Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/tavcc_vv__EAdLapRFYIYUOvS2A.roa
File: tavcc_vv__EAdLapRFYIYUOvS2A.roa (raw, json)
Hash identifier: w9RU0b5urgJhrhRTh9sWazMScUnxVRHhZj/AJMKT3Dc=
Subject key identifier: B5:AB:DC:73:FB:EF:FF:F1:00:74:B6:A9:44:56:08:61:43:AF:4B:60
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 020C
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/tavcc_vv__EAdLapRFYIYUOvS2A.roa
Signing time: Fri 12 May 2023 09:44:18 +0000
ROA not before: Fri 12 May 2023 09:44:18 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 35913
IP address blocks: 210.79.104.0/22 maxlen: 24
210.79.124.0/22 maxlen: 24
211.149.36.0/22 maxlen: 24
211.149.44.0/22 maxlen: 24
211.149.56.0/22 maxlen: 24
211.149.72.0/22 maxlen: 24
211.149.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: May 12 09:44:18 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=B5ABDC73FBEFFFF10074B6A94456086143AF4B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:18:5e:1f:74:2e:f6:20:ac:d1:02:34:c6:
0e:c6:fd:69:85:4b:39:14:3a:48:7a:e5:5c:18:22:
dd:65:23:dc:92:05:e1:e0:f0:e8:0a:49:33:da:15:
cb:57:97:be:cd:58:93:40:d5:dd:ba:6e:a7:95:0a:
ee:ca:3f:6b:69:2c:78:ae:47:02:6f:90:50:2a:2e:
2e:49:51:35:8c:32:04:41:18:96:3e:ae:6b:95:12:
a4:71:99:67:fc:cb:95:e6:d2:3d:1c:d4:50:ad:a9:
33:48:c2:d4:24:4d:bd:26:17:02:bf:60:2c:ff:57:
73:c5:4b:a1:f5:a3:b6:aa:64:7c:8a:1c:1c:9b:b0:
70:10:a0:5b:c8:e3:17:19:04:97:d5:8b:32:24:b5:
b4:a2:c1:44:4f:20:62:71:09:f0:cc:33:be:59:19:
15:d4:3c:b8:b7:98:77:f3:17:65:ea:38:8f:14:49:
b3:6e:be:11:7b:36:d5:f4:00:0a:39:e6:e5:df:a5:
42:f8:d1:e2:ce:4e:61:b6:9f:bb:79:a4:bf:47:11:
95:29:6e:58:4f:d5:d4:5c:d8:52:a4:15:fd:5d:be:
2c:c9:3f:26:06:2b:ef:23:63:2c:35:cd:31:4a:8e:
a0:cb:38:40:5e:a0:dc:58:b0:b2:fe:ae:b5:e6:9c:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AB:DC:73:FB:EF:FF:F1:00:74:B6:A9:44:56:08:61:43:AF:4B:60
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/tavcc_vv__EAdLapRFYIYUOvS2A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.79.104.0/22
210.79.124.0/22
211.149.36.0/22
211.149.44.0/22
211.149.56.0/22
211.149.72.0/22
211.149.84.0/22
Signature Algorithm: sha256WithRSAEncryption
98:99:d8:53:35:71:4b:66:99:e6:95:f7:bf:0a:7f:7f:ae:37:
4c:5a:c4:34:3f:8f:8c:73:ae:6f:5b:18:f0:56:d4:ed:ab:92:
7f:ce:1d:1a:48:86:8d:40:79:99:20:cc:e9:ad:a6:a2:36:1e:
1c:c5:23:19:53:e1:95:b0:47:f3:1d:97:2f:18:25:c5:9f:32:
a9:1b:e3:a4:0f:76:d4:20:16:7f:75:49:d1:d2:c2:00:97:d8:
80:66:5b:14:71:96:51:10:b8:74:41:f9:4c:e4:ec:59:8b:90:
d7:15:7c:6c:d5:3b:16:c4:9c:67:2b:77:cf:10:d8:13:a0:03:
fb:68:31:4c:99:df:fd:29:78:7e:ce:ad:d1:75:1c:1b:78:bb:
00:80:a4:09:ed:42:c1:ff:a8:0d:8e:56:1f:c9:36:e6:57:e6:
5f:df:29:a9:93:2f:26:c4:6f:e3:54:df:60:97:0d:60:e2:5b:
72:80:37:b1:26:c1:cf:bd:ad:e8:9a:8e:cf:f4:f4:06:db:1c:
2d:a8:fb:13:67:13:8d:73:8b:89:4e:e8:b2:24:d7:64:ca:6f:
fe:70:fa:e9:5d:35:8b:66:a6:65:ce:52:ce:fb:00:b2:51:f9:
bd:01:75:82:b9:06:88:cb:29:5e:61:00:49:bd:65:bf:c4:f7:
4b:5c:2f:f1
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzA1MTIw
OTQ0MThaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKEI1QUJEQzczRkJFRkZG
RjEwMDc0QjZBOTQ0NTYwODYxNDNBRjRCNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJzhheH3Qu9iCs0QI0xg7G/WmFSzkUOkh65VwYIt1lI9ySBeHg
8OgKSTPaFctXl77NWJNA1d26bqeVCu7KP2tpLHiuRwJvkFAqLi5JUTWMMgRBGJY+
rmuVEqRxmWf8y5Xm0j0c1FCtqTNIwtQkTb0mFwK/YCz/V3PFS6H1o7aqZHyKHByb
sHAQoFvI4xcZBJfVizIktbSiwURPIGJxCfDMM75ZGRXUPLi3mHfzF2XqOI8USbNu
vhF7NtX0AAo55uXfpUL40eLOTmG2n7t5pL9HEZUpblhP1dRc2FKkFf1dvizJPyYG
K+8jYyw1zTFKjqDLOEBeoNxYsLL+rrXmnK1nAgMBAAGjggIVMIICETAdBgNVHQ4E
FgQUtavcc/vv//EAdLapRFYIYUOvS2AwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3RhdmNjX3Z2X19FQWRM
YXBSRllJWVVPdlMyQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwQwYIKwYBBQUHAQcBAf8ENDAyMDAEAgABMCoD
BALST2gDBALST3wDBALTlSQDBALTlSwDBALTlTgDBALTlUgDBALTlVQwDQYJKoZI
hvcNAQELBQADggEBAJiZ2FM1cUtmmeaV978Kf3+uN0xaxDQ/j4xzrm9bGPBW1O2r
kn/OHRpIho1AeZkgzOmtpqI2HhzFIxlT4ZWwR/Mdly8YJcWfMqkb46QPdtQgFn91
SdHSwgCX2IBmWxRxllEQuHRB+Uzk7FmLkNcVfGzVOxbEnGcrd88Q2BOgA/toMUyZ
3/0peH7OrdF1HBt4uwCApAntQsH/qA2OVh/JNuZX5l/fKamTLybEb+NU32CXDWDi
W3KAN7Emwc+9reiajs/09AbbHC2o+xNnE41zi4lO6LIk12TKb/5w+uldNYtmpmXO
Us77ALJR+b0BdYK5BojLKV5hAEm9Zb/E90tcL/E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org