Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/Wz-k98A7lyZDLXruLmxqtaNEttQ.roa
File: Wz-k98A7lyZDLXruLmxqtaNEttQ.roa (raw, json)
Hash identifier: HYZOETQ6vCbvtJbPse7vwdOVi6B31tEBwi0CgYTMsto=
Subject key identifier: 5B:3F:A4:F7:C0:3B:97:26:43:2D:7A:EE:2E:6C:6A:B5:A3:44:B6:D4
Certificate issuer: /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial: 04
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/Wz-k98A7lyZDLXruLmxqtaNEttQ.roa
Signing time: Fri 10 Sep 2021 13:46:18 +0000
ROA not before: Fri 10 Sep 2021 13:46:18 +0000
ROA not after: Sat 10 Sep 2022 13:34:57 +0000
asID: 48024
IP address blocks: 103.172.160.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Validity
Not Before: Sep 10 13:46:18 2021 GMT
Not After : Sep 10 13:34:57 2022 GMT
Subject: CN=5B3FA4F7C03B9726432D7AEE2E6C6AB5A344B6D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:11:cf:7f:dd:c2:47:08:cf:0c:db:4b:ad:
85:cf:33:16:b9:01:1f:65:10:bc:b7:af:4f:04:29:
8b:20:2e:c5:77:05:14:bc:ed:40:72:41:6b:21:7a:
df:29:98:a8:c8:b0:a8:ad:6d:c0:b9:3b:42:92:c5:
49:31:37:04:21:32:b0:09:9a:bd:c1:20:a4:e3:3d:
5d:e8:1a:25:ab:0d:3d:e8:93:8e:23:6c:50:1e:ba:
94:4c:e6:3d:d5:a8:4e:4f:51:c7:7c:a4:a6:c4:23:
e6:95:c6:c6:12:48:61:56:a6:dc:d2:07:80:1a:8f:
28:ea:96:0f:55:f1:12:d5:37:43:89:b8:98:c2:65:
4f:6d:2e:89:0f:73:e8:93:73:35:6c:b0:e4:7c:67:
ac:7d:3c:bc:04:07:63:72:09:79:a8:75:75:19:aa:
96:a9:cc:04:ed:fc:1a:a8:89:0a:44:95:00:0e:f8:
5a:92:27:b6:11:7c:b1:19:7a:fe:8d:e2:d5:c7:e3:
ed:76:14:a3:4f:df:59:51:34:5e:e7:d3:04:97:86:
b4:ac:b1:5a:6f:3e:88:4d:9b:22:98:00:90:b4:c6:
d2:b0:6a:fc:78:53:22:48:01:01:83:a5:a8:85:d2:
6f:44:c1:c5:5e:c7:09:c2:61:cb:8f:c2:cf:74:2c:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3F:A4:F7:C0:3B:97:26:43:2D:7A:EE:2E:6C:6A:B5:A3:44:B6:D4
X509v3 Authority Key Identifier:
keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/Wz-k98A7lyZDLXruLmxqtaNEttQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:24:6e:aa:75:27:1f:47:23:c5:ad:47:52:50:3e:50:f1:da:
0d:f3:ea:4c:bd:d5:75:14:d5:ff:8a:51:29:e9:ea:d4:ce:a2:
66:38:2c:9e:28:a8:8b:61:b6:31:f0:ae:88:29:90:07:ff:f7:
30:5c:3a:41:1f:5d:dc:47:75:b2:55:b3:75:e5:5a:0b:05:36:
94:e8:c3:d8:72:d5:44:28:45:31:07:5d:a8:15:2b:7a:0a:41:
ad:0d:41:5f:2c:21:c9:d4:f6:ff:a0:f8:2b:b7:48:fd:17:29:
de:d8:a8:d1:d0:f3:19:b3:3f:3a:a8:3e:d1:ad:e0:db:c4:9f:
2d:7d:40:d0:ff:f1:fa:d4:c2:b0:4d:57:22:4e:04:3b:89:46:
af:c0:99:95:56:68:bc:81:1e:f5:a3:e5:c1:36:67:ec:29:ff:
74:d7:c7:d8:35:d3:24:43:c0:d1:6b:d5:df:37:84:3c:a8:a5:
fe:47:45:f3:bd:8a:3d:28:8d:95:f1:2f:fc:15:64:42:5f:3a:
d4:ae:ce:f8:ec:00:97:e3:51:53:a7:16:22:4d:1f:dc:d7:14:
56:e9:05:ef:b5:48:b2:0f:fc:7b:d0:eb:f5:c1:8e:6d:75:0c:
c6:00:18:fc:c0:41:5c:df:0d:69:77:f9:55:d5:76:75:13:f4:
b4:f2:74:0d
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQ0U4
MzIyMjM5OEY2OTQzMjg0ODY1REIyMjM4RkFCMTRGQjhGQ0VBMB4XDTIxMDkxMDEz
NDYxOFoXDTIyMDkxMDEzMzQ1N1owMzExMC8GA1UEAxMoNUIzRkE0RjdDMDNCOTcy
NjQzMkQ3QUVFMkU2QzZBQjVBMzQ0QjZENDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOcuEc9/3cJHCM8M20uthc8zFrkBH2UQvLevTwQpiyAuxXcFFLzt
QHJBayF63ymYqMiwqK1twLk7QpLFSTE3BCEysAmavcEgpOM9XegaJasNPeiTjiNs
UB66lEzmPdWoTk9Rx3ykpsQj5pXGxhJIYVam3NIHgBqPKOqWD1XxEtU3Q4m4mMJl
T20uiQ9z6JNzNWyw5HxnrH08vAQHY3IJeah1dRmqlqnMBO38GqiJCkSVAA74WpIn
thF8sRl6/o3i1cfj7XYUo0/fWVE0XufTBJeGtKyxWm8+iE2bIpgAkLTG0rBq/HhT
IkgBAYOlqIXSb0TBxV7HCcJhy4/Cz3Qs7bkCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBRbP6T3wDuXJkMteu4ubGq1o0S21DAfBgNVHSMEGDAWgBTM6DIiOY9pQyhIZdsi
OPqxT7j86jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMTEx
L3pPZ3lJam1QYVVNb1NHWGJJamo2c1UtNF9Pby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvek9neUlqbVBhVU1vU0dYYklqajZzVS00X09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzExMS9Xei1rOThBN2x5WkRM
WHJ1TG14cXRhTkV0dFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ6ygMA0GCSqGSIb3DQEBCwUAA4IBAQA+JG6qdScfRyPFrUdSUD5Q8doN8+pM
vdV1FNX/ilEp6erUzqJmOCyeKKiLYbYx8K6IKZAH//cwXDpBH13cR3WyVbN15VoL
BTaU6MPYctVEKEUxB12oFSt6CkGtDUFfLCHJ1Pb/oPgrt0j9Fyne2KjR0PMZsz86
qD7RreDbxJ8tfUDQ//H61MKwTVciTgQ7iUavwJmVVmi8gR71o+XBNmfsKf9018fY
NdMkQ8DRa9XfN4Q8qKX+R0XzvYo9KI2V8S/8FWRCXzrUrs747ACX41FTpxYiTR/c
1xRW6QXvtUiyD/x70Ov1wY5tdQzGABj8wEFc3w1pd/lV1XZ1E/S08nQN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org