Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/497/tTG9gCKr3pqztoZvkMHYda6WmEQ.roa
File: tTG9gCKr3pqztoZvkMHYda6WmEQ.roa (raw, json)
Hash identifier: fDSgJ8YFJdcUsLknjl1CVd9GQgeijsB4ACFtGidS26k=
Subject key identifier: B5:31:BD:80:22:AB:DE:9A:B3:B6:86:6F:90:C1:D8:75:AE:96:98:44
Certificate issuer: /CN=2744F7A0B1932B675EB31FD14CDA50255D288A5C
Certificate serial: 027D
Authority key identifier: 27:44:F7:A0:B1:93:2B:67:5E:B3:1F:D1:4C:DA:50:25:5D:28:8A:5C
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J0T3oLGTK2desx_RTNpQJV0oilw.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/tTG9gCKr3pqztoZvkMHYda6WmEQ.roa
Signing time: Thu 30 Sep 2021 06:12:53 +0000
ROA not before: Thu 30 Sep 2021 06:12:53 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 56002
IP address blocks: 103.12.232.0/22 maxlen: 24
103.12.232.0/24 maxlen: 24
103.12.233.0/24 maxlen: 24
103.12.234.0/24 maxlen: 24
103.12.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2744F7A0B1932B675EB31FD14CDA50255D288A5C
Validity
Not Before: Sep 30 06:12:53 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=B531BD8022ABDE9AB3B6866F90C1D875AE969844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:ea:bb:d4:12:56:34:4d:9a:be:93:bf:31:
a3:36:ee:81:f8:97:34:94:69:94:3f:2e:61:3e:99:
b4:3a:e9:54:4f:e3:61:7a:42:77:1e:2e:7c:e1:e8:
8d:d5:c2:94:e4:59:66:c8:e7:29:57:e2:0a:e3:4f:
f4:27:c0:4b:65:df:84:cf:85:36:0c:76:d4:fd:b8:
ac:e5:1c:a1:77:87:75:df:0d:7c:14:3d:22:a7:75:
01:94:ca:10:49:b8:f9:09:20:d4:cc:e4:d5:62:1d:
4c:8c:a7:5a:5e:da:f5:52:96:23:5a:c9:27:b6:60:
9b:80:6e:87:2e:2c:7a:5d:d9:26:61:23:53:40:6d:
37:15:1d:92:ab:ee:6e:01:57:e7:d4:6b:72:63:5b:
aa:af:ab:ca:ef:97:76:36:ac:92:fd:a8:3a:4d:cd:
7b:b8:e9:94:a9:b7:b9:33:c7:ae:f7:b8:dd:ae:1b:
12:22:83:a2:2f:96:0e:f0:e9:6e:9f:89:cb:3b:ea:
e5:3b:2c:76:d7:15:38:0f:cf:56:aa:21:0d:e5:e8:
d9:fa:7d:7b:dd:81:ce:bd:cb:17:b7:b4:86:b1:83:
cf:66:da:63:16:d0:f1:58:e6:cf:f3:b6:53:f8:4c:
98:51:e8:f0:ef:f2:9b:4f:a0:12:2a:a9:00:19:8e:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:31:BD:80:22:AB:DE:9A:B3:B6:86:6F:90:C1:D8:75:AE:96:98:44
X509v3 Authority Key Identifier:
keyid:27:44:F7:A0:B1:93:2B:67:5E:B3:1F:D1:4C:DA:50:25:5D:28:8A:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/J0T3oLGTK2desx_RTNpQJV0oilw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J0T3oLGTK2desx_RTNpQJV0oilw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/tTG9gCKr3pqztoZvkMHYda6WmEQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.232.0/22
