Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/lAKJRzUJiQ_Rkzmk0eUTrXTCDQE.roa
File: lAKJRzUJiQ_Rkzmk0eUTrXTCDQE.roa (raw, json)
Hash identifier: FZJNLUJ8vZ7n8o3uD5hM3KhRwZXzFnriMTicv1jCMUE=
Subject key identifier: 94:02:89:47:35:09:89:0F:D1:93:39:A4:D1:E5:13:AD:74:C2:0D:01
Certificate issuer: /CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Certificate serial: 03
Authority key identifier: B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/lAKJRzUJiQ_Rkzmk0eUTrXTCDQE.roa
Signing time: Thu 27 May 2021 10:25:05 +0000
ROA not before: Thu 27 May 2021 10:25:05 +0000
ROA not after: Fri 27 May 2022 10:21:02 +0000
asID: 138527
IP address blocks: 118.184.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1EDB94F19DFA17702C591131D35ECFB17CCD2D9
Validity
Not Before: May 27 10:25:05 2021 GMT
Not After : May 27 10:21:02 2022 GMT
Subject: CN=940289473509890FD19339A4D1E513AD74C20D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:5a:5f:38:d3:96:32:5a:9c:b3:92:4d:70:
b4:b5:65:ce:b4:a3:7a:05:43:43:87:22:be:ff:76:
d2:0a:15:fb:6c:60:0f:03:ca:74:5d:a3:07:d6:1a:
b7:0e:31:3b:11:68:64:28:1f:34:9a:24:02:ce:b8:
10:66:e4:1e:53:c0:a5:17:42:87:72:d8:6d:2b:65:
09:61:3a:b6:da:f9:4b:91:13:9c:71:9c:a1:13:b3:
50:41:65:59:cf:66:88:8e:dd:34:78:28:c3:97:41:
be:af:7c:5a:82:7c:1e:08:ff:06:44:de:37:d0:8d:
60:53:ed:9b:ae:ee:4e:79:f1:d9:de:65:e8:48:33:
78:1f:43:9f:f8:01:4c:ec:0c:c1:26:ca:59:35:4d:
7b:af:c5:0c:c9:db:85:e3:f3:79:c7:21:96:71:fb:
cf:57:96:14:98:29:00:66:04:d9:5c:19:2b:6c:31:
f1:65:05:8a:d9:10:66:b4:1b:98:37:5c:62:99:b3:
e7:30:78:ca:2c:7e:f6:e0:fb:17:44:03:60:4e:a7:
63:38:2a:a8:c8:d5:2c:70:53:b3:2c:4d:5e:25:bb:
27:b2:7f:c4:80:d5:5f:7c:50:35:99:ec:88:6e:0e:
c5:3f:38:42:24:0c:1a:70:09:9c:56:78:94:f0:a6:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:89:47:35:09:89:0F:D1:93:39:A4:D1:E5:13:AD:74:C2:0D:01
X509v3 Authority Key Identifier:
keyid:B1:ED:B9:4F:19:DF:A1:77:02:C5:91:13:1D:35:EC:FB:17:CC:D2:D9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/se25TxnfoXcCxZETHTXs-xfM0tk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/se25TxnfoXcCxZETHTXs-xfM0tk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/lAKJRzUJiQ_Rkzmk0eUTrXTCDQE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.184.157.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f3:b1:c3:a3:71:31:e1:79:9c:f0:e1:47:10:82:eb:e8:5e:
46:8c:a0:c0:6d:ce:43:5d:f7:4b:ef:3f:17:1c:73:20:0f:49:
66:34:ed:9e:74:64:91:2d:65:ff:a9:45:7f:38:a4:dd:fd:af:
1a:2a:48:19:f1:f9:9b:d7:5c:87:e6:0d:41:41:64:c4:db:2c:
bb:c5:a0:48:58:d0:80:d7:79:16:ef:c9:ea:bc:11:4e:cf:aa:
1a:73:b5:d4:cf:12:cf:49:59:91:ca:33:71:6f:ae:b4:90:8b:
f4:64:5b:11:2d:f5:91:46:e0:59:28:d4:c3:1d:22:71:ba:e3:
f2:bd:e4:0c:c5:38:16:dd:ea:03:1d:ac:be:6b:3c:ab:a3:db:
60:fe:e8:41:0b:61:62:92:67:36:2f:dc:ee:11:44:c7:f1:d8:
81:b0:46:8d:df:29:51:17:9e:4f:99:1a:d8:ff:4c:b5:1b:ff:
37:be:c7:a7:77:a4:51:75:06:de:b1:62:15:7d:d5:10:1a:ef:
57:02:25:85:d9:ea:6e:e3:c2:2e:3b:c4:d1:53:60:f2:c2:24:
61:6c:e5:6d:58:d8:90:0d:c3:92:93:a5:80:bd:30:16:bb:0b:
b8:b8:ab:fe:07:63:8b:9a:cc:91:65:e8:c6:d7:16:9b:6c:49:
3f:52:be:19
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMUVE
Qjk0RjE5REZBMTc3MDJDNTkxMTMxRDM1RUNGQjE3Q0NEMkQ5MB4XDTIxMDUyNzEw
MjUwNVoXDTIyMDUyNzEwMjEwMlowMzExMC8GA1UEAxMoOTQwMjg5NDczNTA5ODkw
RkQxOTMzOUE0RDFFNTEzQUQ3NEMyMEQwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANkiWl8405YyWpyzkk1wtLVlzrSjegVDQ4civv920goV+2xgDwPK
dF2jB9Yatw4xOxFoZCgfNJokAs64EGbkHlPApRdCh3LYbStlCWE6ttr5S5ETnHGc
oROzUEFlWc9miI7dNHgow5dBvq98WoJ8Hgj/BkTeN9CNYFPtm67uTnnx2d5l6Egz
eB9Dn/gBTOwMwSbKWTVNe6/FDMnbhePzecchlnH7z1eWFJgpAGYE2VwZK2wx8WUF
itkQZrQbmDdcYpmz5zB4yix+9uD7F0QDYE6nYzgqqMjVLHBTsyxNXiW7J7J/xIDV
X3xQNZnsiG4OxT84QiQMGnAJnFZ4lPCmE+8CAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBSUAolHNQmJD9GTOaTR5ROtdMINATAfBgNVHSMEGDAWgBSx7blPGd+hdwLFkRMd
Nez7F8zS2TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMzI5
L3NlMjVUeG5mb1hjQ3haRVRIVFhzLXhmTTB0ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvc2UyNVR4bmZvWGNDeFpFVEhUWHMteGZNMHRrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMyOS9sQUtKUnpVSmlRX1Jr
em1rMGVVVHJYVENEUUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAdridMA0GCSqGSIb3DQEBCwUAA4IBAQBG87HDo3Ex4Xmc8OFHEILr6F5GjKDA
bc5DXfdL7z8XHHMgD0lmNO2edGSRLWX/qUV/OKTd/a8aKkgZ8fmb11yH5g1BQWTE
2yy7xaBIWNCA13kW78nqvBFOz6oac7XUzxLPSVmRyjNxb660kIv0ZFsRLfWRRuBZ
KNTDHSJxuuPyveQMxTgW3eoDHay+azyro9tg/uhBC2Fikmc2L9zuEUTH8diBsEaN
3ylRF55PmRrY/0y1G/83vsend6RRdQbesWIVfdUQGu9XAiWF2epu48IuO8TRU2Dy
wiRhbOVtWNiQDcOSk6WAvTAWuwu4uKv+B2OLmsyRZejG1xabbEk/Ur4Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org