Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/tIwa7MwzOiVqhfpk5jNbB_4r4zc.roa
File: tIwa7MwzOiVqhfpk5jNbB_4r4zc.roa (raw, json)
Hash identifier: zdsOAVA9fLyrw9UgzVB0Z96IHYzO8TJHarmn58ptjuw=
Subject key identifier: B4:8C:1A:EC:CC:33:3A:25:6A:85:FA:64:E6:33:5B:07:FE:2B:E3:37
Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial: 03
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/tIwa7MwzOiVqhfpk5jNbB_4r4zc.roa
Signing time: Thu 13 Jan 2022 05:45:19 +0000
ROA not before: Thu 13 Jan 2022 05:45:19 +0000
ROA not after: Fri 13 Jan 2023 05:40:42 +0000
asID: 146845
IP address blocks: 103.169.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Validity
Not Before: Jan 13 05:45:19 2022 GMT
Not After : Jan 13 05:40:42 2023 GMT
Subject: CN=B48C1AECCC333A256A85FA64E6335B07FE2BE337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:fc:8f:3c:03:67:ba:c0:5a:20:dd:af:44:
61:d0:44:89:69:11:a4:1c:be:ab:70:e0:7f:bb:f9:
3c:58:54:17:18:8a:4c:e9:a0:0a:c7:1c:77:ca:39:
6b:74:83:c5:33:b2:58:9b:34:17:f1:f9:7a:85:4e:
d5:86:27:f2:c7:5b:64:35:3f:1f:ee:77:48:ca:36:
70:04:6d:80:12:99:02:80:ec:e1:96:db:b3:9b:ab:
5a:73:46:50:5b:50:55:11:51:37:db:74:d2:4c:98:
15:63:20:33:9a:7d:22:df:ec:39:75:ba:07:85:f4:
44:59:04:33:1e:d5:37:16:80:c3:2b:30:9f:07:3f:
53:91:d9:8a:ed:96:6d:d6:40:e6:83:05:6b:dc:27:
4d:9f:39:27:87:25:9c:f8:cc:38:47:c6:13:26:e2:
61:18:69:84:c8:cf:8c:bf:83:18:de:0b:3b:23:04:
eb:21:74:23:75:2e:bf:24:d6:1c:13:e7:c6:06:3e:
db:6c:6b:b6:35:2c:bc:24:62:eb:0f:6a:d5:53:30:
a5:55:4e:a8:fb:78:f6:00:16:7b:66:ff:48:67:49:
99:ff:47:a6:ed:ea:99:90:ce:2b:10:4f:59:3d:13:
72:85:9a:aa:3f:f3:32:91:a0:0f:04:80:35:b6:a3:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8C:1A:EC:CC:33:3A:25:6A:85:FA:64:E6:33:5B:07:FE:2B:E3:37
X509v3 Authority Key Identifier:
keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/tIwa7MwzOiVqhfpk5jNbB_4r4zc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.50.0/23
Signature Algorithm: sha256WithRSAEncryption
74:17:66:af:59:86:5f:88:f7:8d:fa:26:3c:d1:74:f3:89:d4:
c9:58:21:34:af:f6:9a:61:bc:f6:d7:05:9b:2b:12:ad:9e:39:
cc:9b:66:83:02:c4:13:b6:99:a5:a0:b1:a3:8c:9e:bd:13:c4:
3b:e8:52:70:e5:31:42:35:7f:7c:71:66:cf:69:4f:94:0f:32:
be:85:f5:f3:36:3b:6d:06:dd:39:fb:bb:2c:18:01:93:c6:70:
ab:5e:ef:00:19:1c:eb:2a:89:13:7a:86:a0:4f:4e:67:71:a7:
2c:e3:4e:2a:40:8e:3a:f6:5b:57:68:f2:c7:4c:95:8e:8e:85:
8a:ad:b9:92:4f:b8:a2:dd:76:7c:81:2a:26:a8:b1:9f:ed:03:
d3:ce:cd:88:ad:b6:f6:7b:d1:6a:41:04:b4:02:40:3b:3d:50:
87:85:bc:89:9f:16:22:88:25:b3:42:f8:7f:c8:e8:80:0f:63:
68:ee:5d:3b:6a:13:b1:b6:ac:b9:9d:f3:31:89:96:64:f7:0b:
b7:1a:55:64:4d:4c:da:d3:21:b6:38:92:35:23:54:2d:13:65:
74:8e:f1:87:38:c0:7f:01:b4:49:a0:24:ed:f9:8a:cc:2f:38:
a8:9e:99:15:d7:10:bc:d1:2b:20:f4:c8:e4:32:a9:e0:7c:e1:
b4:ec:b2:e6
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMkFC
NkM5QjZFMTY1MzM0QzAzMkQwNTFENUZDN0QxNTQ3RTRFMzUzMB4XDTIyMDExMzA1
NDUxOVoXDTIzMDExMzA1NDA0MlowMzExMC8GA1UEAxMoQjQ4QzFBRUNDQzMzM0Ey
NTZBODVGQTY0RTYzMzVCMDdGRTJCRTMzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKKj/I88A2e6wFog3a9EYdBEiWkRpBy+q3Dgf7v5PFhUFxiKTOmg
Csccd8o5a3SDxTOyWJs0F/H5eoVO1YYn8sdbZDU/H+53SMo2cARtgBKZAoDs4Zbb
s5urWnNGUFtQVRFRN9t00kyYFWMgM5p9It/sOXW6B4X0RFkEMx7VNxaAwyswnwc/
U5HZiu2WbdZA5oMFa9wnTZ85J4clnPjMOEfGEybiYRhphMjPjL+DGN4LOyME6yF0
I3UuvyTWHBPnxgY+22xrtjUsvCRi6w9q1VMwpVVOqPt49gAWe2b/SGdJmf9Hpu3q
mZDOKxBPWT0TcoWaqj/zMpGgDwSANbaj4+cCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBS0jBrszDM6JWqF+mTmM1sH/ivjNzAfBgNVHSMEGDAWgBTSq2ybbhZTNMAy0FHV
/H0VR+TjUzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4
LzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5OC90SXdhN013ek9pVnFo
ZnBrNWpOYkJfNHI0emMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ6kyMA0GCSqGSIb3DQEBCwUAA4IBAQB0F2avWYZfiPeN+iY80XTzidTJWCE0
r/aaYbz21wWbKxKtnjnMm2aDAsQTtpmloLGjjJ69E8Q76FJw5TFCNX98cWbPaU+U
DzK+hfXzNjttBt05+7ssGAGTxnCrXu8AGRzrKokTeoagT05ncacs404qQI469ltX
aPLHTJWOjoWKrbmST7ii3XZ8gSomqLGf7QPTzs2Irbb2e9FqQQS0AkA7PVCHhbyJ
nxYiiCWzQvh/yOiAD2No7l07ahOxtqy5nfMxiZZk9wu3GlVkTUza0yG2OJI1I1Qt
E2V0jvGHOMB/AbRJoCTt+YrMLzionpkV1xC80Ssg9MjkMqngfOG07LLm
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org