Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2793/Qi1j6pwELQMkiTdCA_tphnMLLW8.roa
File: Qi1j6pwELQMkiTdCA_tphnMLLW8.roa (raw, json)
Hash identifier: Urv7tiLB3eQDLQxl+sqrFDTT8RmUltNMIeCV8b1wgs8=
Subject key identifier: 42:2D:63:EA:9C:04:2D:03:24:89:37:42:03:FB:69:86:73:0B:2D:6F
Certificate issuer: /CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Certificate serial: 0946
Authority key identifier: D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/Qi1j6pwELQMkiTdCA_tphnMLLW8.roa
Signing time: Tue 07 Jun 2022 02:10:56 +0000
ROA not before: Tue 07 Jun 2022 02:10:56 +0000
ROA not after: Tue 06 Jun 2023 02:47:58 +0000
asID: 38344
IP address blocks: 103.9.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374 (0x946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6C5C18CCE6030730BC222AB17F4E3D8F1603033
Validity
Not Before: Jun 7 02:10:56 2022 GMT
Not After : Jun 6 02:47:58 2023 GMT
Subject: CN=422D63EA9C042D032489374203FB6986730B2D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dd:b6:51:b9:9d:26:84:9d:71:21:5b:c1:ae:
08:66:b1:15:bd:32:0a:b4:32:6f:77:ef:b7:8b:ae:
66:bc:4f:20:25:01:b8:53:f6:04:58:29:80:9e:fd:
78:ae:9c:c5:fd:8d:83:36:3b:d2:2b:85:66:d8:19:
76:bd:f8:83:70:da:56:19:9b:25:1d:45:08:a2:ca:
38:47:e9:46:c2:a1:1b:b9:6c:13:ac:38:72:1c:4c:
ce:40:16:38:2a:d1:ce:c8:bd:59:ab:56:ba:77:fa:
45:39:0f:bd:60:0f:9d:61:a6:34:12:4b:b6:e3:4d:
84:62:b8:1f:16:cf:ec:5f:69:5b:d4:3e:d6:d4:6d:
bd:56:f7:0c:ae:62:9d:e9:fa:3c:20:55:14:92:09:
bd:11:60:87:f4:b3:7d:6d:7b:20:fc:e5:1b:10:ee:
d2:3b:ae:ac:5e:70:f1:d4:52:9f:cc:de:de:c6:a2:
9e:e7:8b:57:9f:b3:02:8e:a3:f0:d5:b2:32:86:71:
ed:30:df:b3:83:dd:6a:ac:22:82:81:37:a8:7f:97:
8a:9a:dc:8e:f2:32:57:a7:f1:85:75:c6:c0:79:93:
12:91:ce:7a:f6:ab:c6:eb:4b:aa:f4:a0:b9:31:16:
e7:9f:32:8b:0b:ed:d4:11:c6:69:72:6e:3d:69:34:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:63:EA:9C:04:2D:03:24:89:37:42:03:FB:69:86:73:0B:2D:6F
X509v3 Authority Key Identifier:
keyid:D6:C5:C1:8C:CE:60:30:73:0B:C2:22:AB:17:F4:E3:D8:F1:60:30:33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1sXBjM5gMHMLwiKrF_Tj2PFgMDM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/Qi1j6pwELQMkiTdCA_tphnMLLW8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:81:de:f1:30:0a:6a:dd:6b:6d:b7:1e:f7:1c:7e:bb:c7:42:
41:51:84:36:6b:4f:fb:33:95:5f:e9:d6:3f:48:66:b6:5f:a5:
af:9c:83:95:09:f3:5c:94:3d:fa:9e:07:61:95:44:9c:b5:8f:
bb:65:ce:ba:ca:75:bd:b6:d3:31:74:d2:e3:71:af:01:7d:f1:
03:96:be:df:57:c0:ce:09:e8:90:8f:f5:01:83:f2:b9:c1:6b:
82:00:31:44:eb:7e:14:6d:3e:87:2e:39:12:d3:11:8c:92:bc:
31:2c:bb:87:25:8d:ae:15:06:ae:40:a6:af:31:e1:db:72:af:
9c:e8:1b:30:6c:d8:d9:7b:18:cc:93:a8:a4:30:9a:d2:2b:64:
36:28:4a:0b:fb:e6:8a:25:bf:d5:99:04:95:b2:27:66:47:25:
42:33:2b:e7:ad:d8:d2:fa:ce:d8:35:12:a6:a1:18:ea:71:4e:
a7:e6:b3:2c:ba:0e:c2:8b:1c:ed:1d:36:40:38:e2:7f:de:9f:
d2:b7:7d:9a:fd:03:02:76:f7:b1:38:f5:74:4b:83:81:f7:5a:
56:c8:5a:b8:31:3d:30:35:f2:00:ba:5a:0f:ee:5e:9b:78:1e:
f6:1c:7c:6f:82:7e:92:3f:13:ea:4a:80:dc:85:8d:cf:bf:57:
7a:d0:e9:d1
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDZD
NUMxOENDRTYwMzA3MzBCQzIyMkFCMTdGNEUzRDhGMTYwMzAzMzAeFw0yMjA2MDcw
MjEwNTZaFw0yMzA2MDYwMjQ3NThaMDMxMTAvBgNVBAMTKDQyMkQ2M0VBOUMwNDJE
MDMyNDg5Mzc0MjAzRkI2OTg2NzMwQjJENkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDt3bZRuZ0mhJ1xIVvBrghmsRW9Mgq0Mm9377eLrma8TyAlAbhT
9gRYKYCe/XiunMX9jYM2O9IrhWbYGXa9+INw2lYZmyUdRQiiyjhH6UbCoRu5bBOs
OHIcTM5AFjgq0c7IvVmrVrp3+kU5D71gD51hpjQSS7bjTYRiuB8Wz+xfaVvUPtbU
bb1W9wyuYp3p+jwgVRSSCb0RYIf0s31teyD85RsQ7tI7rqxecPHUUp/M3t7Gop7n
i1efswKOo/DVsjKGce0w37OD3WqsIoKBN6h/l4qa3I7yMlen8YV1xsB5kxKRznr2
q8brS6r0oLkxFuefMosL7dQRxmlybj1pNNXPAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUQi1j6pwELQMkiTdCA/tphnMLLW8wHwYDVR0jBBgwFoAU1sXBjM5gMHMLwiKr
F/Tj2PFgMDMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc5
My8xc1hCak01Z01ITUx3aUtyRl9UajJQRmdNRE0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzFzWEJqTTVnTUhNTHdpS3JGX1RqMlBGZ01ETS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3OTMvUWkxajZwd0VMUU1r
aVRkQ0FfdHBobk1MTFc4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGcJmDANBgkqhkiG9w0BAQsFAAOCAQEACoHe8TAKat1rbbce9xx+u8dCQVGE
NmtP+zOVX+nWP0hmtl+lr5yDlQnzXJQ9+p4HYZVEnLWPu2XOusp1vbbTMXTS43Gv
AX3xA5a+31fAzgnokI/1AYPyucFrggAxROt+FG0+hy45EtMRjJK8MSy7hyWNrhUG
rkCmrzHh23KvnOgbMGzY2XsYzJOopDCa0itkNihKC/vmiiW/1ZkElbInZkclQjMr
563Y0vrO2DUSpqEY6nFOp+azLLoOwosc7R02QDjif96f0rd9mv0DAnb3sTj1dEuD
gfdaVshauDE9MDXyALpaD+5em3ge9hx8b4J+kj8T6kqA3IWNz79XetDp0Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org