Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/bDYshM_JkVOGvyLw1zmhP2UJ4bk.roa
File: bDYshM_JkVOGvyLw1zmhP2UJ4bk.roa (raw, json)
Hash identifier: bXSU41T8j0MZmzT1gmQ++cHngFNdI7xuanh1m3eNh+8=
Subject key identifier: 6C:36:2C:84:CF:C9:91:53:86:BF:22:F0:D7:39:A1:3F:65:09:E1:B9
Certificate issuer: /CN=48ABAC2882B59E07AFEED3279C14F89E8093187A
Certificate serial: 06C9
Authority key identifier: 48:AB:AC:28:82:B5:9E:07:AF:EE:D3:27:9C:14:F8:9E:80:93:18:7A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SKusKIK1ngev7tMnnBT4noCTGHo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/bDYshM_JkVOGvyLw1zmhP2UJ4bk.roa
Signing time: Thu 01 Jul 2021 06:35:40 +0000
ROA not before: Thu 01 Jul 2021 06:35:40 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139139
IP address blocks: 103.152.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ABAC2882B59E07AFEED3279C14F89E8093187A
Validity
Not Before: Jul 1 06:35:40 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=6C362C84CFC9915386BF22F0D739A13F6509E1B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:75:96:e3:6e:e2:8b:30:41:02:86:8d:fe:
8d:fa:eb:b2:d0:a2:54:cd:7e:e9:d5:d5:e1:9e:51:
fe:8a:45:aa:59:83:fc:1a:7e:39:c5:3c:b2:e2:43:
59:cf:b5:e8:4c:d2:ed:a9:1c:3b:ed:fc:5c:9e:41:
5c:69:8a:ee:5b:00:61:a5:6f:8f:03:12:c8:fe:a9:
9a:76:21:03:1d:b0:d8:21:91:f8:e8:d1:cd:d1:5a:
35:e4:e5:4c:be:ed:96:72:32:41:6e:bd:98:a9:5a:
37:2b:d9:fe:5d:b5:2a:58:4d:26:c6:07:bb:d6:90:
ab:97:f1:7f:bc:52:ca:ae:06:fd:c7:5b:c5:9f:2a:
34:1b:c6:97:03:4a:20:70:84:6a:24:3c:bc:ec:5f:
8d:71:69:b7:47:70:70:ef:20:db:1c:76:fb:5a:05:
80:d5:57:44:9e:fa:6c:4c:9b:b1:5a:a6:69:ab:8e:
91:c5:54:d3:71:ff:6b:70:b2:16:02:e6:c3:40:3d:
c4:cb:93:35:0e:ae:42:b0:85:9d:aa:cc:d1:95:62:
bb:56:d0:f6:92:eb:7c:73:7d:59:df:ba:32:5e:bc:
19:aa:e1:7f:1e:2b:e5:45:44:56:3a:53:8e:93:f9:
c2:c1:be:55:58:e9:9f:0c:07:1f:98:37:c1:3a:ac:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:2C:84:CF:C9:91:53:86:BF:22:F0:D7:39:A1:3F:65:09:E1:B9
X509v3 Authority Key Identifier:
keyid:48:AB:AC:28:82:B5:9E:07:AF:EE:D3:27:9C:14:F8:9E:80:93:18:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/SKusKIK1ngev7tMnnBT4noCTGHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/SKusKIK1ngev7tMnnBT4noCTGHo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/bDYshM_JkVOGvyLw1zmhP2UJ4bk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.186.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:55:f5:d2:37:31:28:dd:76:2a:66:c7:ac:99:b0:63:2a:ab:
e9:43:c2:88:fc:18:3b:53:3f:ef:a9:b7:bd:fb:83:c3:68:ad:
b3:74:b7:79:58:ac:87:64:d1:a8:b1:7a:af:2e:fb:a0:63:a7:
3a:b7:15:c8:4c:51:40:d2:bb:e0:25:1c:cb:61:38:d8:70:f0:
92:b1:3e:fc:3e:87:12:54:50:49:5d:a9:6f:07:a1:f0:b3:0f:
64:3f:16:28:61:83:d4:96:73:5a:9e:c7:6a:dc:92:f2:57:eb:
57:ab:96:04:01:67:c6:36:ce:6c:91:0a:ed:61:22:fb:0c:3f:
0e:51:7a:95:04:be:93:20:29:0e:e4:b0:27:d0:b8:c2:28:8b:
82:2b:12:b1:aa:47:c6:2a:15:14:aa:39:c0:de:13:0c:12:10:
7a:2c:f5:7b:f7:b5:2a:fd:12:44:77:e3:a4:3a:ae:1a:f2:e3:
b9:9b:22:94:2a:26:e1:39:82:d4:b7:92:ee:cf:c9:d2:94:c0:
c2:de:61:58:be:cf:cb:9c:48:2a:66:5a:a8:48:6f:a3:37:a5:
09:61:4d:f3:68:e7:17:f3:2d:e2:26:c4:5a:1a:c4:ee:6a:2c:
80:90:72:39:4f:2b:8d:46:c3:a9:c0:7c:73:7b:d8:70:58:98:
c7:b4:86:75
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDhB
QkFDMjg4MkI1OUUwN0FGRUVEMzI3OUMxNEY4OUU4MDkzMTg3QTAeFw0yMTA3MDEw
NjM1NDBaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDZDMzYyQzg0Q0ZDOTkx
NTM4NkJGMjJGMEQ3MzlBMTNGNjUwOUUxQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLwnWW427iizBBAoaN/o3667LQolTNfunV1eGeUf6KRapZg/wa
fjnFPLLiQ1nPtehM0u2pHDvt/FyeQVxpiu5bAGGlb48DEsj+qZp2IQMdsNghkfjo
0c3RWjXk5Uy+7ZZyMkFuvZipWjcr2f5dtSpYTSbGB7vWkKuX8X+8UsquBv3HW8Wf
KjQbxpcDSiBwhGokPLzsX41xabdHcHDvINscdvtaBYDVV0Se+mxMm7FapmmrjpHF
VNNx/2twshYC5sNAPcTLkzUOrkKwhZ2qzNGVYrtW0PaS63xzfVnfujJevBmq4X8e
K+VFRFY6U46T+cLBvlVY6Z8MBx+YN8E6rAj5AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUbDYshM/JkVOGvyLw1zmhP2UJ4bkwHwYDVR0jBBgwFoAUSKusKIK1ngev7tMn
nBT4noCTGHowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4
OC9TS3VzS0lLMW5nZXY3dE1ubkJUNG5vQ1RHSG8uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL1NLdXNLSUsxbmdldjd0TW5uQlQ0bm9DVEdIby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgvYkRZc2hNX0prVk9H
dnlMdzF6bWhQMlVKNGJrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWeYujANBgkqhkiG9w0BAQsFAAOCAQEAx1X10jcxKN12KmbHrJmwYyqr6UPC
iPwYO1M/76m3vfuDw2its3S3eVish2TRqLF6ry77oGOnOrcVyExRQNK74CUcy2E4
2HDwkrE+/D6HElRQSV2pbweh8LMPZD8WKGGD1JZzWp7HatyS8lfrV6uWBAFnxjbO
bJEK7WEi+ww/DlF6lQS+kyApDuSwJ9C4wiiLgisSsapHxioVFKo5wN4TDBIQeiz1
e/e1Kv0SRHfjpDquGvLjuZsilCom4TmC1LeS7s/J0pTAwt5hWL7Py5xIKmZaqEhv
ozelCWFN82jnF/Mt4ibEWhrE7mosgJByOU8rjUbDqcB8c3vYcFiYx7SGdQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org