Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/BsCBHI4Rf9v0zbX-SfUkTI09g-s.roa
File: BsCBHI4Rf9v0zbX-SfUkTI09g-s.roa (raw, json)
Hash identifier: 7crToXTdZX+mXWYpZqVtB4Wz7b29CnCKk1S2B5a1eE4=
Subject key identifier: 06:C0:81:1C:8E:11:7F:DB:F4:CD:B5:FE:49:F5:24:4C:8D:3D:83:EB
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 0E
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/BsCBHI4Rf9v0zbX-SfUkTI09g-s.roa
Signing time: Thu 27 May 2021 05:02:01 +0000
ROA not before: Thu 27 May 2021 05:02:01 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 4812
IP address blocks: 43.254.152.0/24 maxlen: 24
103.5.192.0/22 maxlen: 24
103.24.116.0/24 maxlen: 24
103.24.118.0/23 maxlen: 24
150.242.238.0/23 maxlen: 24
202.89.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: May 27 05:02:01 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=06C0811C8E117FDBF4CDB5FE49F5244C8D3D83EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:cf:89:71:9e:39:61:ed:8c:d6:fa:bb:89:
5d:af:28:1d:61:fb:18:bd:b0:cf:68:ae:a1:c7:74:
eb:0e:47:21:1d:b9:4d:ce:14:e0:e3:dc:19:ed:61:
37:b6:e7:7f:12:58:28:81:a9:0b:d1:e8:79:f7:8e:
9f:73:e1:f1:f0:ec:bb:5c:c3:c4:78:ed:0e:ef:d1:
d2:34:14:b1:70:fc:7a:4b:24:f0:b4:79:22:51:fd:
f7:54:9f:f0:6b:f3:c6:50:37:8e:47:70:02:4d:b7:
fa:5a:86:10:93:e6:8f:6e:6c:55:45:41:78:ad:47:
e6:1f:07:17:d0:0e:86:5b:91:c2:57:b3:10:2d:ae:
82:ae:39:98:32:7f:6b:8d:47:51:5a:60:88:62:28:
f7:4f:de:47:a2:36:00:6a:b3:19:0a:cf:4e:27:c1:
97:c5:5f:ed:10:ee:02:b9:cc:e7:8f:a7:d1:31:08:
e3:5e:62:b8:11:2c:96:d1:6f:78:16:bd:41:83:77:
e7:27:84:39:5a:6b:85:3d:98:21:c9:eb:5f:85:63:
08:3f:d6:9e:d4:c7:e0:d4:5d:65:f3:90:d2:45:01:
9f:63:35:b3:7d:c2:c1:af:d3:6f:cd:36:42:58:35:
ca:ca:8a:e6:8e:e9:ea:38:02:55:54:4a:d5:f1:65:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C0:81:1C:8E:11:7F:DB:F4:CD:B5:FE:49:F5:24:4C:8D:3D:83:EB
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/BsCBHI4Rf9v0zbX-SfUkTI09g-s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.152.0/24
103.5.192.0/22
103.24.116.0/24
103.24.118.0/23
150.242.238.0/23
202.89.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:22:f2:e8:34:8c:4e:98:3f:62:41:ef:6c:97:a4:b2:14:51:
d2:17:a5:09:85:db:c4:e2:a0:be:57:cb:a9:37:97:b3:1b:e5:
71:4e:65:a1:3c:d9:4a:0a:7b:aa:86:b0:ea:71:cd:10:18:36:
43:e4:8b:37:71:24:d9:ee:f4:4f:20:f7:1d:9e:3c:fd:ad:5d:
c6:72:d0:b8:97:19:fb:a2:df:97:fd:80:f0:d2:00:e1:bf:01:
cb:7f:31:23:c1:43:d2:05:20:6c:05:03:d4:5b:2d:2e:04:15:
8b:94:d6:ff:56:c0:3f:c8:d0:8c:af:5b:86:2c:f0:60:d5:0b:
ae:c2:e0:5f:f9:5a:86:e3:20:c8:2e:8f:a2:ae:fc:f4:e9:c7:
bb:a8:1a:83:8b:a4:a6:66:fe:bb:b0:26:34:1a:39:a6:28:d1:
a9:62:3d:bc:8b:aa:4c:da:66:17:b6:20:a1:e5:20:e3:8a:1e:
3f:27:d4:62:98:f2:16:aa:cf:ae:61:00:31:92:8b:ce:ca:6f:
25:22:c6:7c:07:66:6f:df:b4:94:90:e5:c2:e6:61:b8:65:96:
76:52:a6:8e:97:b5:3b:aa:64:63:1e:5b:89:b1:7c:ff:c1:96:
05:85:8b:46:60:7b:0a:71:5d:9a:eb:50:89:80:5a:e7:ab:b4:
64:85:21:65
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOTRB
Q0MzMTM5MzVBRjU0MzNDMkI5NDU2RDc0MjY4MkY5NjFFQUJCMB4XDTIxMDUyNzA1
MDIwMVoXDTIyMDUyNzA0NTk1MlowMzExMC8GA1UEAxMoMDZDMDgxMUM4RTExN0ZE
QkY0Q0RCNUZFNDlGNTI0NEM4RDNEODNFQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALymz4lxnjlh7YzW+ruJXa8oHWH7GL2wz2iuocd06w5HIR25Tc4U
4OPcGe1hN7bnfxJYKIGpC9HoefeOn3Ph8fDsu1zDxHjtDu/R0jQUsXD8eksk8LR5
IlH991Sf8GvzxlA3jkdwAk23+lqGEJPmj25sVUVBeK1H5h8HF9AOhluRwlezEC2u
gq45mDJ/a41HUVpgiGIo90/eR6I2AGqzGQrPTifBl8Vf7RDuArnM54+n0TEI415i
uBEsltFveBa9QYN35yeEOVprhT2YIcnrX4VjCD/WntTH4NRdZfOQ0kUBn2M1s33C
wa/Tb802Qlg1ysqK5o7p6jgCVVRK1fFlu+kCAwEAAaOCAg8wggILMB0GA1UdDgQW
BBQGwIEcjhF/2/TNtf5J9SRMjT2D6zAfBgNVHSMEGDAWgBQZSswxOTWvVDPCuUVt
dCaC+WHquzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Nzcv
R1VyTU1UazFyMVF6d3JsRmJYUW1ndmxoNnJzLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9HVXJNTVRrMXIxUXp3cmxGYlhRbWd2bGg2cnMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81NzcvQnNDQkhJNFJmOXYwemJY
LVNmVWtUSTA5Zy1zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAME
ACv+mAMEAmcFwAMEAGcYdAMEAWcYdgMEAZby7gMEAMpZYDANBgkqhkiG9w0BAQsF
AAOCAQEAPSLy6DSMTpg/YkHvbJekshRR0helCYXbxOKgvlfLqTeXsxvlcU5loTzZ
Sgp7qoaw6nHNEBg2Q+SLN3Ek2e70TyD3HZ48/a1dxnLQuJcZ+6Lfl/2A8NIA4b8B
y38xI8FD0gUgbAUD1FstLgQVi5TW/1bAP8jQjK9bhizwYNULrsLgX/lahuMgyC6P
oq789OnHu6gag4ukpmb+u7AmNBo5pijRqWI9vIuqTNpmF7YgoeUg44oePyfUYpjy
FqrPrmEAMZKLzspvJSLGfAdmb9+0lJDlwuZhuGWWdlKmjpe1O6pkYx5bibF8/8GW
BYWLRmB7CnFdmutQiYBa56u0ZIUhZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org