Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/QPPEcZTxIlhFXGDlZGnZUg_FJP8.roa
File: QPPEcZTxIlhFXGDlZGnZUg_FJP8.roa (raw, json)
Hash identifier: oA8P6kb+e3tqpCjZqXiEexTJIiFc1PWKZaYMkz98lR0=
Subject key identifier: 40:F3:C4:71:94:F1:22:58:45:5C:60:E5:64:69:D9:52:0F:C5:24:FF
Certificate issuer: /CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
Certificate serial: 0AAC
Authority key identifier: FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/QPPEcZTxIlhFXGDlZGnZUg_FJP8.roa
Signing time: Tue 07 Jun 2022 02:17:40 +0000
ROA not before: Tue 07 Jun 2022 02:17:40 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 24409
IP address blocks: 111.223.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2732 (0xaac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
Validity
Not Before: Jun 7 02:17:40 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=40F3C47194F12258455C60E56469D9520FC524FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:d9:7a:6b:6d:44:8c:15:1d:53:38:93:ad:
f5:f8:9f:ca:18:f0:e7:6d:f7:d0:47:ca:34:3f:4e:
da:51:6d:08:23:f6:fc:e3:16:65:25:be:e1:92:bf:
52:c2:5b:7b:7b:f1:11:d2:76:48:4c:34:89:c9:fa:
f4:7f:85:f5:8e:1a:4f:92:c5:99:bc:f6:ce:f6:29:
ab:8d:e8:f5:7e:d1:a7:33:e4:93:98:0e:c5:3a:7d:
d4:e4:67:bf:b0:28:65:b4:88:a5:a6:23:24:21:7b:
af:31:5e:f6:ce:50:4f:7f:1c:22:9f:7c:7e:96:a3:
46:3e:57:4c:84:b6:2d:7b:b8:47:16:c0:d7:4f:e5:
3a:53:cd:9e:7e:d0:b7:26:97:ea:b7:3e:b8:a8:70:
de:13:b1:b1:d3:89:1d:62:95:26:41:3c:7b:ab:b0:
39:c6:c0:76:c7:56:75:f5:49:39:54:25:6a:be:85:
0d:65:76:68:ef:c5:9f:d8:74:93:6d:5a:3d:39:b6:
d9:7b:bc:22:8b:9d:fb:30:a5:60:a2:23:d7:56:39:
35:18:9b:c6:85:cf:23:11:2a:02:32:be:fe:ea:68:
27:a7:e3:b7:94:89:6b:64:5f:e6:99:6b:fa:4b:80:
0b:79:28:a0:81:6f:03:c5:54:9d:0d:b3:18:54:df:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F3:C4:71:94:F1:22:58:45:5C:60:E5:64:69:D9:52:0F:C5:24:FF
X509v3 Authority Key Identifier:
keyid:FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/QPPEcZTxIlhFXGDlZGnZUg_FJP8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.223.8.0/22
Signature Algorithm: sha256WithRSAEncryption
40:c0:07:8b:59:8d:86:9c:d5:05:41:50:de:b5:74:49:c5:41:
0c:df:06:63:40:24:b6:d5:3e:ea:ab:73:f1:6d:1f:57:13:b8:
d9:ab:79:31:e6:b3:e6:12:d2:7b:37:0f:a1:4c:cd:57:ba:9f:
f9:9b:ec:d2:14:0c:1c:4e:20:73:70:75:a1:e9:29:27:0a:46:
9d:26:4e:39:89:8a:ff:94:78:4f:f9:f1:c6:22:70:39:a7:1f:
18:d4:65:ca:ea:41:b3:10:9e:69:4b:0b:f9:c8:2e:66:54:21:
e6:ec:06:a7:9d:44:21:8f:71:03:09:24:e0:c2:ce:60:75:a7:
74:f8:af:40:92:e3:8c:aa:cf:0c:3d:80:eb:b1:8b:d8:8c:02:
48:df:e3:be:08:86:b8:d1:ea:6c:52:0a:71:bf:a6:78:75:ae:
77:e3:1d:0c:17:b2:ae:0d:6b:9c:bf:79:7a:cc:ed:76:e1:03:
d7:01:3d:52:3a:b4:78:bb:62:80:d9:f4:90:42:b1:d6:0c:be:
08:3c:44:15:8d:05:7b:b4:c2:e7:44:39:b2:81:1d:a8:ba:79:
be:3e:18:f2:36:a2:3e:4d:38:cf:c5:d5:d6:94:0b:75:bc:51:
9c:53:80:fa:46:25:ec:18:6f:a0:be:ce:1a:32:0c:aa:cc:5f:
1b:da:9a:58
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkMw
M0YyRjk2NkY2MkJGREM2NkIwNDE1NjJFOUJBNDAwMzJEQTA5RTAeFw0yMjA2MDcw
MjE3NDBaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKDQwRjNDNDcxOTRGMTIy
NTg0NTVDNjBFNTY0NjlEOTUyMEZDNTI0RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy7dl6a21EjBUdUziTrfX4n8oY8Odt99BHyjQ/TtpRbQgj9vzj
FmUlvuGSv1LCW3t78RHSdkhMNInJ+vR/hfWOGk+SxZm89s72KauN6PV+0acz5JOY
DsU6fdTkZ7+wKGW0iKWmIyQhe68xXvbOUE9/HCKffH6Wo0Y+V0yEti17uEcWwNdP
5TpTzZ5+0Lcml+q3PriocN4TsbHTiR1ilSZBPHursDnGwHbHVnX1STlUJWq+hQ1l
dmjvxZ/YdJNtWj05ttl7vCKLnfswpWCiI9dWOTUYm8aFzyMRKgIyvv7qaCen47eU
iWtkX+aZa/pLgAt5KKCBbwPFVJ0NsxhU37lBAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUQPPEcZTxIlhFXGDlZGnZUg/FJP8wHwYDVR0jBBgwFoAU/APy+Wb2K/3GawQV
Yum6QAMtoJ4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA1
MS9fQVB5LVdiMktfM0dhd1FWWXVtNlFBTXRvSjQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL19BUHktV2IyS18zR2F3UVZZdW02UUFNdG9KNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNTEvUVBQRWNaVHhJbGhG
WEdEbFpHblpVZ19GSlA4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAm/fCDANBgkqhkiG9w0BAQsFAAOCAQEAQMAHi1mNhpzVBUFQ3rV0ScVBDN8G
Y0AkttU+6qtz8W0fVxO42at5Meaz5hLSezcPoUzNV7qf+Zvs0hQMHE4gc3B1oekp
JwpGnSZOOYmK/5R4T/nxxiJwOacfGNRlyupBsxCeaUsL+cguZlQh5uwGp51EIY9x
Awkk4MLOYHWndPivQJLjjKrPDD2A67GL2IwCSN/jvgiGuNHqbFIKcb+meHWud+Md
DBeyrg1rnL95esztduED1wE9Ujq0eLtigNn0kEKx1gy+CDxEFY0Fe7TC50Q5soEd
qLp5vj4Y8jaiPk04z8XV1pQLdbxRnFOA+kYl7BhvoL7OGjIMqsxfG9qaWA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org