Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/GaaaEuS5DToZttnlXxVJAWRukuQ.roa
File: GaaaEuS5DToZttnlXxVJAWRukuQ.roa (raw, json)
Hash identifier: /7v5FeTvFVJKOBC0bFwRq5bcNGT1WwxblVRNLOL/zEk=
Subject key identifier: 19:A6:9A:12:E4:B9:0D:3A:19:B6:D9:E5:5F:15:49:01:64:6E:92:E4
Certificate issuer: /CN=9E65AA3E39C79F5FC6B8A062084B5888270FF915
Certificate serial: 03
Authority key identifier: 9E:65:AA:3E:39:C7:9F:5F:C6:B8:A0:62:08:4B:58:88:27:0F:F9:15
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nmWqPjnHn1_GuKBiCEtYiCcP-RU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/GaaaEuS5DToZttnlXxVJAWRukuQ.roa
Signing time: Thu 27 May 2021 05:03:03 +0000
ROA not before: Thu 27 May 2021 05:03:03 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 131482
IP address blocks: 103.98.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E65AA3E39C79F5FC6B8A062084B5888270FF915
Validity
Not Before: May 27 05:03:03 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=19A69A12E4B90D3A19B6D9E55F154901646E92E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:b0:ff:5a:4c:e9:20:94:27:7d:2a:72:0b:
8b:fd:90:aa:56:9c:70:d0:90:1a:ea:5f:e0:8d:b4:
60:7b:5a:1b:09:47:18:f4:66:6d:82:3c:d4:bb:b6:
0a:c0:68:03:b1:91:f3:a8:9d:ca:bb:98:cb:d0:7d:
14:bb:88:e9:b4:c7:1f:6c:a5:02:f1:3c:72:b7:1d:
fb:ef:f6:7f:ce:00:60:d5:ed:5f:d3:7f:1d:12:3d:
0a:55:60:8e:27:d3:55:52:42:b1:65:5f:cc:c0:da:
92:dd:2f:9f:32:c2:54:24:eb:74:4f:39:a3:18:70:
2a:53:60:b9:a3:0d:0c:0a:c8:48:50:72:f7:06:3f:
61:96:bd:64:2c:ce:2d:3f:6d:08:45:77:92:82:b8:
4d:9b:82:91:8e:34:fd:50:c8:fe:53:3a:b3:30:89:
1b:8d:4f:00:8f:a1:45:b8:a0:1b:a5:54:b5:52:fb:
16:c7:24:41:a7:47:51:24:f6:7a:19:12:b1:f2:1e:
0f:76:82:f3:d8:cc:33:5e:67:7a:4d:79:d5:2c:cd:
ea:7d:fb:e7:c5:9f:28:c0:d6:15:c5:4d:70:5c:42:
71:19:cf:fa:0e:b7:19:61:fd:a8:ff:02:11:2a:55:
85:c2:9c:9d:15:e6:01:50:81:33:d5:fa:d9:38:0a:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A6:9A:12:E4:B9:0D:3A:19:B6:D9:E5:5F:15:49:01:64:6E:92:E4
X509v3 Authority Key Identifier:
keyid:9E:65:AA:3E:39:C7:9F:5F:C6:B8:A0:62:08:4B:58:88:27:0F:F9:15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/nmWqPjnHn1_GuKBiCEtYiCcP-RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nmWqPjnHn1_GuKBiCEtYiCcP-RU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/GaaaEuS5DToZttnlXxVJAWRukuQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.164.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:e3:48:5a:9e:44:f5:2f:69:27:fd:bf:2c:1f:ff:cf:57:e9:
