Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/it6fqUIJzOqix9uWpwkPG5DYxwM.roa
File: it6fqUIJzOqix9uWpwkPG5DYxwM.roa (raw, json)
Hash identifier: yakiVm8jY+xSDOfkNUlcp3dr7nXMdu5sGiqZTZeE96Q=
Subject key identifier: 8A:DE:9F:A9:42:09:CC:EA:A2:C7:DB:96:A7:09:0F:1B:90:D8:C7:03
Certificate issuer: /CN=9E65AA3E39C79F5FC6B8A062084B5888270FF915
Certificate serial: 04
Authority key identifier: 9E:65:AA:3E:39:C7:9F:5F:C6:B8:A0:62:08:4B:58:88:27:0F:F9:15
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nmWqPjnHn1_GuKBiCEtYiCcP-RU.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/it6fqUIJzOqix9uWpwkPG5DYxwM.roa
Signing time: Thu 27 May 2021 05:03:03 +0000
ROA not before: Thu 27 May 2021 05:03:03 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 398704
IP address blocks: 103.98.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E65AA3E39C79F5FC6B8A062084B5888270FF915
Validity
Not Before: May 27 05:03:03 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=8ADE9FA94209CCEAA2C7DB96A7090F1B90D8C703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:c0:c9:d8:27:a4:3f:98:da:13:89:2f:38:
9f:e3:ce:01:06:d7:eb:bc:48:76:3c:16:9a:26:30:
a5:1a:1b:ea:f0:35:1a:d1:37:c8:fe:f1:b4:13:46:
21:12:03:db:3c:86:37:b9:28:db:6e:ca:b7:3f:f1:
f0:03:5b:7f:ac:9a:cf:29:9c:09:ff:2e:e0:66:41:
b4:88:52:55:35:e3:c1:4d:0f:7c:7c:ba:cc:90:2c:
df:91:a4:20:ab:53:44:92:c0:12:ee:03:58:ae:aa:
bf:6f:f6:0f:9b:bc:b7:14:83:96:1d:c1:32:ce:89:
ea:5a:bd:46:68:59:82:60:3e:37:1e:4c:50:1b:c0:
c9:87:ab:ce:7f:9d:b8:f6:6a:99:72:59:cc:b7:18:
9c:c8:67:48:f2:c7:20:e1:b2:b7:50:7f:4f:5d:b8:
b5:46:0e:cb:9c:5f:b4:11:fb:42:9f:11:38:2b:39:
d0:ea:45:cf:72:4c:d0:e7:53:bb:06:f8:ae:01:2a:
95:f3:21:fe:c9:c1:c1:35:aa:8e:17:b4:e9:c5:df:
53:40:f0:27:18:bc:71:29:a1:d8:54:c8:e8:b3:8f:
56:85:b4:90:c2:e8:ac:8a:dc:a7:69:36:33:05:38:
57:dc:04:b9:09:95:02:1f:1c:7f:14:a9:00:82:38:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DE:9F:A9:42:09:CC:EA:A2:C7:DB:96:A7:09:0F:1B:90:D8:C7:03
X509v3 Authority Key Identifier:
keyid:9E:65:AA:3E:39:C7:9F:5F:C6:B8:A0:62:08:4B:58:88:27:0F:F9:15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/nmWqPjnHn1_GuKBiCEtYiCcP-RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nmWqPjnHn1_GuKBiCEtYiCcP-RU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/it6fqUIJzOqix9uWpwkPG5DYxwM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.164.0/22