Signature Algorithm: sha256WithRSAEncryption
29:a7:73:73:3e:e9:6e:f9:1e:31:13:dd:e4:af:dd:42:b5:3b:
11:4d:e0:05:c5:ef:e6:76:cd:14:3e:84:20:07:7c:bd:51:51:
e8:ab:c7:5e:1a:37:4b:b2:37:3e:f2:14:07:c6:94:a6:66:4a:
dc:a0:f4:b6:4e:10:82:ac:3b:5f:ab:2b:03:a8:ac:64:a7:3a:
90:2f:f8:96:e7:de:55:17:fc:f3:78:7e:75:bb:71:78:f7:92:
98:6a:72:3d:24:b4:22:a1:5c:45:b1:84:4c:b1:6a:2f:4c:2a:
70:f0:10:d2:84:07:2c:9a:b3:bf:be:f6:e1:30:cb:b3:6c:8d:
fc:63:12:0d:30:2c:55:b0:a3:34:60:d9:22:2a:98:2a:6c:84:
50:cb:18:70:b1:85:29:cd:20:17:9e:d2:fc:6b:a0:44:d5:ad:
cb:b4:a7:0e:27:7e:78:c9:6a:da:b8:ce:9b:c7:86:07:81:20:
0e:01:e2:a1:8e:61:a2:d2:d2:a0:7b:fe:b5:23:83:a8:32:15:
8f:b7:f8:a3:cc:5f:5f:c3:41:a4:95:8f:0a:b5:f6:8f:fb:e1:
76:2c:cc:d5:77:65:3f:11:27:7a:ac:3f:11:36:43:4d:33:3e:
70:28:0c:70:94:1c:ae:c3:5d:52:3a:c4:dc:a6:b7:d7:11:93:
61:7b:3d:d8
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc0
NEY3QTBCMTkzMkI2NzVFQjMxRkQxNENEQTUwMjU1RDI4OEE1QzAeFw0yMTA5MzAw
NjEyNTNaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEI1MzFCRDgwMjJBQkRF
OUFCM0I2ODY2RjkwQzFEODc1QUU5Njk4NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGxuq71BJWNE2avpO/MaM27oH4lzSUaZQ/LmE+mbQ66VRP42F6
QnceLnzh6I3VwpTkWWbI5ylX4grjT/QnwEtl34TPhTYMdtT9uKzlHKF3h3XfDXwU
PSKndQGUyhBJuPkJINTM5NViHUyMp1pe2vVSliNaySe2YJuAbocuLHpd2SZhI1NA
bTcVHZKr7m4BV+fUa3JjW6qvq8rvl3Y2rJL9qDpNzXu46ZSpt7kzx673uN2uGxIi
g6Ivlg7w6W6fics76uU7LHbXFTgPz1aqIQ3l6Nn6fXvdgc69yxe3tIaxg89m2mMW
0PFY5s/ztlP4TJhR6PDv8ptPoBIqqQAZjpj9AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUtTG9gCKr3pqztoZvkMHYda6WmEQwHwYDVR0jBBgwFoAUJ0T3oLGTK2desx/R
TNpQJV0oilwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDk3
L0owVDNvTEdUSzJkZXN4X1JUTnBRSlYwb2lsdy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvSjBUM29MR1RLMmRlc3hfUlROcFFKVjBvaWx3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDk3L3RURzlnQ0tyM3BxenRv
WnZrTUhZZGE2V21FUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnDOgwDQYJKoZIhvcNAQELBQADggEBACmnc3M+6W75HjET3eSv3UK1OxFN4AXF
7+Z2zRQ+hCAHfL1RUeirx14aN0uyNz7yFAfGlKZmStyg9LZOEIKsO1+rKwOorGSn
OpAv+Jbn3lUX/PN4fnW7cXj3kphqcj0ktCKhXEWxhEyxai9MKnDwENKEByyas7++
9uEwy7NsjfxjEg0wLFWwozRg2SIqmCpshFDLGHCxhSnNIBee0vxroETVrcu0pw4n
fnjJatq4zpvHhgeBIA4B4qGOYaLS0qB7/rUjg6gyFY+3+KPMX1/DQaSVjwq19o/7
4XYszNV3ZT8RJ3qsPxE2Q00zPnAoDHCUHK7DXVI6xNymt9cRk2F7Pdg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org