05:cd:e2:dd:fc:96:c5:03:a5:df:ff:06:19:8d:99:70:9c:c1:
c2:ff:a8:86:c9:d5:34:f3:af:39:f3:e5:9b:17:bd:98:a3:80:
e9:d0:82:e2:6e:32:4f:16:98:4c:1c:e5:aa:4e:e2:97:39:9c:
2e:cd:85:da:9a:9a:3c:c8:b4:6b:59:49:62:6a:00:7d:87:4c:
d2:d3:05:4a:b8:25:fe:eb:1d:42:8d:90:59:66:2d:e3:35:d9:
07:d5:c2:3d:9a:7b:24:64:d3:28:bf:b6:82:af:65:c9:29:81:
c2:6d:bc:15:be:73:db:85:8d:94:c4:68:e7:2f:2d:79:62:30:
81:9f:0b:95:e4:18:4b:10:32:cf:1a:b7:9e:81:53:e2:b1:a5:
ca:2c:3c:6f:b2:0a:28:29:7d:d3:d2:f2:5a:cd:a6:3f:60:99:
72:a8:c5:16:49:73:df:03:a0:c3:31:f5:d7:c4:fd:97:e8:04:
bb:ae:6e:20:1c:b9:e6:c0:3a:04:0d:2a:ce:ff:2d:8e:f0:7c:
fe:b9:d0:58:8d:9e:ac:c6:be:32:32:5c:a6:0e:a9:a5:66:31:
2e:fa:cb:fd:2f:51:9b:40:ab:03:f2:e3:74:a2:b8:cf:4e:0f:
50:0e:4e:02
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTY1
QUEzRTM5Qzc5RjVGQzZCOEEwNjIwODRCNTg4ODI3MEZGOTE1MB4XDTIxMDUyNzA1
MDMwM1oXDTIyMDUyNzA0NTk1MlowMzExMC8GA1UEAxMoMTlBNjlBMTJFNEI5MEQz
QTE5QjZEOUU1NUYxNTQ5MDE2NDZFOTJFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM69sP9aTOkglCd9KnILi/2QqlaccNCQGupf4I20YHtaGwlHGPRm
bYI81Lu2CsBoA7GR86idyruYy9B9FLuI6bTHH2ylAvE8crcd++/2f84AYNXtX9N/
HRI9ClVgjifTVVJCsWVfzMDakt0vnzLCVCTrdE85oxhwKlNguaMNDArISFBy9wY/
YZa9ZCzOLT9tCEV3koK4TZuCkY40/VDI/lM6szCJG41PAI+hRbigG6VUtVL7Fsck
QadHUST2ehkSsfIeD3aC89jMM15nek151SzN6n3758WfKMDWFcVNcFxCcRnP+g63
GWH9qP8CESpVhcKcnRXmAVCBM9X62TgKKE0CAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBQZppoS5LkNOhm22eVfFUkBZG6S5DAfBgNVHSMEGDAWgBSeZao+OcefX8a4oGII
S1iIJw/5FTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNTY0
L25tV3FQam5IbjFfR3VLQmlDRXRZaUNjUC1SVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvbm1XcVBqbkhuMV9HdUtCaUNFdFlpQ2NQLVJVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU2NC9HYWFhRXVTNURUb1p0
dG5sWHhWSkFXUnVrdVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ2KkMA0GCSqGSIb3DQEBCwUAA4IBAQC440hankT1L2kn/b8sH//PV+kFzeLd
/JbFA6Xf/wYZjZlwnMHC/6iGydU086858+WbF72Yo4Dp0ILibjJPFphMHOWqTuKX
OZwuzYXampo8yLRrWUliagB9h0zS0wVKuCX+6x1CjZBZZi3jNdkH1cI9mnskZNMo
v7aCr2XJKYHCbbwVvnPbhY2UxGjnLy15YjCBnwuV5BhLEDLPGreegVPisaXKLDxv
sgooKX3T0vJazaY/YJlyqMUWSXPfA6DDMfXXxP2X6AS7rm4gHLnmwDoEDSrO/y2O
8Hz+udBYjZ6sxr4yMlymDqmlZjEu+sv9L1GbQKsD8uN0orjPTg9QDk4C
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org