Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2522/6x8DVgwZDa327Yzcs9Cb4ppsv9I.roa
File: 6x8DVgwZDa327Yzcs9Cb4ppsv9I.roa (raw, json)
Hash identifier: eBt6SsNT3mXOqiKjrdSW0u29PchUNWJ3CNh341y2Cxo=
Subject key identifier: EB:1F:03:56:0C:19:0D:AD:F6:ED:8C:DC:B3:D0:9B:E2:9A:6C:BF:D2
Certificate issuer: /CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Certificate serial: 093A
Authority key identifier: 40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/6x8DVgwZDa327Yzcs9Cb4ppsv9I.roa
Signing time: Mon 06 Jun 2022 20:08:00 +0000
ROA not before: Mon 06 Jun 2022 20:08:00 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 131567
IP address blocks: 103.96.8.0/22 maxlen: 24
103.96.8.0/24 maxlen: 24
103.96.9.0/24 maxlen: 24
103.96.10.0/24 maxlen: 24
103.96.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2362 (0x93a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4087DAB67172836B082075CE18BE5E5FA45D5E95
Validity
Not Before: Jun 6 20:08:00 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=EB1F03560C190DADF6ED8CDCB3D09BE29A6CBFD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:66:d9:f9:c2:24:85:8e:a0:1b:b5:02:49:
3e:ff:5c:f4:e2:5e:9b:de:1b:4a:51:4b:e3:b9:f7:
87:16:34:03:ff:30:ee:10:a0:c5:46:4b:df:fb:e9:
8d:bd:dc:6f:3b:b2:6c:c5:b1:52:bd:da:ab:f0:26:
3a:60:2e:b9:af:38:49:4a:09:a9:67:de:6f:85:48:
b7:ea:e0:44:3e:7b:bf:39:17:d8:6c:c3:f9:9f:29:
8a:cf:35:64:a0:fa:31:f6:1a:c6:d8:ca:9f:e7:18:
bf:b4:9b:6c:d2:96:24:92:3c:cc:d8:46:55:83:09:
60:ce:ea:d7:a0:a3:cd:57:ac:7f:3e:2b:20:ec:12:
d6:ce:0c:b7:a0:13:ea:39:69:84:fd:11:03:6e:49:
f6:72:38:cb:f3:d1:a3:89:91:97:7f:8d:a4:28:a1:
87:60:7d:be:ca:40:06:a9:c5:ea:0c:f0:75:73:98:
38:8e:2b:36:ab:c9:7d:88:ba:f7:f5:c4:51:f1:4b:
45:cd:01:e8:4a:76:4a:eb:f3:58:cf:e8:79:0b:dd:
82:ba:18:00:6d:b2:e4:95:88:12:ce:f7:0c:f3:13:
ca:41:f5:df:a0:8b:ab:b4:b5:4c:eb:a2:1c:d1:19:
d0:a8:9e:9a:57:da:17:3d:7d:00:52:bb:c0:a9:66:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1F:03:56:0C:19:0D:AD:F6:ED:8C:DC:B3:D0:9B:E2:9A:6C:BF:D2
X509v3 Authority Key Identifier:
keyid:40:87:DA:B6:71:72:83:6B:08:20:75:CE:18:BE:5E:5F:A4:5D:5E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/QIfatnFyg2sIIHXOGL5eX6RdXpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QIfatnFyg2sIIHXOGL5eX6RdXpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2522/6x8DVgwZDa327Yzcs9Cb4ppsv9I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.8.0/22
