Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/kQZ75xcb-_ceALhqb7WcCZ67th8.roa
File: kQZ75xcb-_ceALhqb7WcCZ67th8.roa (raw, json)
Hash identifier: BbdOaSvxUTgip+cpEoJHZ2dWK4AdoRmEzbe5j12dhxE=
Subject key identifier: 91:06:7B:E7:17:1B:FB:F7:1E:00:B8:6A:6F:B5:9C:09:9E:BB:B6:1F
Certificate issuer: /CN=0CEC5F4EB68CBD2CBF8B36793A1565B58664FEB6
Certificate serial: 042F
Authority key identifier: 0C:EC:5F:4E:B6:8C:BD:2C:BF:8B:36:79:3A:15:65:B5:86:64:FE:B6
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DOxfTraMvSy_izZ5OhVltYZk_rY.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/kQZ75xcb-_ceALhqb7WcCZ67th8.roa
Signing time: Wed 14 Jul 2021 02:15:05 +0000
ROA not before: Wed 14 Jul 2021 02:15:05 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 17964
IP address blocks: 60.194.0.0/15 maxlen: 24
60.194.0.0/16 maxlen: 24
60.194.0.0/17 maxlen: 24
60.195.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1071 (0x42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CEC5F4EB68CBD2CBF8B36793A1565B58664FEB6
Validity
Not Before: Jul 14 02:15:05 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=91067BE7171BFBF71E00B86A6FB59C099EBBB61F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:96:46:09:c2:55:64:1d:d6:de:0e:79:e0:30:
16:32:a0:c5:59:96:55:df:46:0b:1c:9f:78:e0:2e:
54:fe:e8:66:67:65:98:0b:c0:f8:5b:98:e7:77:2c:
f9:2a:53:ea:12:6c:f6:6d:f7:42:da:3b:6f:e9:68:
2f:11:f4:be:fd:39:7c:4a:f0:dc:96:d9:eb:3a:a7:
6f:67:19:a1:88:b6:84:a3:cf:f6:d3:54:47:0e:0d:
6c:57:f5:b8:b1:b8:a8:ff:1c:0e:80:7a:29:f2:3a:
bc:52:ed:48:cf:2f:a2:81:0a:11:62:66:a2:3b:50:
82:55:9c:71:00:f9:68:6c:44:bb:d8:b8:4c:1c:08:
0f:62:bb:e5:7b:01:07:65:18:b7:c3:2b:a6:2a:93:
e1:4d:03:34:d1:1d:b1:bb:1a:50:2b:6c:f1:fc:1c:
79:5f:40:f3:1b:f3:03:46:b0:d3:32:90:d4:62:d4:
be:3d:45:c4:9f:67:37:98:2f:0c:f6:3d:33:70:c1:
bc:59:21:6a:e6:31:c8:a1:65:3d:04:ee:ea:b2:19:
e4:e8:b2:44:6a:c9:ae:af:53:39:ac:d6:d9:3e:d1:
33:c2:80:af:a8:d0:8b:fa:65:73:90:04:6a:28:7c:
df:f3:8d:63:94:42:90:95:fc:9c:24:97:ee:62:d3:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:06:7B:E7:17:1B:FB:F7:1E:00:B8:6A:6F:B5:9C:09:9E:BB:B6:1F
X509v3 Authority Key Identifier:
keyid:0C:EC:5F:4E:B6:8C:BD:2C:BF:8B:36:79:3A:15:65:B5:86:64:FE:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/DOxfTraMvSy_izZ5OhVltYZk_rY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DOxfTraMvSy_izZ5OhVltYZk_rY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/kQZ75xcb-_ceALhqb7WcCZ67th8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.194.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0d:89:80:f5:5d:b7:04:d9:9b:26:2e:29:c8:9e:23:ed:c1:58:
