Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/Y05uVEQQXnQnPhaWDdXd0l14ILw.roa
File: Y05uVEQQXnQnPhaWDdXd0l14ILw.roa (raw, json)
Hash identifier: /RWJ/7hvB5Hp/d52z2vx5T9e0dj7qwJD6KZBcE1pH9g=
Subject key identifier: 63:4E:6E:54:44:10:5E:74:27:3E:16:96:0D:D5:DD:D2:5D:78:20:BC
Certificate issuer: /CN=9F2B6854BE70947F0785FF966203BB650BDD1682
Certificate serial: 03
Authority key identifier: 9F:2B:68:54:BE:70:94:7F:07:85:FF:96:62:03:BB:65:0B:DD:16:82
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/Y05uVEQQXnQnPhaWDdXd0l14ILw.roa
Signing time: Wed 01 Jun 2022 07:10:25 +0000
ROA not before: Wed 01 Jun 2022 07:10:25 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 17964
IP address blocks: 60.194.0.0/15 maxlen: 24
60.194.0.0/16 maxlen: 24
60.194.0.0/17 maxlen: 24
60.195.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F2B6854BE70947F0785FF966203BB650BDD1682
Validity
Not Before: Jun 1 07:10:25 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=634E6E5444105E74273E16960DD5DDD25D7820BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:8b:9d:d1:88:93:e0:b0:4a:c1:ef:ac:aa:
94:11:2e:42:a4:6f:cd:96:97:93:e5:29:5f:da:f7:
43:92:4c:15:56:d9:65:43:3f:5e:b8:97:59:9d:16:
5b:54:fc:b3:cd:76:98:b6:6c:33:bb:b6:17:7c:e2:
76:d8:4e:dc:28:77:49:65:76:b3:15:67:4d:05:fd:
f6:26:2f:20:e9:a6:f4:ea:21:78:64:3f:35:3c:73:
c8:b5:f6:af:df:8e:d7:6d:2b:f2:41:c2:af:fe:8f:
13:14:5f:1e:66:d0:c2:b1:56:e0:0d:c1:21:93:da:
83:9e:d4:85:f6:4f:16:02:99:b2:f3:19:2c:f9:31:
f7:f6:a5:f9:b7:0d:46:fb:74:57:14:c8:9a:4c:19:
c3:72:af:3e:dc:90:5d:fb:a0:a8:2e:21:fe:50:b2:
d9:fc:0b:15:15:c7:03:55:6f:ac:16:01:d4:1d:7c:
72:af:d0:07:04:4f:cb:86:d4:ed:84:37:eb:82:8d:
6f:fc:c9:7c:79:d7:2a:73:88:ee:b3:67:57:6d:e8:
a6:0e:9e:29:31:f0:4a:84:00:a6:6d:46:3f:d7:69:
e7:9c:f5:c4:1c:40:50:a5:a9:6a:a0:f5:8e:6f:fe:
ef:5d:0d:fe:9a:f9:11:fd:a0:65:9c:a3:79:95:19:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:6E:54:44:10:5E:74:27:3E:16:96:0D:D5:DD:D2:5D:78:20:BC
X509v3 Authority Key Identifier:
keyid:9F:2B:68:54:BE:70:94:7F:07:85:FF:96:62:03:BB:65:0B:DD:16:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/Y05uVEQQXnQnPhaWDdXd0l14ILw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.194.0.0/15
Signature Algorithm: sha256WithRSAEncryption
89:94:f6:13:be:7c:29:39:62:98:ff:d4:ac:4b:37:e5:4b:dc:
c6:ce:9c:f6:9e:24:08:90:36:41:73:38:65:45:a3:03:9f:6f:
ff:88:c2:cd:87:00:19:f7:07:f8:01:87:7e:22:89:9f:2e:59:
d1:19:0f:65:6a:21:fc:7a:7d:a9:1c:bc:8c:a9:aa:a6:ca:dc:
87:cb:3e:1c:f0:3a:2c:f4:a9:3b:47:e6:4c:26:6e:24:6e:02:
83:9c:70:b8:48:72:e4:f7:d4:2b:44:58:2d:3e:57:33:29:73:
f6:d0:01:37:33:d2:97:0c:56:1a:8a:13:46:cf:0b:e2:d8:a0:
78:2c:0c:b2:9c:a3:9c:31:61:a2:4b:a3:2a:9b:66:12:1b:7a:
f6:03:84:4c:2e:63:16:10:1c:46:55:b8:37:3f:eb:26:bd:35:
d9:3b:ef:12:25:36:3b:02:83:b6:25:de:5c:d0:1f:66:ef:d4:
ef:c9:7b:38:13:38:02:42:6f:aa:ea:e5:f5:a2:c3:55:79:f9:
33:92:5f:39:33:2c:51:01:a5:1c:92:c4:27:81:06:67:90:cf:
ec:4c:0d:01:74:21:9e:a7:bb:38:b7:77:1d:61:82:45:b1:94:
4d:ff:9e:52:76:ee:71:06:e0:d3:fe:f8:1b:5b:e6:a9:23:da:
3d:42:1f:84
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RjJC
Njg1NEJFNzA5NDdGMDc4NUZGOTY2MjAzQkI2NTBCREQxNjgyMB4XDTIyMDYwMTA3
MTAyNVoXDTIzMDYwMTA2NTg1NFowMzExMC8GA1UEAxMoNjM0RTZFNTQ0NDEwNUU3
NDI3M0UxNjk2MERENURERDI1RDc4MjBCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM/Zi53RiJPgsErB76yqlBEuQqRvzZaXk+UpX9r3Q5JMFVbZZUM/
XriXWZ0WW1T8s812mLZsM7u2F3zidthO3Ch3SWV2sxVnTQX99iYvIOmm9OoheGQ/
NTxzyLX2r9+O120r8kHCr/6PExRfHmbQwrFW4A3BIZPag57UhfZPFgKZsvMZLPkx
9/al+bcNRvt0VxTImkwZw3KvPtyQXfugqC4h/lCy2fwLFRXHA1VvrBYB1B18cq/Q
BwRPy4bU7YQ364KNb/zJfHnXKnOI7rNnV23opg6eKTHwSoQApm1GP9dp55z1xBxA
UKWpaqD1jm/+710N/pr5Ef2gZZyjeZUZZ5kCAwEAAaOCAe4wggHqMB0GA1UdDgQW
BBRjTm5URBBedCc+FpYN1d3SXXggvDAfBgNVHSMEGDAWgBSfK2hUvnCUfweF/5Zi
A7tlC90WgjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNy9u
eXRvVkw1d2xIOEhoZi1XWWdPN1pRdmRGb0kuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL255dG9WTDV3bEg4SGhmLVdZZ083WlF2ZEZvSS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3L1kwNXVWRVFRWG5RblBoYVdE
ZFhkMGwxNElMdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j
bi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwE8
wjANBgkqhkiG9w0BAQsFAAOCAQEAiZT2E758KTlimP/UrEs35Uvcxs6c9p4kCJA2
QXM4ZUWjA59v/4jCzYcAGfcH+AGHfiKJny5Z0RkPZWoh/Hp9qRy8jKmqpsrch8s+
HPA6LPSpO0fmTCZuJG4Cg5xwuEhy5PfUK0RYLT5XMylz9tABNzPSlwxWGooTRs8L
4tigeCwMspyjnDFhokujKptmEht69gOETC5jFhAcRlW4Nz/rJr012TvvEiU2OwKD
tiXeXNAfZu/U78l7OBM4AkJvqurl9aLDVXn5M5JfOTMsUQGlHJLEJ4EGZ5DP7EwN
AXQhnqe7OLd3HWGCRbGUTf+eUnbucQbg0/74G1vmqSPaPUIfhA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:15 2023 by rpki-client on console-ams.rpki-client.org