Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2834/1Lwx7l_01k_t0tJWyeW8MTwJcfY.roa
File: 1Lwx7l_01k_t0tJWyeW8MTwJcfY.roa (raw, json)
Hash identifier: FqRGkn68t9uwvEn0k2jpfABuQZMIUWsPskayR5Rnz+c=
Subject key identifier: D4:BC:31:EE:5F:F4:D6:4F:ED:D2:D2:56:C9:E5:BC:31:3C:09:71:F6
Certificate issuer: /CN=81B493ACCB42998BFF000B3DE106FB5771A48D5A
Certificate serial: 168A
Authority key identifier: 81:B4:93:AC:CB:42:99:8B:FF:00:0B:3D:E1:06:FB:57:71:A4:8D:5A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gbSTrMtCmYv_AAs94Qb7V3GkjVo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/1Lwx7l_01k_t0tJWyeW8MTwJcfY.roa
Signing time: Fri 24 May 2024 02:24:02 +0000
ROA not before: Fri 24 May 2024 02:24:02 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 21859
IP address blocks: 103.125.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5770 (0x168a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81B493ACCB42998BFF000B3DE106FB5771A48D5A
Validity
Not Before: May 24 02:24:02 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D4BC31EE5FF4D64FEDD2D256C9E5BC313C0971F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:0e:eb:e8:28:4f:5c:a5:11:53:40:91:1d:
73:8c:04:aa:ff:da:64:cd:6e:ef:4e:b2:2b:95:b4:
db:81:4e:ad:a6:b8:76:d4:ae:b5:f6:f5:7c:99:8a:
41:3f:a5:8d:8c:4e:5e:2f:a9:dc:96:42:a7:ad:32:
ae:b5:49:62:60:c9:72:d5:8b:83:30:71:10:70:ed:
7f:90:23:5a:2f:75:9f:85:d2:79:f8:30:6d:c7:9b:
0b:4e:fa:e2:c4:93:96:58:ab:b5:b2:8e:40:c2:ed:
78:77:58:ef:3c:be:3c:75:08:ba:fd:f8:f6:ee:3f:
b1:78:17:3d:c0:7e:81:20:c9:b2:18:42:2b:91:45:
59:f9:b9:cf:40:e2:d3:33:41:ae:fc:bc:3a:2b:99:
4b:63:61:66:30:42:29:b8:82:5e:b1:6d:bc:c6:3a:
08:e2:fc:13:21:6c:5c:37:2c:e3:cc:f5:b3:cf:92:
e5:66:93:ef:d6:ff:fd:ce:f2:67:a8:60:c1:1f:36:
2b:ed:e3:5f:0c:1c:d7:1f:e9:e8:92:b7:8b:27:09:
54:1b:9b:10:63:41:ee:4a:eb:fe:df:45:8e:97:45:
71:6a:5b:10:3a:f7:09:fd:da:c4:19:03:e1:7d:a0:
91:bc:06:72:f0:5a:67:77:b8:92:02:59:b7:72:5d:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BC:31:EE:5F:F4:D6:4F:ED:D2:D2:56:C9:E5:BC:31:3C:09:71:F6
X509v3 Authority Key Identifier:
keyid:81:B4:93:AC:CB:42:99:8B:FF:00:0B:3D:E1:06:FB:57:71:A4:8D:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/gbSTrMtCmYv_AAs94Qb7V3GkjVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gbSTrMtCmYv_AAs94Qb7V3GkjVo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2834/1Lwx7l_01k_t0tJWyeW8MTwJcfY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.250.0/24
