Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/y1fCMVf6pRQPMM62QlPJYJlGXdw.roa
File: y1fCMVf6pRQPMM62QlPJYJlGXdw.roa (raw, json)
Hash identifier: jlBqjI1PdDD0fIOI9m8BHF6ZTEyWhYLsatBrYQmirEY=
Subject key identifier: CB:57:C2:31:57:FA:A5:14:0F:30:CE:B6:42:53:C9:60:99:46:5D:DC
Certificate issuer: /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial: 0F54
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/y1fCMVf6pRQPMM62QlPJYJlGXdw.roa
Signing time: Tue 07 Jun 2022 02:11:08 +0000
ROA not before: Tue 07 Jun 2022 02:11:08 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 139139
IP address blocks: 103.152.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3924 (0xf54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
Validity
Not Before: Jun 7 02:11:08 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=CB57C23157FAA5140F30CEB64253C96099465DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:88:d8:a2:79:c8:db:e3:1f:e2:6c:ae:3f:
a0:3f:a9:97:d6:cb:68:e3:ea:f1:b4:6d:40:83:24:
6a:92:fb:41:d4:5f:c2:44:c5:08:6d:da:98:ea:2f:
9e:ea:45:01:d7:c4:ca:d4:4c:4f:0a:e0:48:c3:e2:
c0:57:06:75:b8:26:8b:c7:2b:e9:38:b8:75:0b:c5:
86:e7:c0:5b:93:a3:14:f1:c6:a8:f8:5d:bb:50:e4:
f0:21:75:d0:87:07:d3:26:ea:96:cc:a8:c0:92:13:
f6:b9:7f:93:4a:b6:86:6d:94:87:40:42:18:32:0e:
33:37:3a:1c:4f:d0:45:0a:ce:91:7f:6a:0e:6b:c4:
d4:1f:3f:93:2e:d0:a8:c9:90:97:1c:6b:e5:d3:eb:
be:b3:49:6c:82:f0:1c:f4:9f:a1:df:2b:be:c1:31:
53:5b:8d:0e:d1:2e:c5:92:1b:b5:f5:cd:bf:87:f4:
ee:d0:c4:86:3a:af:11:c9:42:28:ef:7b:0e:e4:44:
45:dd:b7:21:bc:e5:73:7b:2a:00:e1:41:fa:a9:67:
db:26:4d:fc:00:43:af:e2:62:7f:aa:63:fc:5a:8d:
79:ff:98:f0:36:57:d8:ec:19:31:1f:2b:99:bb:ab:
16:1d:b6:f2:de:32:bc:33:7f:e2:23:c0:c0:2a:e1:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:57:C2:31:57:FA:A5:14:0F:30:CE:B6:42:53:C9:60:99:46:5D:DC
X509v3 Authority Key Identifier:
keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/y1fCMVf6pRQPMM62QlPJYJlGXdw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.186.0/23
Signature Algorithm: sha256WithRSAEncryption
26:1f:a5:68:6c:b2:82:af:bb:c2:32:5f:1b:0c:69:e3:d2:6b:
a6:37:dd:6e:9e:d2:e3:1c:5c:59:b9:4b:66:35:e0:42:f7:60:
c9:c3:0b:fe:b2:8e:a2:f1:11:0f:2f:dd:00:72:65:7a:f4:ff:
42:7e:02:db:98:ca:67:3a:aa:44:aa:94:ea:92:27:12:9a:47:
6f:8f:a2:62:ac:1f:8b:ef:ef:da:81:b0:45:dc:44:97:2b:2b:
0a:60:f5:21:47:08:ce:d1:60:ef:eb:20:80:58:3a:a0:0f:ba:
bb:c9:8b:0b:57:99:19:29:25:b9:7c:8a:02:b1:77:a6:cc:c5:
45:3c:1a:a0:9d:f5:7d:4a:ac:24:64:ed:66:68:df:b9:d6:f6:
6d:45:2c:5c:56:27:d3:03:16:eb:55:6c:39:6c:e6:b9:7f:0b:
2c:55:74:1d:19:ce:f5:36:a9:8e:cf:21:af:3a:9e:a8:3e:db:
0e:8a:ce:fc:10:bd:4f:60:34:76:5f:11:dc:36:1a:01:b0:cc:
59:53:35:7b:1b:63:b2:77:5f:95:9a:d1:a8:b5:32:d6:83:5c:
75:64:37:32:1b:31:7c:87:09:e2:41:d6:28:1d:c2:89:76:a4:
56:09:3d:db:d4:8c:74:3c:63:67:21:f5:ee:2f:04:4c:3d:18:
59:21:7b:0f
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICD1QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEy
RDQzMTdCQ0ExNjYwRjg4MDY2Rjg5MEY4QzA0QUY1NTcwMDBDQjAeFw0yMjA2MDcw
MjExMDhaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKENCNTdDMjMxNTdGQUE1
MTQwRjMwQ0VCNjQyNTNDOTYwOTk0NjVEREMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC244jYonnI2+Mf4myuP6A/qZfWy2jj6vG0bUCDJGqS+0HUX8JE
xQht2pjqL57qRQHXxMrUTE8K4EjD4sBXBnW4JovHK+k4uHULxYbnwFuToxTxxqj4
XbtQ5PAhddCHB9Mm6pbMqMCSE/a5f5NKtoZtlIdAQhgyDjM3OhxP0EUKzpF/ag5r
xNQfP5Mu0KjJkJcca+XT676zSWyC8Bz0n6HfK77BMVNbjQ7RLsWSG7X1zb+H9O7Q
xIY6rxHJQijvew7kREXdtyG85XN7KgDhQfqpZ9smTfwAQ6/iYn+qY/xajXn/mPA2
V9jsGTEfK5m7qxYdtvLeMrwzf+IjwMAq4eG3AgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUy1fCMVf6pRQPMM62QlPJYJlGXdwwHwYDVR0jBBgwFoAUAS1DF7yhZg+IBm+J
D4wEr1VwAMswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjk4
OC9BUzFERjd5aFpnLUlCbS1KRDR3RXIxVndBTXMuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0FTMURGN3loWmctSUJtLUpENHdFcjFWd0FNcy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI5ODgveTFmQ01WZjZwUlFQ
TU02MlFsUEpZSmxHWGR3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWeYujANBgkqhkiG9w0BAQsFAAOCAQEAJh+laGyygq+7wjJfGwxp49Jrpjfd
bp7S4xxcWblLZjXgQvdgycML/rKOovERDy/dAHJlevT/Qn4C25jKZzqqRKqU6pIn
EppHb4+iYqwfi+/v2oGwRdxElysrCmD1IUcIztFg7+sggFg6oA+6u8mLC1eZGSkl
uXyKArF3pszFRTwaoJ31fUqsJGTtZmjfudb2bUUsXFYn0wMW61VsOWzmuX8LLFV0
HRnO9Tapjs8hrzqeqD7bDorO/BC9T2A0dl8R3DYaAbDMWVM1extjsndflZrRqLUy
1oNcdWQ3MhsxfIcJ4kHWKB3CiXakVgk929SMdDxjZyH17i8ETD0YWSF7Dw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org