Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/mcGTwgKW4YFk7REYXonJUCCzsbU.roa
File: mcGTwgKW4YFk7REYXonJUCCzsbU.roa (raw, json)
Hash identifier: yBkS9kDodO7jU995zRnP3LDupeKn9hLynpFcNMBFGcU=
Subject key identifier: 99:C1:93:C2:02:96:E1:81:64:ED:11:18:5E:89:C9:50:20:B3:B1:B5
Certificate issuer: /CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Certificate serial: 0949
Authority key identifier: 85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/mcGTwgKW4YFk7REYXonJUCCzsbU.roa
Signing time: Tue 07 Jun 2022 02:11:15 +0000
ROA not before: Tue 07 Jun 2022 02:11:15 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 4515
IP address blocks: 120.31.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377 (0x949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85F3BFD1A14090C4829A5A313A4D31F9CC8F312F
Validity
Not Before: Jun 7 02:11:15 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=99C193C20296E18164ED11185E89C95020B3B1B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:d7:2f:ce:52:80:f2:84:56:9b:3f:08:bf:
a2:cf:bf:3e:71:5f:35:e7:ff:e7:e1:b3:d1:53:18:
f0:a8:ba:a4:af:ac:9c:54:ea:b4:8a:0a:d2:e2:43:
d7:73:7e:0d:dd:11:69:93:b3:1e:4a:3f:36:28:04:
fa:6b:aa:84:99:8f:64:41:f0:b7:db:9d:b3:cd:c5:
52:7d:6e:86:ab:84:4e:70:12:0b:44:c2:70:5a:a4:
7c:31:fd:2a:2e:be:cb:6e:bb:cd:7e:85:a8:8a:07:
5b:55:9c:33:b0:58:4e:1e:81:7b:0c:f0:d6:e7:98:
d5:4c:88:96:74:7b:d2:9d:7a:32:f7:5b:52:1e:59:
2b:81:84:db:44:24:06:f6:c7:95:e1:c8:be:5b:cc:
34:da:64:6d:7c:20:19:e4:fe:8b:c2:1c:9f:1a:2e:
20:21:b3:b1:77:b6:c0:c4:e9:32:0e:f9:db:02:d2:
e9:6d:0c:f8:d2:c9:52:2f:3a:7b:c9:ea:6f:22:5e:
a0:13:49:67:cb:eb:84:5d:e7:1b:15:5e:dc:e4:62:
4c:68:ac:9b:7e:a5:fc:1b:c7:e3:e7:1b:49:a2:29:
12:db:db:1c:ee:9d:da:8b:90:45:5e:d4:68:a1:9f:
33:58:ac:e2:b8:ca:40:ef:5d:df:a5:ba:60:f7:aa:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:93:C2:02:96:E1:81:64:ED:11:18:5E:89:C9:50:20:B3:B1:B5
X509v3 Authority Key Identifier:
keyid:85:F3:BF:D1:A1:40:90:C4:82:9A:5A:31:3A:4D:31:F9:CC:8F:31:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/hfO_0aFAkMSCmloxOk0x-cyPMS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hfO_0aFAkMSCmloxOk0x-cyPMS8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/mcGTwgKW4YFk7REYXonJUCCzsbU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.31.164.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:48:83:8c:e1:75:9a:85:46:ef:d7:4c:cf:69:bf:6f:02:d1:
4e:50:55:8f:9f:7f:0e:e6:b8:ab:da:92:a4:b2:62:2f:63:e5:
52:e9:66:8f:b6:41:f7:61:ef:fa:70:4a:c5:03:10:44:76:e4:
5d:28:47:c5:0b:7c:2c:1f:95:8e:da:6a:ee:93:1b:ac:f8:e9:
86:9f:dd:1f:39:81:64:3a:a9:be:2e:2f:bb:99:58:e6:06:7e:
3e:c1:07:b0:f1:21:e9:ca:11:19:25:bf:ab:fe:59:df:98:b0:
5a:bd:70:1d:1e:e2:40:8f:f5:06:d3:35:71:c7:82:a7:46:f5:
64:7c:8e:47:64:4d:c0:de:43:92:19:87:99:5d:c7:e1:ec:36:
53:4e:f1:14:4f:3d:46:ac:28:ce:64:a7:f6:63:f1:ad:68:12:
9f:dd:45:24:d8:91:5d:49:3d:66:ff:2f:99:84:09:9f:e6:de:
72:79:35:b0:ca:93:2f:bb:dc:4d:84:a0:44:2c:79:b3:7d:ec:
2e:b7:3e:73:1a:51:70:cc:7e:dd:df:06:fa:ea:81:47:36:62:
ac:8e:60:1b:c3:ab:2a:16:fd:ea:03:44:49:a6:fb:1b:06:ae:
20:47:23:4b:c7:4c:2f:81:65:2c:fd:34:05:c0:4f:e6:5d:e5:
01:48:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org