8c:20:70:ac:c4:39:24:1d:15:9c:49:5d:5f:4f:84:d3:3b:72:
ae:0b:3b:a3:0c:da:07:8e:41:05:dc:b2:07:7c:a0:c7:a0:27:
f7:d6:b0:4c:61:d3:01:23:c3:17:7b:f7:57:72:d1:63:ca:e6:
d1:0e:8e:a8:01:5d:2a:ca:b9:37:16:3b:c2:b1:23:07:79:94:
6f:46:56:e7:73:9d:21:26:98:24:ff:3f:bf:e2:73:6e:98:f1:
27:e5:3a:f1:9d:96:36:ed:1e:7f:ed:16:84:31:ac:97:9e:8a:
36:0b:8b:8e:44:9c:61:cd:4f:9a:e3:9b:ea:e1:7b:22:41:28:
a7:87:36:db:9d:e0:49:da:ae:2b:26:32:3d:0b:bc:2d:40:7c:
82:15:22:e4:70:cc:8f:a6:36:3b:5f:69:0e:2c:9f:b2:e9:ca:
12:a0:71:9b:71:a1:74:64:c9:a7:29:89:83:22:24:8b:be:7c:
0f:bc:c2:df:97:6c:a7:71:74:5c:c0:b8:2d:b6:d3:ff:f8:b5:
f6:e0:5e:c2:27:3e:3e:aa:14:bf:98:91:f5:ff:ea:4f:8c:e4:
c0:dc:30:bc:71:73:a4:69:0c:a2:07:c0:d5:46:68:e9:72:74:
a4:22:4f:2d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMENF
QzVGNEVCNjhDQkQyQ0JGOEIzNjc5M0ExNTY1QjU4NjY0RkVCNjAeFw0yMTA3MTQw
MjE1MDVaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDkxMDY3QkU3MTcxQkZC
RjcxRTAwQjg2QTZGQjU5QzA5OUVCQkI2MUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDslkYJwlVkHdbeDnngMBYyoMVZllXfRgscn3jgLlT+6GZnZZgL
wPhbmOd3LPkqU+oSbPZt90LaO2/paC8R9L79OXxK8NyW2es6p29nGaGItoSjz/bT
VEcODWxX9bixuKj/HA6AeinyOrxS7UjPL6KBChFiZqI7UIJVnHEA+WhsRLvYuEwc
CA9iu+V7AQdlGLfDK6Yqk+FNAzTRHbG7GlArbPH8HHlfQPMb8wNGsNMykNRi1L49
RcSfZzeYLwz2PTNwwbxZIWrmMcihZT0E7uqyGeToskRqya6vUzms1tk+0TPCgK+o
0Iv6ZXOQBGoofN/zjWOUQpCV/Jwkl+5i0+ERAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkQZ75xcb+/ceALhqb7WcCZ67th8wHwYDVR0jBBgwFoAUDOxfTraMvSy/izZ5
OhVltYZk/rYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcv
RE94ZlRyYU12U3lfaXpaNU9oVmx0WVprX3JZLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9ET3hmVHJhTXZTeV9pelo1T2hWbHRZWmtfclkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNy9rUVo3NXhjYi1fY2VBTGhx
YjdXY0NaNjd0aDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB
PMIwDQYJKoZIhvcNAQELBQADggEBAA2JgPVdtwTZmyYuKcieI+3BWIwgcKzEOSQd
FZxJXV9PhNM7cq4LO6MM2geOQQXcsgd8oMegJ/fWsExh0wEjwxd791dy0WPK5tEO
jqgBXSrKuTcWO8KxIwd5lG9GVudznSEmmCT/P7/ic26Y8SflOvGdljbtHn/tFoQx
rJeeijYLi45EnGHNT5rjm+rheyJBKKeHNtud4EnarismMj0LvC1AfIIVIuRwzI+m
NjtfaQ4sn7LpyhKgcZtxoXRkyacpiYMiJIu+fA+8wt+XbKdxdFzAuC220//4tfbg
XsInPj6qFL+YkfX/6k+M5MDcMLxxc6RpDKIHwNVGaOlydKQiTy0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:15 2023 by rpki-client on console-ams.rpki-client.org