Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/dH_wFHgpHzI6gXNn32R9x5a9qmw.roa
File: dH_wFHgpHzI6gXNn32R9x5a9qmw.roa (raw, json)
Hash identifier: GSOfySQ3kmdNS879E6aLG86Mk8JxQSN0mKyBOcEfcZ4=
Subject key identifier: 74:7F:F0:14:78:29:1F:32:3A:81:73:67:DF:64:7D:C7:96:BD:AA:6C
Certificate issuer: /CN=BEE006E22E296489D5460AB8B3FE998B97475A5D
Certificate serial: 05
Authority key identifier: BE:E0:06:E2:2E:29:64:89:D5:46:0A:B8:B3:FE:99:8B:97:47:5A:5D
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vuAG4i4pZInVRgq4s_6Zi5dHWl0.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/dH_wFHgpHzI6gXNn32R9x5a9qmw.roa
Signing time: Thu 27 May 2021 05:07:21 +0000
ROA not before: Thu 27 May 2021 05:07:21 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 56282
IP address blocks: 211.155.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEE006E22E296489D5460AB8B3FE998B97475A5D
Validity
Not Before: May 27 05:07:21 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=747FF01478291F323A817367DF647DC796BDAA6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:d4:64:8d:1d:1d:3f:36:d4:75:80:bc:93:
99:fb:b2:c1:4e:e9:62:7e:aa:18:78:96:ad:bc:ff:
f9:04:b5:de:0f:0e:20:d6:5e:dd:73:f0:5e:ae:d9:
af:3a:5d:ff:60:c0:f9:2b:91:f4:f9:89:67:41:d5:
2b:3f:8d:50:3f:89:e6:04:aa:02:ef:35:b5:1a:f4:
2d:df:30:4d:95:88:0b:a4:7c:be:46:45:c0:a8:7f:
78:40:a4:cf:77:c0:d7:c4:95:19:4a:49:d9:de:e4:
44:25:bf:79:66:f0:9f:ac:49:7c:9d:b3:20:ba:5f:
2a:56:a0:81:f5:9c:65:fe:ee:5d:98:4b:14:32:4c:
c5:ad:95:a4:a0:b0:e8:c4:16:5f:02:af:a9:b1:bf:
25:e2:fa:5c:1a:53:ba:c2:d8:c3:b5:91:5b:1d:f8:
31:08:40:2b:1f:9c:79:8b:a7:fa:cd:15:48:f4:39:
77:f1:ca:9f:71:b5:e8:03:58:0e:3e:b3:7d:43:c3:
15:e4:63:f8:df:b9:da:28:67:20:bb:50:90:26:51:
4a:76:18:1f:fb:69:2b:da:d4:e3:d6:5d:6a:88:1d:
dc:b8:23:68:e6:4d:91:78:5d:fe:4b:ed:a5:8f:e2:
2f:c8:6e:39:99:d5:dc:cc:36:0d:13:0b:8f:54:48:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7F:F0:14:78:29:1F:32:3A:81:73:67:DF:64:7D:C7:96:BD:AA:6C
X509v3 Authority Key Identifier:
keyid:BE:E0:06:E2:2E:29:64:89:D5:46:0A:B8:B3:FE:99:8B:97:47:5A:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/vuAG4i4pZInVRgq4s_6Zi5dHWl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vuAG4i4pZInVRgq4s_6Zi5dHWl0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/dH_wFHgpHzI6gXNn32R9x5a9qmw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.155.88.0/21
