Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/m_yR33D1i_fuOqV39xs8MyfmgBg.roa
File: m_yR33D1i_fuOqV39xs8MyfmgBg.roa (raw, json)
Hash identifier: aaBCUGQKvojgqQTHZoLHpE9RQRSfGnESjoWKJGa9QSU=
Subject key identifier: 9B:FC:91:DF:70:F5:8B:F7:EE:3A:A5:77:F7:1B:3C:33:27:E6:80:18
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0701
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/m_yR33D1i_fuOqV39xs8MyfmgBg.roa
Signing time: Mon 22 May 2023 02:56:27 +0000
ROA not before: Mon 22 May 2023 02:56:27 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 58466
IP address blocks: 103.41.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1793 (0x701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: May 22 02:56:27 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=9BFC91DF70F58BF7EE3AA577F71B3C3327E68018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:7f:64:6d:d1:ed:c9:c4:08:24:a4:c2:eb:
57:88:c5:03:37:58:24:7d:6b:e0:0c:d3:5e:6c:0b:
ac:ba:a3:81:34:32:c6:c0:5a:9f:ca:d9:c6:1a:28:
5d:d1:24:11:eb:86:a3:76:89:e3:70:fa:ea:05:a7:
b7:68:a1:43:a8:1a:bf:40:20:16:4a:37:38:2e:fe:
96:ea:13:01:77:84:ec:a2:40:96:91:b7:c9:94:f4:
cc:c7:9b:12:6f:98:dd:b5:7d:8a:f1:1b:f0:64:60:
8d:1a:07:2c:af:01:4e:8b:be:3c:30:31:d8:a0:1d:
16:1a:d0:b0:86:01:48:77:22:28:4e:f7:28:d4:0e:
ac:fd:61:da:f0:32:ba:7a:06:a8:e8:28:4b:f6:6a:
af:15:34:42:7d:a9:87:f5:d4:1e:20:f5:7b:b1:4d:
a1:96:6f:39:f8:fb:83:74:23:5e:a5:69:97:14:d0:
c3:a1:e9:41:d9:fc:e2:ff:00:f1:03:6d:b4:14:17:
3e:93:35:b8:3f:f0:f4:fd:9f:45:e7:7f:de:b0:86:
25:da:3a:70:45:90:2d:30:e1:00:61:7e:86:a7:aa:
15:b6:91:b0:2e:cf:e0:b0:05:11:46:f9:ec:cf:35:
42:7b:f6:fa:21:b3:59:7c:95:48:b0:95:13:80:8b:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:91:DF:70:F5:8B:F7:EE:3A:A5:77:F7:1B:3C:33:27:E6:80:18
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/m_yR33D1i_fuOqV39xs8MyfmgBg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.232.0/22
Signature Algorithm: sha256WithRSAEncryption
55:db:39:a1:99:49:4d:d5:5b:02:5f:89:e6:6e:d0:23:32:1f:
16:1d:d8:9b:ab:28:41:d2:63:86:f7:73:47:e2:1d:3d:ea:85:
94:2a:18:1d:56:35:cd:58:0b:bc:18:4b:32:cd:e6:e7:cf:da:
b4:c3:12:38:e9:ae:0e:12:2b:33:fd:26:4a:b1:bc:5b:85:42:
b1:2f:6d:ee:65:03:e3:84:c0:0f:0d:b7:3a:7e:86:f7:b9:85:
4a:b0:cc:76:07:c9:32:38:fa:a6:c2:f3:c9:a6:de:50:c0:91:
ad:dd:8e:c4:bf:f0:2c:fa:4a:be:89:e1:55:23:16:83:3d:41:
63:e0:bc:99:f1:aa:36:17:38:15:77:5a:81:63:09:df:67:69:
f0:9a:be:72:81:54:59:09:43:3d:28:38:41:9c:bb:85:34:a9:
86:0a:e6:9d:3b:83:74:b8:db:83:f0:e2:ea:75:f5:e4:85:7a:
f5:cb:89:60:3c:d0:80:74:6e:84:59:13:dd:b1:35:19:d8:c7:
34:cc:be:cf:58:b4:5c:44:38:28:b5:b2:b0:27:5c:6c:e7:58:
5f:8e:1d:ff:3d:23:be:d4:25:e8:81:ae:46:d4:90:63:01:40:
c4:37:e2:41:58:7e:fc:c6:be:44:5b:56:42:f0:fa:a3:a8:86:
30:8c:0d:83
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA1MjIw
MjU2MjdaFw0yNDAyMTcwMjQ2NTlaMDMxMTAvBgNVBAMTKDlCRkM5MURGNzBGNThC
RjdFRTNBQTU3N0Y3MUIzQzMzMjdFNjgwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjR39kbdHtycQIJKTC61eIxQM3WCR9a+AM015sC6y6o4E0MsbA
Wp/K2cYaKF3RJBHrhqN2ieNw+uoFp7dooUOoGr9AIBZKNzgu/pbqEwF3hOyiQJaR
t8mU9MzHmxJvmN21fYrxG/BkYI0aByyvAU6LvjwwMdigHRYa0LCGAUh3IihO9yjU
Dqz9YdrwMrp6BqjoKEv2aq8VNEJ9qYf11B4g9XuxTaGWbzn4+4N0I16laZcU0MOh
6UHZ/OL/APEDbbQUFz6TNbg/8PT9n0Xnf96whiXaOnBFkC0w4QBhfoanqhW2kbAu
z+CwBRFG+ezPNUJ79vohs1l8lUiwlROAi8B/AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUm/yR33D1i/fuOqV39xs8MyfmgBgwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvbV95UjMzRDFpX2Z1
T3FWMzl4czhNeWZtZ0JnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcp6DANBgkqhkiG9w0BAQsFAAOCAQEAVds5oZlJTdVbAl+J5m7QIzIfFh3Y
m6soQdJjhvdzR+IdPeqFlCoYHVY1zVgLvBhLMs3m58/atMMSOOmuDhIrM/0mSrG8
W4VCsS9t7mUD44TADw23On6G97mFSrDMdgfJMjj6psLzyabeUMCRrd2OxL/wLPpK
vonhVSMWgz1BY+C8mfGqNhc4FXdagWMJ32dp8Jq+coFUWQlDPSg4QZy7hTSphgrm
nTuDdLjbg/Di6nX15IV69cuJYDzQgHRuhFkT3bE1GdjHNMy+z1i0XEQ4KLWysCdc
bOdYX44d/z0jvtQl6IGuRtSQYwFAxDfiQVh+/Ma+RFtWQvD6o6iGMIwNgw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org