Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/g2HSadr8mq1tX2o1jRdX1Skvd7w.roa
File: g2HSadr8mq1tX2o1jRdX1Skvd7w.roa (raw, json)
Hash identifier: pG5xwurhG5BdCckcUsyRWWL0AkgC7LHVZ/e2fJ9GyHg=
Subject key identifier: 83:61:D2:69:DA:FC:9A:AD:6D:5F:6A:35:8D:17:57:D5:29:2F:77:BC
Certificate issuer: /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial: 06
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/g2HSadr8mq1tX2o1jRdX1Skvd7w.roa
Signing time: Fri 10 Sep 2021 13:46:19 +0000
ROA not before: Fri 10 Sep 2021 13:46:19 +0000
ROA not after: Sat 10 Sep 2022 13:34:57 +0000
asID: 146839
IP address blocks: 103.172.160.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Validity
Not Before: Sep 10 13:46:19 2021 GMT
Not After : Sep 10 13:34:57 2022 GMT
Subject: CN=8361D269DAFC9AAD6D5F6A358D1757D5292F77BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:b8:11:53:be:d7:4d:65:c5:a6:43:03:be:
df:9e:85:56:ac:39:58:56:1e:e8:67:b4:ff:0a:db:
6c:e5:aa:ad:93:1d:15:46:07:a2:ad:4f:42:44:2e:
a9:84:5f:df:1c:c9:54:51:df:40:32:a9:72:b1:db:
5c:b4:ce:91:d4:87:42:8b:70:5a:e1:99:06:43:de:
42:49:f7:2e:8a:9d:2b:b0:38:6c:29:1b:df:11:92:
96:43:18:35:9d:8a:eb:3e:1f:fd:cc:9f:2b:7f:75:
e9:96:93:8d:58:99:e1:77:ce:48:92:f8:96:d8:7f:
a1:c7:09:a3:be:ea:bf:54:99:5d:7b:93:75:8b:31:
b8:2c:6f:e0:f2:7d:c5:49:f2:4f:5b:89:76:95:c2:
32:48:75:ab:ee:f7:74:ae:c5:bc:10:df:55:f1:7b:
b6:8c:19:95:a6:87:0b:5a:d4:1b:5c:d8:c3:ea:c6:
7a:a9:68:2b:04:db:20:fe:4c:ee:2a:b3:a3:3e:7b:
4f:a2:f4:05:65:6e:ad:60:40:d7:67:10:53:9a:05:
41:3c:71:dd:3d:26:cd:76:3a:5d:c3:f8:b9:13:d4:
ca:f7:a6:56:9a:47:6e:85:5c:23:6a:09:5f:8b:be:
44:f0:61:95:e8:3c:3c:6b:63:63:c0:96:7a:eb:b5:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:61:D2:69:DA:FC:9A:AD:6D:5F:6A:35:8D:17:57:D5:29:2F:77:BC
X509v3 Authority Key Identifier:
keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/g2HSadr8mq1tX2o1jRdX1Skvd7w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.160.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:d8:62:68:3a:51:2a:42:54:b6:e2:b0:65:57:e8:72:7a:92:
08:eb:63:de:06:79:39:ed:18:cf:2c:96:1c:e0:22:ae:58:0f:
3d:9f:c5:8c:31:45:28:c4:09:af:d4:65:16:4c:4a:dd:7d:f2:
12:58:4c:e3:06:d2:44:c4:45:a2:d0:63:ab:43:bc:dd:bd:f9:
5c:af:00:9d:61:09:32:73:24:d5:15:87:74:91:89:56:11:7c:
10:0a:29:11:28:34:c7:6d:3a:68:f3:c3:6e:29:ea:6a:63:f1:
53:d8:53:54:04:6e:38:68:0a:0d:b6:bf:d0:ff:42:dc:cd:49:
e3:1d:be:0b:79:c1:0e:64:3a:37:39:af:6e:46:1d:fc:5c:fe:
a9:d5:f1:29:0c:bf:7b:c8:18:38:e9:ad:8e:3f:84:43:a4:1a:
f9:d4:27:7e:d5:5b:9a:0d:82:ea:63:ec:57:9f:1c:08:86:48:
02:10:52:0a:05:8e:3c:37:6b:3c:d0:82:77:8e:ea:d8:24:99:
96:71:e6:df:9d:5a:6e:28:a1:b3:84:1a:d2:50:4c:3f:c8:9e:
f9:79:b6:b2:c1:bc:1c:64:3f:03:c0:3f:f9:3f:24:16:0d:e3:
3e:45:ea:5e:50:14:15:22:e6:10:27:73:84:59:16:ca:99:3e:
98:3f:41:a7
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQ0U4
MzIyMjM5OEY2OTQzMjg0ODY1REIyMjM4RkFCMTRGQjhGQ0VBMB4XDTIxMDkxMDEz
NDYxOVoXDTIyMDkxMDEzMzQ1N1owMzExMC8GA1UEAxMoODM2MUQyNjlEQUZDOUFB
RDZENUY2QTM1OEQxNzU3RDUyOTJGNzdCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKZPuBFTvtdNZcWmQwO+356FVqw5WFYe6Ge0/wrbbOWqrZMdFUYH
oq1PQkQuqYRf3xzJVFHfQDKpcrHbXLTOkdSHQotwWuGZBkPeQkn3LoqdK7A4bCkb
3xGSlkMYNZ2K6z4f/cyfK3916ZaTjViZ4XfOSJL4lth/occJo77qv1SZXXuTdYsx
uCxv4PJ9xUnyT1uJdpXCMkh1q+73dK7FvBDfVfF7towZlaaHC1rUG1zYw+rGeqlo
KwTbIP5M7iqzoz57T6L0BWVurWBA12cQU5oFQTxx3T0mzXY6XcP4uRPUyvemVppH
boVcI2oJX4u+RPBhleg8PGtjY8CWeuu1nNkCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBSDYdJp2vyarW1fajWNF1fVKS93vDAfBgNVHSMEGDAWgBTM6DIiOY9pQyhIZdsi
OPqxT7j86jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMTEx
L3pPZ3lJam1QYVVNb1NHWGJJamo2c1UtNF9Pby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvek9neUlqbVBhVU1vU0dYYklqajZzVS00X09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzExMS9nMkhTYWRyOG1xMXRY
Mm8xalJkWDFTa3ZkN3cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ6ygMA0GCSqGSIb3DQEBCwUAA4IBAQBu2GJoOlEqQlS24rBlV+hyepII62Pe
Bnk57RjPLJYc4CKuWA89n8WMMUUoxAmv1GUWTErdffISWEzjBtJExEWi0GOrQ7zd
vflcrwCdYQkycyTVFYd0kYlWEXwQCikRKDTHbTpo88NuKepqY/FT2FNUBG44aAoN
tr/Q/0LczUnjHb4LecEOZDo3Oa9uRh38XP6p1fEpDL97yBg46a2OP4RDpBr51Cd+
1VuaDYLqY+xXnxwIhkgCEFIKBY48N2s80IJ3jurYJJmWcebfnVpuKKGzhBrSUEw/
yJ75ebaywbwcZD8DwD/5PyQWDeM+RepeUBQVIuYQJ3OEWRbKmT6YP0Gn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org