Signature Algorithm: sha256WithRSAEncryption
93:91:4d:b2:b8:a0:b8:61:4c:f5:d6:d3:57:59:80:9a:7e:fd:
7b:58:fe:78:3a:bb:00:20:5a:c1:09:08:af:87:b1:d5:99:73:
b1:ad:bc:58:11:fe:29:df:56:de:b2:cd:58:4c:21:90:c6:a2:
2c:d3:d1:aa:d8:87:db:ca:8f:dd:cf:a1:74:6c:af:cf:da:bd:
72:23:b8:52:e5:75:48:b3:c1:8b:fb:cd:48:25:fc:08:98:c4:
61:ae:b0:1f:c9:56:1f:73:7f:fb:3b:01:43:a2:22:05:44:f1:
aa:43:24:62:58:04:dd:71:6d:45:87:9a:d9:83:45:67:99:92:
be:65:8f:be:05:97:e4:a4:3a:63:66:60:86:86:78:ee:f6:4a:
5b:37:6a:26:bc:2d:88:34:d8:a3:b7:f3:91:b5:07:d0:b4:56:
45:11:35:13:a4:16:cf:02:b2:c5:6f:10:92:c7:4c:39:b8:d7:
80:98:95:41:4f:0c:35:a4:69:b6:8d:b3:08:a1:08:39:e0:d8:
37:63:e6:e9:5e:60:e8:f7:78:17:20:a8:45:8b:49:f5:1c:60:
9c:32:17:80:c2:ba:a0:e8:bd:73:44:82:ef:dd:fd:5d:58:c0:
f3:35:74:1c:f9:9b:14:f8:3e:b3:cf:d5:10:8f:60:c0:49:f9:
a6:3b:0c:00
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCRUUw
MDZFMjJFMjk2NDg5RDU0NjBBQjhCM0ZFOTk4Qjk3NDc1QTVEMB4XDTIxMDUyNzA1
MDcyMVoXDTIyMDUyNzA0NTk1MlowMzExMC8GA1UEAxMoNzQ3RkYwMTQ3ODI5MUYz
MjNBODE3MzY3REY2NDdEQzc5NkJEQUE2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKTv1GSNHR0/NtR1gLyTmfuywU7pYn6qGHiWrbz/+QS13g8OINZe
3XPwXq7Zrzpd/2DA+SuR9PmJZ0HVKz+NUD+J5gSqAu81tRr0Ld8wTZWIC6R8vkZF
wKh/eECkz3fA18SVGUpJ2d7kRCW/eWbwn6xJfJ2zILpfKlaggfWcZf7uXZhLFDJM
xa2VpKCw6MQWXwKvqbG/JeL6XBpTusLYw7WRWx34MQhAKx+ceYun+s0VSPQ5d/HK
n3G16ANYDj6zfUPDFeRj+N+52ihnILtQkCZRSnYYH/tpK9rU49Zdaogd3LgjaOZN
kXhd/kvtpY/iL8huOZnV3Mw2DRMLj1RIOOMCAwEAAaOCAfEwggHtMB0GA1UdDgQW
BBR0f/AUeCkfMjqBc2ffZH3Hlr2qbDAfBgNVHSMEGDAWgBS+4AbiLilkidVGCriz
/pmLl0daXTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81NjEv
dnVBRzRpNHBaSW5WUmdxNHNfNlppNWRIV2wwLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC92dUFHNGk0cFpJblZSZ3E0c182Wmk1ZEhXbDAuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81NjEvZEhfd0ZIZ3BIekk2Z1hO
bjMyUjl4NWE5cW13LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
A9ObWDANBgkqhkiG9w0BAQsFAAOCAQEAk5FNsriguGFM9dbTV1mAmn79e1j+eDq7
ACBawQkIr4ex1Zlzsa28WBH+Kd9W3rLNWEwhkMaiLNPRqtiH28qP3c+hdGyvz9q9
ciO4UuV1SLPBi/vNSCX8CJjEYa6wH8lWH3N/+zsBQ6IiBUTxqkMkYlgE3XFtRYea
2YNFZ5mSvmWPvgWX5KQ6Y2ZghoZ47vZKWzdqJrwtiDTYo7fzkbUH0LRWRRE1E6QW
zwKyxW8QksdMObjXgJiVQU8MNaRpto2zCKEIOeDYN2Pm6V5g6Pd4FyCoRYtJ9Rxg
nDIXgMK6oOi9c0SC7939XVjA8zV0HPmbFPg+s8/VEI9gwEn5pjsMAA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org