Signature Algorithm: sha256WithRSAEncryption
62:80:c0:b9:e5:51:0d:7d:8c:54:e1:7a:11:cc:6c:4c:55:82:
80:da:a3:ee:85:e0:e5:d8:e5:73:06:b6:de:c7:6b:e5:29:6e:
d2:33:b4:25:82:c2:79:e5:a8:cc:ca:8c:cc:f9:63:e4:ba:f2:
29:f1:35:80:4d:d0:94:78:cd:49:65:aa:f9:a0:94:2d:0b:85:
e6:67:fa:91:a6:dd:f4:fa:1c:67:83:29:29:7e:93:cc:40:b9:
de:6a:d4:36:5a:32:12:ff:09:92:8d:99:d1:f4:14:c4:e9:bc:
a5:eb:45:cc:07:14:80:1d:63:da:c3:45:48:0b:14:3b:cc:1c:
44:01:02:a8:8d:99:2a:ce:89:ef:84:71:51:58:29:a1:f9:a9:
86:9e:c3:21:80:a1:8d:e3:5e:71:1a:a1:d8:77:61:eb:b5:b2:
72:1b:c5:d0:22:f9:22:b3:ce:2b:03:5b:62:fc:ad:67:6f:7d:
62:2e:f4:65:47:56:33:61:29:18:18:f4:8f:e5:d8:b2:31:f7:
d5:8b:29:50:b0:84:4e:1a:46:0d:ea:b5:2b:f3:a7:82:d2:79:
f3:b3:2c:ec:fe:0b:dc:bd:a6:9b:ac:6b:46:5d:58:77:61:3e:
73:e0:7f:30:6e:df:cd:4d:b6:6f:5e:cd:f3:3b:4a:f3:09:7f:
eb:63:3b:7a
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTY1
QUEzRTM5Qzc5RjVGQzZCOEEwNjIwODRCNTg4ODI3MEZGOTE1MB4XDTIxMDUyNzA1
MDMwM1oXDTIyMDUyNzA0NTk1MlowMzExMC8GA1UEAxMoOEFERTlGQTk0MjA5Q0NF
QUEyQzdEQjk2QTcwOTBGMUI5MEQ4QzcwMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMRKwMnYJ6Q/mNoTiS84n+POAQbX67xIdjwWmiYwpRob6vA1GtE3
yP7xtBNGIRID2zyGN7ko227Ktz/x8ANbf6yazymcCf8u4GZBtIhSVTXjwU0PfHy6
zJAs35GkIKtTRJLAEu4DWK6qv2/2D5u8txSDlh3BMs6J6lq9RmhZgmA+Nx5MUBvA
yYerzn+duPZqmXJZzLcYnMhnSPLHIOGyt1B/T124tUYOy5xftBH7Qp8ROCs50OpF
z3JM0OdTuwb4rgEqlfMh/snBwTWqjhe06cXfU0DwJxi8cSmh2FTI6LOPVoW0kMLo
rIrcp2k2MwU4V9wEuQmVAh8cfxSpAII4FA0CAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBSK3p+pQgnM6qLH25anCQ8bkNjHAzAfBgNVHSMEGDAWgBSeZao+OcefX8a4oGII
S1iIJw/5FTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNTY0
L25tV3FQam5IbjFfR3VLQmlDRXRZaUNjUC1SVS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvbm1XcVBqbkhuMV9HdUtCaUNFdFlpQ2NQLVJVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjU2NC9pdDZmcVVJSnpPcWl4
OXVXcHdrUEc1RFl4d00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCZ2KkMA0GCSqGSIb3DQEBCwUAA4IBAQBigMC55VENfYxU4XoRzGxMVYKA2qPu
heDl2OVzBrbex2vlKW7SM7QlgsJ55ajMyozM+WPkuvIp8TWATdCUeM1JZar5oJQt
C4XmZ/qRpt30+hxngykpfpPMQLneatQ2WjIS/wmSjZnR9BTE6byl60XMBxSAHWPa
w0VICxQ7zBxEAQKojZkqzonvhHFRWCmh+amGnsMhgKGN415xGqHYd2HrtbJyG8XQ
Ivkis84rA1ti/K1nb31iLvRlR1YzYSkYGPSP5diyMffViylQsIROGkYN6rUr86eC
0nnzsyzs/gvcvaabrGtGXVh3YT5z4H8wbt/NTbZvXs3zO0rzCX/rYzt6
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org