Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/g5RybP066YATN-CFRBPe4-WMx_E.roa
File: g5RybP066YATN-CFRBPe4-WMx_E.roa (raw, json)
Hash identifier: iXmTYkzHVngYRPE2Q9tmbtmc3/xr2YFrgCw7C0fQ6lY=
Subject key identifier: 83:94:72:6C:FD:3A:E9:80:13:37:E0:85:44:13:DE:E3:E5:8C:C7:F1
Certificate issuer: /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial: 070E
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/g5RybP066YATN-CFRBPe4-WMx_E.roa
Signing time: Sat 27 Aug 2022 13:34:45 +0000
ROA not before: Sat 27 Aug 2022 13:34:45 +0000
ROA not after: Wed 19 Jul 2023 01:20:03 +0000
asID: 48024
IP address blocks: 103.172.160.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Validity
Not Before: Aug 27 13:34:45 2022 GMT
Not After : Jul 19 01:20:03 2023 GMT
Subject: CN=8394726CFD3AE9801337E0854413DEE3E58CC7F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:ba:d3:fc:83:f2:53:9b:60:1b:3e:25:e3:
e8:a9:31:9f:6d:5a:af:82:41:eb:1a:23:b5:cf:90:
de:87:11:fb:1f:6f:e2:fb:2c:d6:b1:22:5e:85:5c:
d9:b1:7a:2c:8b:1e:91:a2:59:22:15:a6:75:99:62:
9d:a2:f4:e9:81:96:04:42:aa:0f:aa:fa:8b:2f:71:
76:cb:fa:2c:b8:a1:ba:50:99:a3:d1:dd:56:41:41:
c3:75:96:02:65:78:0c:1e:d8:aa:e6:8e:f2:81:03:
68:0b:ed:1a:4e:7a:3e:e6:3f:fa:04:b2:b9:85:fe:
f8:db:20:d1:cf:8b:07:04:94:92:80:fd:97:25:ad:
16:d2:55:12:5a:5d:6f:ac:aa:4d:74:ee:86:2d:27:
ed:9c:54:ef:40:49:bc:25:57:a4:32:55:46:e0:1e:
ce:55:d5:6d:06:f1:6d:81:c0:6b:49:14:ec:0d:83:
fd:b5:90:ff:e0:3f:b0:f4:0a:73:e9:74:67:67:ae:
f2:3e:30:bf:83:7a:b5:0a:c4:31:32:1d:96:82:49:
1b:69:40:7f:79:47:a1:2a:c0:6e:61:e5:d8:f4:fe:
fa:71:63:36:09:61:31:d1:44:0d:19:ae:e3:3e:d3:
51:99:7d:f5:29:5b:85:52:81:31:c5:67:f6:f6:c5:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:94:72:6C:FD:3A:E9:80:13:37:E0:85:44:13:DE:E3:E5:8C:C7:F1
X509v3 Authority Key Identifier:
keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/g5RybP066YATN-CFRBPe4-WMx_E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.160.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:41:f3:a7:c7:2a:ed:2c:59:a8:73:f6:e9:d1:9f:6b:8b:ae:
03:58:bc:61:eb:07:d3:c9:af:05:51:1f:0e:9d:e6:44:b4:6c:
ab:5d:32:17:a8:d2:b0:98:90:42:dd:db:f4:a3:59:39:7c:f6:
09:3b:0d:a2:ad:af:48:30:6e:5e:11:a4:d4:52:20:f6:a5:c1:
52:9f:40:5a:65:38:3a:eb:e5:37:25:ec:58:c6:eb:2d:36:3e:
d5:ac:ee:b2:8e:56:62:f2:52:1f:6d:79:ba:0a:6c:d9:b3:dc:
2c:0a:15:88:49:ff:17:91:56:35:60:0e:9c:7e:b4:76:92:07:
51:85:d2:c5:a1:94:8c:49:6b:35:77:e1:ca:87:52:f4:96:a8:
15:4d:9f:57:8c:bf:48:26:29:78:64:02:da:18:23:3d:01:0c:
4c:50:22:81:7e:c9:3e:e7:8b:c9:da:30:d0:ac:54:e8:04:5c:
a0:62:c1:b4:3b:4b:ee:36:69:4a:76:62:d1:83:6c:55:7a:60:
2a:75:cf:52:09:38:b3:71:80:de:66:13:87:c2:c7:9e:78:20:
2f:d7:d7:b9:a9:3c:ab:15:79:be:c2:36:c9:58:8a:64:58:28:
26:dd:04:3d:8e:24:79:d9:ea:de:10:52:d8:4d:0b:fd:3c:a8:
51:d2:8b:de
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0NF
ODMyMjIzOThGNjk0MzI4NDg2NURCMjIzOEZBQjE0RkI4RkNFQTAeFw0yMjA4Mjcx
MzM0NDVaFw0yMzA3MTkwMTIwMDNaMDMxMTAvBgNVBAMTKDgzOTQ3MjZDRkQzQUU5
ODAxMzM3RTA4NTQ0MTNERUUzRTU4Q0M3RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFlLrT/IPyU5tgGz4l4+ipMZ9tWq+CQesaI7XPkN6HEfsfb+L7
LNaxIl6FXNmxeiyLHpGiWSIVpnWZYp2i9OmBlgRCqg+q+osvcXbL+iy4obpQmaPR
3VZBQcN1lgJleAwe2KrmjvKBA2gL7RpOej7mP/oEsrmF/vjbINHPiwcElJKA/Zcl
rRbSVRJaXW+sqk107oYtJ+2cVO9ASbwlV6QyVUbgHs5V1W0G8W2BwGtJFOwNg/21
kP/gP7D0CnPpdGdnrvI+ML+DerUKxDEyHZaCSRtpQH95R6EqwG5h5dj0/vpxYzYJ
YTHRRA0ZruM+01GZffUpW4VSgTHFZ/b2xVLDAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUg5RybP066YATN+CFRBPe4+WMx/EwHwYDVR0jBBgwFoAUzOgyIjmPaUMoSGXb
Ijj6sU+4/OowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEx
MS96T2d5SWptUGFVTW9TR1hiSWpqNnNVLTRfT28uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3pPZ3lJam1QYVVNb1NHWGJJamo2c1UtNF9Pby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMTEvZzVSeWJQMDY2WUFU
Ti1DRlJCUGU0LVdNeF9FLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWesoDANBgkqhkiG9w0BAQsFAAOCAQEAw0Hzp8cq7SxZqHP26dGfa4uuA1i8
YesH08mvBVEfDp3mRLRsq10yF6jSsJiQQt3b9KNZOXz2CTsNoq2vSDBuXhGk1FIg
9qXBUp9AWmU4OuvlNyXsWMbrLTY+1azuso5WYvJSH215ugps2bPcLAoViEn/F5FW
NWAOnH60dpIHUYXSxaGUjElrNXfhyodS9JaoFU2fV4y/SCYpeGQC2hgjPQEMTFAi
gX7JPueLydow0KxU6ARcoGLBtDtL7jZpSnZi0YNsVXpgKnXPUgk4s3GA3mYTh8LH
nnggL9fXuak8qxV5vsI2yViKZFgoJt0EPY4kednq3hBS2E0L/TyoUdKL3g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:17 2023 by rpki-client on console-ams.rpki-client.org