Signature Algorithm: sha256WithRSAEncryption
46:86:65:76:55:8d:ed:94:5c:a6:2b:86:2f:3f:83:d6:b4:8b:
03:90:dc:15:bf:36:09:c5:02:89:da:b1:98:df:f0:7a:64:75:
b1:9b:94:3e:22:4d:a2:ea:31:f1:f5:62:1a:af:ae:bb:29:58:
af:00:e6:7c:bd:cb:10:51:cf:ea:6e:51:b1:7a:8e:2b:82:19:
64:62:63:4c:cc:8d:78:e8:83:89:94:0a:01:68:21:55:4c:c5:
bc:d7:5e:6f:53:b4:8a:bb:07:d6:47:e9:8f:82:08:4d:4b:f2:
24:98:6b:62:e0:c5:50:6e:7a:f5:43:9e:52:e6:de:5e:88:db:
f4:6e:97:f8:02:ad:ce:6a:fc:50:a3:dc:8e:e8:d3:d0:d4:f6:
fa:a3:ee:eb:04:12:d8:c6:dd:94:42:54:5d:54:f5:53:b3:d5:
34:f2:0f:77:07:0e:40:fe:10:90:bb:a9:f8:7c:6d:11:af:01:
40:7e:5e:51:93:98:ec:e9:f5:8e:55:6f:7f:c3:b3:53:72:3a:
b0:bc:53:70:a9:f6:6a:7b:3f:19:5c:91:55:67:f6:a7:96:a4:
4b:ed:ea:89:f1:1f:d6:e5:86:6b:6f:ee:17:75:09:59:b7:99:
73:a4:93:fe:a0:ad:ae:b7:de:7b:f9:7a:36:02:bf:5b:da:f4:
e9:d5:1a:b6
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICFoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODFC
NDkzQUNDQjQyOTk4QkZGMDAwQjNERTEwNkZCNTc3MUE0OEQ1QTAeFw0yNDA1MjQw
MjI0MDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQ0QkMzMUVFNUZGNEQ2
NEZFREQyRDI1NkM5RTVCQzMxM0MwOTcxRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXPg7r6ChPXKURU0CRHXOMBKr/2mTNbu9OsiuVtNuBTq2muHbU
rrX29XyZikE/pY2MTl4vqdyWQqetMq61SWJgyXLVi4MwcRBw7X+QI1ovdZ+F0nn4
MG3HmwtO+uLEk5ZYq7WyjkDC7Xh3WO88vjx1CLr9+PbuP7F4Fz3AfoEgybIYQiuR
RVn5uc9A4tMzQa78vDormUtjYWYwQim4gl6xbbzGOgji/BMhbFw3LOPM9bPPkuVm
k+/W//3O8meoYMEfNivt418MHNcf6eiSt4snCVQbmxBjQe5K6/7fRY6XRXFqWxA6
9wn92sQZA+F9oJG8BnLwWmd3uJICWbdyXZJzAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU1Lwx7l/01k/t0tJWyeW8MTwJcfYwHwYDVR0jBBgwFoAUgbSTrMtCmYv/AAs9
4Qb7V3GkjVowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgz
NC9nYlNUck10Q21Zdl9BQXM5NFFiN1YzR2tqVm8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2diU1RyTXRDbVl2X0FBczk0UWI3VjNHa2pWby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI4MzQvMUx3eDdsXzAxa190
MHRKV3llVzhNVHdKY2ZZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGd9+jANBgkqhkiG9w0BAQsFAAOCAQEARoZldlWN7ZRcpiuGLz+D1rSLA5Dc
Fb82CcUCidqxmN/wemR1sZuUPiJNouox8fViGq+uuylYrwDmfL3LEFHP6m5RsXqO
K4IZZGJjTMyNeOiDiZQKAWghVUzFvNdeb1O0irsH1kfpj4IITUvyJJhrYuDFUG56
9UOeUubeXojb9G6X+AKtzmr8UKPcjujT0NT2+qPu6wQS2MbdlEJUXVT1U7PVNPIP
dwcOQP4QkLup+HxtEa8BQH5eUZOY7On1jlVvf8OzU3I6sLxTcKn2ans/GVyRVWf2
p5akS+3qifEf1uWGa2/uF3UJWbeZc6ST/qCtrrfee/l6NgK/W9r06dUatg==
-----END CERTIFICATE-----
Generated at Mon Nov 4 05:26:13 2024 by rpki-client on console-fra.rpki-client.org