Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2728/-nHwrmBBl86VaMzJ7cn86y-I2L0.roa
File: -nHwrmBBl86VaMzJ7cn86y-I2L0.roa (raw, json)
Hash identifier: G7jF9lUrcbFJPjrnI8TAU8pW8P+q32NMpgSSs1/38gM=
Subject key identifier: FA:71:F0:AE:60:41:97:CE:95:68:CC:C9:ED:C9:FC:EB:2F:88:D8:BD
Certificate issuer: /CN=B9931A92F6261C82E683DA2AE4FB77D59ADD29B9
Certificate serial: 06C1
Authority key identifier: B9:93:1A:92:F6:26:1C:82:E6:83:DA:2A:E4:FB:77:D5:9A:DD:29:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/uZMakvYmHILmg9oq5Pt31ZrdKbk.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/-nHwrmBBl86VaMzJ7cn86y-I2L0.roa
Signing time: Wed 09 Jun 2021 06:59:28 +0000
ROA not before: Wed 09 Jun 2021 06:59:28 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 134823
IP address blocks: 103.115.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1729 (0x6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9931A92F6261C82E683DA2AE4FB77D59ADD29B9
Validity
Not Before: Jun 9 06:59:28 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=FA71F0AE604197CE9568CCC9EDC9FCEB2F88D8BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:26:25:d7:bc:0b:10:99:4c:f6:2e:07:81:
0f:a1:07:ac:d8:f8:b7:e9:bd:3d:67:fa:d6:34:1f:
5f:aa:a0:ba:bd:2d:d4:64:27:9e:ec:7a:84:fb:ae:
99:eb:3f:3a:06:e3:a4:ec:04:99:06:b0:8c:c5:4d:
06:6c:0f:5a:c7:89:98:61:ee:71:1e:23:55:f6:f2:
d9:ae:e8:be:d4:3c:e4:8e:95:48:5c:48:11:18:47:
8c:1b:12:f2:27:2a:41:c8:44:46:ae:b0:c9:59:51:
91:27:5b:49:dd:96:a4:ea:e1:9e:03:8a:f7:8c:44:
e9:fa:a1:d6:85:35:4c:f7:8c:58:4d:9a:38:59:e9:
49:17:07:42:5c:17:12:da:39:89:e9:39:5c:8d:57:
9d:74:a5:fb:2c:fb:d7:99:b4:9e:d3:16:e8:31:37:
fc:5e:6e:81:8f:bc:e6:7f:71:9d:c7:8a:5e:f1:5e:
10:e3:e2:71:24:0d:35:91:fc:a1:a5:5c:52:90:45:
c8:f2:70:df:ea:f2:88:8e:a7:d3:c6:69:86:a0:d6:
fc:d1:ac:ec:58:5f:ad:a3:37:f5:a0:ab:f3:c4:e2:
92:ad:73:5d:41:6b:d5:01:32:4a:8f:df:0c:c5:b9:
24:3c:66:98:cb:d5:a8:18:38:a5:6c:94:f9:0e:bf:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:71:F0:AE:60:41:97:CE:95:68:CC:C9:ED:C9:FC:EB:2F:88:D8:BD
X509v3 Authority Key Identifier:
keyid:B9:93:1A:92:F6:26:1C:82:E6:83:DA:2A:E4:FB:77:D5:9A:DD:29:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/uZMakvYmHILmg9oq5Pt31ZrdKbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/uZMakvYmHILmg9oq5Pt31ZrdKbk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2728/-nHwrmBBl86VaMzJ7cn86y-I2L0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.62.0/24