Signature Algorithm: sha256WithRSAEncryption
87:d0:dd:07:ad:2a:95:60:9a:4e:19:70:b0:44:4e:31:bf:20:
f5:f4:30:4c:9d:c6:d2:9c:7b:ba:bd:00:fa:fa:76:25:7d:41:
43:d9:ef:ea:57:3e:07:51:28:78:0e:ec:79:e3:29:1f:69:03:
bb:7c:fd:10:c7:a2:3c:ca:23:53:a4:18:a1:13:7e:f0:93:eb:
6b:8b:30:b8:f0:92:01:3e:71:4f:4c:93:61:5d:6a:50:4a:4a:
59:35:66:92:58:73:64:af:4c:18:ed:0f:0c:f2:c0:17:04:54:
db:67:9b:a1:12:f1:00:5c:c0:e5:9e:0f:79:a4:25:45:27:a8:
fd:14:c7:3a:19:b8:28:fd:5a:f9:b1:3c:6f:90:d1:ff:e3:49:
0a:a4:ba:72:42:ac:93:be:3e:de:78:42:2f:2d:fe:21:c7:af:
96:69:be:a6:d8:65:6d:36:5d:17:37:13:45:7f:52:4e:0f:cb:
41:61:ea:bc:44:61:15:78:98:82:f4:b1:46:c2:1e:f4:ab:a8:
8b:47:3c:95:53:a8:e9:80:79:5f:f4:d8:91:33:25:a5:2f:07:
da:30:aa:3b:37:00:b7:d4:f1:55:56:64:c7:4e:30:b3:91:a2:
60:27:a5:4f:be:c4:60:de:e6:ac:38:71:f2:34:bd:84:78:6c:
20:19:c4:79
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCTowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA4
N0RBQjY3MTcyODM2QjA4MjA3NUNFMThCRTVFNUZBNDVENUU5NTAeFw0yMjA2MDYy
MDA4MDBaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKEVCMUYwMzU2MEMxOTBE
QURGNkVEOENEQ0IzRDA5QkUyOUE2Q0JGRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5a2bZ+cIkhY6gG7UCST7/XPTiXpveG0pRS+O594cWNAP/MO4Q
oMVGS9/76Y293G87smzFsVK92qvwJjpgLrmvOElKCaln3m+FSLfq4EQ+e785F9hs
w/mfKYrPNWSg+jH2GsbYyp/nGL+0m2zSliSSPMzYRlWDCWDO6tego81XrH8+KyDs
EtbODLegE+o5aYT9EQNuSfZyOMvz0aOJkZd/jaQooYdgfb7KQAapxeoM8HVzmDiO
KzaryX2Iuvf1xFHxS0XNAehKdkrr81jP6HkL3YK6GABtsuSViBLO9wzzE8pB9d+g
i6u0tUzrohzRGdConppX2hc9fQBSu8CpZhMpAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU6x8DVgwZDa327Yzcs9Cb4ppsv9IwHwYDVR0jBBgwFoAUQIfatnFyg2sIIHXO
GL5eX6RdXpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUy
Mi9RSWZhdG5GeWcyc0lJSFhPR0w1ZVg2UmRYcFUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1FJZmF0bkZ5ZzJzSUlIWE9HTDVlWDZSZFhwVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MjIvNng4RFZnd1pEYTMy
N1l6Y3M5Q2I0cHBzdjlJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdgCDANBgkqhkiG9w0BAQsFAAOCAQEAh9DdB60qlWCaThlwsEROMb8g9fQw
TJ3G0px7ur0A+vp2JX1BQ9nv6lc+B1EoeA7seeMpH2kDu3z9EMeiPMojU6QYoRN+
8JPra4swuPCSAT5xT0yTYV1qUEpKWTVmklhzZK9MGO0PDPLAFwRU22eboRLxAFzA
5Z4PeaQlRSeo/RTHOhm4KP1a+bE8b5DR/+NJCqS6ckKsk74+3nhCLy3+Icevlmm+
pthlbTZdFzcTRX9STg/LQWHqvERhFXiYgvSxRsIe9Kuoi0c8lVOo6YB5X/TYkTMl
pS8H2jCqOzcAt9TxVVZkx04ws5GiYCelT77EYN7mrDhx8jS9hHhsIBnEeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org