttHuZNSOT0lrAFzl
AyKN+nNqShE+I9y6AXq8QrJp7x10usOQOHBHhUchw3XOEvtGCraGz9edOqSMUD4q
Qu+rglup+Y5fnTLXkFarYliy2KLC8SSYJo8an96cNO5j9rnFBhgCE+3RmpbwyDgl
avIlpVL0Xi1DfSnEfYqJdmuZT35WSbRE1D6FFuTKVCE1MMmuRDFVAlnN4pVUp+uz
gmCwsNqFYSzDGymOjWPLwh0CAX2jUVm4RYuJAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUAAncExiqnViI9L4Mm6pLHbPW7mgwHwYDVR0jBBgwFoAU7BDJNFV1nGWdK7gZ
+wf/cGPOzDIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMy
OS83QkRKTkZWMW5HV2RLN2daLXdmX2NHUE96REkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzdCREpORlYxbkdXZEs3Z1otd2ZfY0dQT3pESS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMjkvQUFuY0V4aXFuVmlJ
OUw0TW02cExIYlBXN21nLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB3a4gDANBgkqhkiG9w0BAQsFAAOCAQEAUdhGzBETbVM9IosMEsg+q73lmwDf
Jl/KldMrjAGWlNV+5SvqP7pQ3K/muLRh+l662xh6PJFocuOGlA6cRO467mSzquTH
OeTicns1e286S1GQ3Pu01M8A6W9ZvhlhpatUqo+eTMlu7uznakNIYg0BpQ76haye
UNT2sSW3VxUeAijXZzbboCUa2Ytli6H2FLmHGB1xB6SRiARasUcu7neLzxsRbf9P
zLA7hAH8VBj/f7XDlFC0XUtLzDu4Sr/0MJAgMsMH7+XiFDnfqoN2lvgCcO4q5sM/
2/3b0WM2oFBFGF9z/6ExDhEF06EZFdUseiZXtmVCByg1RQVEbJJ/lJ/Eqg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org