Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/kaQ5X6EaHgcY3UTatxKwcDw38fE.roa
File: kaQ5X6EaHgcY3UTatxKwcDw38fE.roa (raw, json)
Hash identifier: UKo8RA7u+lfYXz3YGHuP84f/Y78/TegAnUFDG8oGSyw=
Subject key identifier: 91:A4:39:5F:A1:1A:1E:07:18:DD:44:DA:B7:12:B0:70:3C:37:F1:F1
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 0D43
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/kaQ5X6EaHgcY3UTatxKwcDw38fE.roa
Signing time: Thu 03 Oct 2024 14:52:12 +0000
ROA not before: Thu 03 Oct 2024 14:52:12 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 215784
IP address blocks: 211.149.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3395 (0xd43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Oct 3 14:52:12 2024 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=91A4395FA11A1E0718DD44DAB712B0703C37F1F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:3f:fd:68:ce:c0:32:26:20:77:0c:b8:06:
02:84:f6:4f:57:4c:ec:87:fd:98:e0:ec:bd:7c:80:
2d:33:fd:5d:0e:ce:72:c4:62:0f:31:fa:d2:89:d7:
a7:a8:6c:4c:64:00:c3:47:4b:ea:70:9a:59:e6:cc:
86:42:94:f4:f3:c7:91:5a:66:34:1f:19:c5:82:f7:
89:78:a6:61:ab:67:0e:cc:e6:d4:81:7a:6f:a4:97:
93:48:01:93:9b:b8:4e:78:1b:f8:a4:50:8e:24:de:
80:0c:a6:4d:e7:30:8d:8f:2e:f7:3c:f1:fb:15:eb:
3d:c7:40:19:da:32:6d:88:67:c7:a2:62:6b:88:ec:
ff:b7:ea:98:c5:b5:65:e5:f0:02:99:68:69:16:64:
fa:bd:69:d8:c1:6a:0b:e4:3b:c7:55:84:52:d6:84:
9a:06:d9:38:17:a0:56:30:36:c0:7d:63:b5:3a:d4:
5e:c0:19:05:02:a2:07:e9:fd:b9:84:e8:a6:45:57:
51:c3:26:b9:14:1f:0f:c3:63:08:64:73:21:84:9c:
7e:46:b1:15:b5:12:19:62:40:12:81:43:12:1e:1a:
ef:c5:a4:db:cd:1b:30:96:5c:d1:11:4c:92:32:29:
c6:d0:a7:2e:42:a4:af:27:62:2c:eb:28:8c:f7:a5:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:39:5F:A1:1A:1E:07:18:DD:44:DA:B7:12:B0:70:3C:37:F1:F1
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/kaQ5X6EaHgcY3UTatxKwcDw38fE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.149.44.0/22
Signature Algorithm: sha256WithRSAEncryption
24:4c:b4:56:50:8f:af:5b:10:ad:83:83:66:6a:01:3c:56:26:
4d:a4:15:b7:ed:52:34:da:63:ca:0e:18:9c:8d:a9:ab:dc:e8:
b0:bc:45:e6:bd:bf:a8:d1:83:39:37:40:ce:86:97:42:15:d8:
d7:9b:65:6e:d1:53:b7:5b:38:ca:1e:e5:cf:7e:cf:2c:82:9c:
43:33:19:5c:1e:84:bf:30:0b:1f:29:50:77:26:3a:33:63:3b:
99:f1:fb:7d:58:94:aa:52:e6:2e:aa:29:7a:18:f8:2d:e7:73:
00:33:d0:a9:f1:61:68:9e:4f:23:4c:07:26:0d:b1:57:eb:28:
48:2f:62:e0:42:ad:7d:83:91:cc:a6:40:84:54:59:55:6e:3b:
cd:21:0f:a8:d5:cc:56:0d:47:ff:f1:1a:21:0a:d9:b1:d0:58:
c1:5c:be:20:4d:ab:bc:ac:c8:f4:f7:08:14:3f:60:f8:2e:8e:
4a:4b:93:e3:7d:af:f3:06:bd:ce:93:b0:90:ef:d0:7c:34:56:
14:45:eb:3a:3e:2e:49:07:fc:88:94:ae:37:93:e0:c3:e1:1f:
d5:62:63:7f:8f:44:0e:df:08:75:e1:11:11:da:e7:b4:b0:e9:
c1:ee:01:0b:36:4d:90:22:dd:9b:48:e9:5e:45:ac:40:f3:4c:
25:4b:4f:f7
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDUMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNDEwMDMx
NDUyMTJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDkxQTQzOTVGQTExQTFF
MDcxOERENDREQUI3MTJCMDcwM0MzN0YxRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHPD/9aM7AMiYgdwy4BgKE9k9XTOyH/Zjg7L18gC0z/V0OznLE
Yg8x+tKJ16eobExkAMNHS+pwmlnmzIZClPTzx5FaZjQfGcWC94l4pmGrZw7M5tSB
em+kl5NIAZObuE54G/ikUI4k3oAMpk3nMI2PLvc88fsV6z3HQBnaMm2IZ8eiYmuI
7P+36pjFtWXl8AKZaGkWZPq9adjBagvkO8dVhFLWhJoG2TgXoFYwNsB9Y7U61F7A
GQUCogfp/bmE6KZFV1HDJrkUHw/DYwhkcyGEnH5GsRW1EhliQBKBQxIeGu/FpNvN
GzCWXNERTJIyKcbQpy5CpK8nYizrKIz3pejZAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUkaQ5X6EaHgcY3UTatxKwcDw38fEwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL2thUTVYNkVhSGdjWTNV
VGF0eEt3Y0R3MzhmRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALTlSwwDQYJKoZIhvcNAQELBQADggEBACRMtFZQj69bEK2Dg2ZqATxWJk2kFbft
UjTaY8oOGJyNqavc6LC8Rea9v6jRgzk3QM6Gl0IV2NebZW7RU7dbOMoe5c9+zyyC
nEMzGVwehL8wCx8pUHcmOjNjO5nx+31YlKpS5i6qKXoY+C3ncwAz0KnxYWieTyNM
ByYNsVfrKEgvYuBCrX2DkcymQIRUWVVuO80hD6jVzFYNR//xGiEK2bHQWMFcviBN
q7ysyPT3CBQ/YPgujkpLk+N9r/MGvc6TsJDv0Hw0VhRF6zo+LkkH/IiUrjeT4MPh
H9ViY3+PRA7fCHXhERHa57Sw6cHuAQs2TZAi3ZtI6V5FrEDzTCVLT/c=
-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org