Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2671/Pm3je6b92FaLqUhdUfPxc4Fb6SA.roa
File: Pm3je6b92FaLqUhdUfPxc4Fb6SA.roa (raw, json)
Hash identifier: YFKfCJoXgueCCikfQT2sXCAUpb1rMHqJZkGmhOydOjk=
Subject key identifier: 3E:6D:E3:7B:A6:FD:D8:56:8B:A9:48:5D:51:F3:F1:73:81:5B:E9:20
Certificate issuer: /CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F
Certificate serial: 0D99
Authority key identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/Pm3je6b92FaLqUhdUfPxc4Fb6SA.roa
Signing time: Tue 01 Nov 2022 09:17:59 +0000
ROA not before: Tue 01 Nov 2022 09:17:59 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 34549
IP address blocks: 103.108.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3481 (0xd99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F
Validity
Not Before: Nov 1 09:17:59 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=3E6DE37BA6FDD8568BA9485D51F3F173815BE920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:35:40:77:03:66:2c:d1:ff:06:82:00:0f:
da:b3:5d:3c:ff:e9:0a:91:d4:e9:e0:a2:5c:25:a4:
23:89:77:5e:e8:3c:e1:73:75:69:e9:26:51:11:fe:
35:52:6f:21:99:f7:0e:1a:14:56:34:2f:d2:7f:00:
c9:9e:91:27:be:ec:fa:c9:e2:02:47:2a:c9:3a:6a:
6e:65:07:5f:93:4f:63:c9:a5:92:44:0a:20:61:f1:
14:50:7b:7d:1a:ce:ad:86:ed:e7:7c:48:dc:29:6b:
b9:ab:5c:f3:67:33:88:42:a6:25:40:1b:67:e6:2d:
32:99:18:84:96:89:f5:c8:46:05:1b:8d:2b:c0:e0:
bc:f3:20:08:8c:40:ea:8c:f4:55:4d:84:28:cf:f8:
1c:ae:b0:31:fd:7d:6d:16:bd:37:fd:dd:4a:50:48:
c5:ca:e5:83:85:34:b2:39:8e:73:9e:17:70:2c:4e:
b1:d3:e2:80:ea:49:3a:4c:83:31:79:29:c2:13:f6:
d8:53:31:89:3d:6d:e3:83:e5:19:d7:ed:77:a0:df:
ae:c0:e8:fd:0b:5f:ff:a9:19:9a:20:ce:03:56:47:
e4:af:66:c2:35:d4:d5:54:49:74:9a:eb:3a:e8:91:
7a:14:cc:e4:e5:10:fb:0f:cc:a9:fd:6e:76:cf:da:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:E3:7B:A6:FD:D8:56:8B:A9:48:5D:51:F3:F1:73:81:5B:E9:20
X509v3 Authority Key Identifier:
keyid:DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/Pm3je6b92FaLqUhdUfPxc4Fb6SA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.164.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:b7:84:b3:c9:7a:52:a1:b1:1d:4a:c7:c7:02:35:6f:bf:36:
db:a1:12:f5:57:e7:0e:80:d2:6a:c4:85:d0:4c:0e:ff:65:67:
70:a6:e2:65:f6:9e:40:66:08:78:e1:02:98:21:d3:9c:28:e5:
04:23:db:04:49:43:a3:d7:4b:d8:b6:a5:0f:35:10:9a:07:90:
b0:f5:9f:46:35:3b:c7:50:e5:25:58:d6:6c:bd:84:1f:65:4e:
04:a4:94:ec:70:98:8e:78:e4:56:45:bd:5a:6f:7c:04:7c:55:
9f:24:5e:75:a7:42:49:52:36:bc:8d:32:d1:1b:b7:cb:a6:56:
4b:68:20:40:d5:38:34:4b:cf:c4:f5:a4:88:39:7b:8d:5c:33:
c3:c9:8e:42:7b:de:53:14:39:3d:51:2d:fb:e0:c9:bd:bf:3b:
d0:b9:b0:4f:66:d6:5a:eb:a0:a8:74:1f:65:db:55:df:00:f8:
3d:4b:b3:04:f4:ce:b4:fc:58:b4:4a:8c:8c:d5:11:85:2b:87:
dc:71:68:3f:d8:20:48:71:7e:75:b2:c7:15:d6:6d:b3:22:86:
0f:97:61:e4:15:a5:00:9b:4b:e2:30:af:b1:ac:99:c8:15:c4:
aa:bd:77:88:96:db:05:9e:58:8d:8e:01:44:74:60:fa:d7:92:
f2:15:f6:e1
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICDZkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREQ1
OEI4REVFNzdCOEFGRTZFMjkxQTVCODIwNUIxMzEzMTY5Nzg0RjAeFw0yMjExMDEw
OTE3NTlaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDNFNkRFMzdCQTZGREQ4
NTY4QkE5NDg1RDUxRjNGMTczODE1QkU5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAYTVAdwNmLNH/BoIAD9qzXTz/6QqR1OngolwlpCOJd17oPOFz
dWnpJlER/jVSbyGZ9w4aFFY0L9J/AMmekSe+7PrJ4gJHKsk6am5lB1+TT2PJpZJE
CiBh8RRQe30azq2G7ed8SNwpa7mrXPNnM4hCpiVAG2fmLTKZGISWifXIRgUbjSvA
4LzzIAiMQOqM9FVNhCjP+ByusDH9fW0WvTf93UpQSMXK5YOFNLI5jnOeF3AsTrHT
4oDqSTpMgzF5KcIT9thTMYk9beOD5RnX7Xeg367A6P0LX/+pGZogzgNWR+SvZsI1
1NVUSXSa6zrokXoUzOTlEPsPzKn9bnbP2kftAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUPm3je6b92FaLqUhdUfPxc4Fb6SAwHwYDVR0jBBgwFoAU3Vi43ud7iv5uKRpb
ggWxMTFpeE8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjY3
MS8zVmk0M3VkN2l2NXVLUnBiZ2dXeE1URnBlRTguY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzNWaTQzdWQ3aXY1dUtScGJnZ1d4TVRGcGVFOC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2NzEvUG0zamU2YjkyRmFM
cVVoZFVmUHhjNEZiNlNBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdspDANBgkqhkiG9w0BAQsFAAOCAQEAy7eEs8l6UqGxHUrHxwI1b78226ES
9VfnDoDSasSF0EwO/2VncKbiZfaeQGYIeOECmCHTnCjlBCPbBElDo9dL2LalDzUQ
mgeQsPWfRjU7x1DlJVjWbL2EH2VOBKSU7HCYjnjkVkW9Wm98BHxVnyRedadCSVI2
vI0y0Ru3y6ZWS2ggQNU4NEvPxPWkiDl7jVwzw8mOQnveUxQ5PVEt++DJvb870Lmw
T2bWWuugqHQfZdtV3wD4PUuzBPTOtPxYtEqMjNURhSuH3HFoP9ggSHF+dbLHFdZt
syKGD5dh5BWlAJtL4jCvsayZyBXEqr13iJbbBZ5YjY4BRHRg+teS8hX24Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:15 2023 by rpki-client on console-ams.rpki-client.org