Signature Algorithm: sha256WithRSAEncryption
91:21:06:87:3b:d0:95:5f:a3:6d:20:9c:2a:89:a4:1a:68:96:
b5:30:96:ab:ff:9e:1b:06:6c:a3:83:19:1c:27:71:f5:0f:f4:
bc:0f:02:4b:62:a1:5d:13:f6:b5:df:ff:9f:63:1b:6c:ef:4c:
f3:c3:72:c5:6d:6d:b1:03:06:7c:da:36:7a:d9:03:55:36:38:
30:86:28:5c:22:ef:9e:c3:54:b0:e0:dc:94:7b:58:25:a3:90:
13:2f:3c:82:45:1a:98:a1:9f:bb:ad:75:6b:be:98:91:c6:67:
ed:29:a8:53:38:96:af:07:40:24:5b:b3:50:65:0d:e0:f0:29:
0e:d0:6d:8f:c6:b3:fd:5c:b4:c7:79:d4:d2:5d:a6:3e:fa:1d:
c7:16:c0:41:84:3d:72:4d:d4:14:4a:07:23:26:6d:c2:43:98:
ec:f5:fb:7a:ed:40:8f:17:be:9c:56:4a:8d:22:ec:71:2e:96:
a0:ff:d8:b4:48:b9:5a:12:96:be:4d:8d:bb:64:6c:bd:2a:5d:
8f:1b:ad:22:6d:b9:88:a4:8a:fe:51:be:dc:41:bf:7e:42:6a:
21:ec:44:b8:dc:1b:7e:09:07:07:88:44:d8:49:89:da:be:28:
ac:87:82:ce:26:7a:d5:93:74:66:4a:27:5b:0c:21:7e:0b:19:
e2:67:77:51
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjk5
MzFBOTJGNjI2MUM4MkU2ODNEQTJBRTRGQjc3RDU5QUREMjlCOTAeFw0yMTA2MDkw
NjU5MjhaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEZBNzFGMEFFNjA0MTk3
Q0U5NTY4Q0NDOUVEQzlGQ0VCMkY4OEQ4QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPDSYl17wLEJlM9i4HgQ+hB6zY+LfpvT1n+tY0H1+qoLq9LdRk
J57seoT7rpnrPzoG46TsBJkGsIzFTQZsD1rHiZhh7nEeI1X28tmu6L7UPOSOlUhc
SBEYR4wbEvInKkHIREausMlZUZEnW0ndlqTq4Z4DiveMROn6odaFNUz3jFhNmjhZ
6UkXB0JcFxLaOYnpOVyNV510pfss+9eZtJ7TFugxN/xeboGPvOZ/cZ3Hil7xXhDj
4nEkDTWR/KGlXFKQRcjycN/q8oiOp9PGaYag1vzRrOxYX62jN/Wgq/PE4pKtc11B
a9UBMkqP3wzFuSQ8ZpjL1agYOKVslPkOvxeJAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU+nHwrmBBl86VaMzJ7cn86y+I2L0wHwYDVR0jBBgwFoAUuZMakvYmHILmg9oq
5Pt31ZrdKbkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjcy
OC91Wk1ha3ZZbUhJTG1nOW9xNVB0MzFacmRLYmsuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3VaTWFrdlltSElMbWc5b3E1UHQzMVpyZEtiay5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3MjgvLW5Id3JtQkJsODZW
YU16Sjdjbjg2eS1JMkwwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdzPjANBgkqhkiG9w0BAQsFAAOCAQEAkSEGhzvQlV+jbSCcKomkGmiWtTCW
q/+eGwZso4MZHCdx9Q/0vA8CS2KhXRP2td//n2MbbO9M88NyxW1tsQMGfNo2etkD
VTY4MIYoXCLvnsNUsODclHtYJaOQEy88gkUamKGfu611a76YkcZn7SmoUziWrwdA
JFuzUGUN4PApDtBtj8az/Vy0x3nU0l2mPvodxxbAQYQ9ck3UFEoHIyZtwkOY7PX7
eu1Ajxe+nFZKjSLscS6WoP/YtEi5WhKWvk2Nu2RsvSpdjxutIm25iKSK/lG+3EG/
fkJqIexEuNwbfgkHB4hE2EmJ2r4orIeCziZ61ZN0ZkonWwwhfgsZ4md3UQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org