Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/p63wVFUdKV3moiIXTR8yj5uKyzE.roa
File: p63wVFUdKV3moiIXTR8yj5uKyzE.roa (raw, json)
Hash identifier: WBAL/ZKKgl9yO6mm1laMN6mY89CSVw25H5xpSAteI7g=
Subject key identifier: A7:AD:F0:54:55:1D:29:5D:E6:A2:22:17:4D:1F:32:8F:9B:8A:CB:31
Certificate issuer: /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial: 07E3
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/p63wVFUdKV3moiIXTR8yj5uKyzE.roa
Signing time: Thu 26 May 2022 01:30:40 +0000
ROA not before: Thu 26 May 2022 01:30:40 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 138527
IP address blocks: 45.252.8.0/22 maxlen: 24
45.252.12.0/22 maxlen: 24
45.252.16.0/22 maxlen: 24
45.252.20.0/22 maxlen: 24
45.252.24.0/22 maxlen: 24
45.252.28.0/22 maxlen: 24
45.252.32.0/22 maxlen: 24
45.252.36.0/22 maxlen: 24
45.252.40.0/22 maxlen: 24
45.252.44.0/22 maxlen: 24
45.252.48.0/22 maxlen: 24
45.252.100.0/22 maxlen: 24
45.252.144.0/22 maxlen: 24
103.6.228.0/22 maxlen: 24
103.198.224.0/22 maxlen: 24
103.198.232.0/22 maxlen: 24
103.198.236.0/22 maxlen: 24
103.198.240.0/22 maxlen: 24
103.220.248.0/22 maxlen: 24
103.220.252.0/22 maxlen: 24
103.221.0.0/22 maxlen: 24
103.221.4.0/22 maxlen: 24
103.221.8.0/22 maxlen: 24
103.221.12.0/22 maxlen: 24
103.221.16.0/22 maxlen: 24
103.221.20.0/22 maxlen: 24
103.221.24.0/22 maxlen: 24
103.221.28.0/22 maxlen: 24
103.221.32.0/22 maxlen: 24
103.221.36.0/22 maxlen: 24
103.221.40.0/22 maxlen: 24
103.221.44.0/22 maxlen: 24
103.221.48.0/22 maxlen: 24
103.221.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
Validity
Not Before: May 26 01:30:40 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A7ADF054551D295DE6A222174D1F328F9B8ACB31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:c5:ea:34:17:13:08:dc:8f:7c:1c:1c:81:
cb:4f:d9:d6:50:87:e6:e8:7b:82:0e:1a:74:cd:35:
14:ba:87:1a:00:98:98:4b:7d:d0:88:94:af:55:98:
22:51:a3:9b:09:a4:15:83:68:c6:dd:a3:5c:03:01:
bb:32:dc:ad:ff:6f:0f:ee:89:8f:45:be:fb:14:a7:
de:eb:99:35:c9:25:a1:76:9c:bf:0b:79:4d:24:3a:
69:7f:a5:f9:0b:9e:8c:58:a5:a3:43:25:72:cd:3e:
e1:fd:6f:df:1c:d5:69:d2:f0:69:7e:e3:d1:13:00:
f9:42:c7:fc:44:f2:e4:21:70:8a:24:b9:bb:dd:9f:
6a:38:3d:70:42:49:ed:7c:12:32:14:0b:39:d0:b9:
8b:90:c7:6d:d9:5b:3f:6a:77:2e:19:40:d4:99:a4:
e0:a2:c0:2d:f4:41:d6:71:7a:c5:b0:35:1d:48:7d:
e0:38:56:bf:48:24:4b:3d:c3:fc:e3:1c:60:6b:52:
36:4b:9e:38:90:10:a4:84:08:46:aa:80:7b:a5:8b:
2f:d0:90:b0:ec:ed:fc:8d:3a:b8:0a:67:a9:53:c7:
5d:cb:96:48:11:65:df:dd:39:01:a4:5e:d7:83:f3:
93:8d:64:3d:e4:9f:62:78:18:05:43:1c:98:30:85:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:F0:54:55:1D:29:5D:E6:A2:22:17:4D:1F:32:8F:9B:8A:CB:31
X509v3 Authority Key Identifier:
keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/p63wVFUdKV3moiIXTR8yj5uKyzE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.252.8.0-45.252.51.255
45.252.100.0/22
45.252.144.0/22
103.6.228.0/22
103.198.224.0/22
103.198.232.0-103.198.243.255
103.220.248.0-103.221.51.255
103.221.92.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:0b:b1:4a:b9:30:b9:f1:ad:3c:71:f3:df:71:56:6f:3b:07:
6a:7c:d4:7a:a2:d4:05:17:9c:30:96:7d:22:86:e3:eb:e8:fd:
87:ae:90:df:e3:1d:fd:19:5e:dc:c6:3a:b1:4c:db:27:f7:34:
95:59:31:e0:e1:cc:ff:e8:f2:18:b8:db:31:8a:71:ef:c1:8e:
43:58:b8:0f:aa:db:ac:5c:a2:70:af:69:e5:4f:8a:95:61:fb:
1f:08:6a:b1:02:32:df:01:6f:39:bc:91:2c:15:8a:fd:36:22:
a3:19:2e:66:8c:dc:3f:f2:4b:7d:3f:0c:94:4c:dd:08:f2:c9:
bd:32:e1:1e:04:e6:e2:1c:eb:d2:6a:8a:f0:02:aa:0f:01:92:
a4:c8:a7:93:85:81:49:c8:23:e5:a8:07:f0:87:92:41:62:3b:
30:06:b1:8e:d2:44:f4:21:31:b9:cb:d4:87:f9:d5:0c:bf:8c:
6f:fb:b8:ef:4c:42:20:1e:d7:ba:63:e5:cb:8d:9b:bf:19:53:
c8:c4:8c:cb:37:5b:f3:e7:fe:11:73:75:d1:f3:97:d9:20:74:
ba:fb:f1:5c:62:ac:ee:d9:7d:d7:bc:6c:03:8f:dc:f7:cc:38:
cd:0e:6d:2a:0e:89:57:a4:18:4f:a6:30:fc:d3:ba:46:ae:74:
dc:cb:29:3d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTk0
QUNDMzEzOTM1QUY1NDMzQzJCOTQ1NkQ3NDI2ODJGOTYxRUFCQjAeFw0yMjA1MjYw
MTMwNDBaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEE3QURGMDU0NTUxRDI5
NURFNkEyMjIxNzREMUYzMjhGOUI4QUNCMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC48MXqNBcTCNyPfBwcgctP2dZQh+boe4IOGnTNNRS6hxoAmJhL
fdCIlK9VmCJRo5sJpBWDaMbdo1wDAbsy3K3/bw/uiY9FvvsUp97rmTXJJaF2nL8L
eU0kOml/pfkLnoxYpaNDJXLNPuH9b98c1WnS8Gl+49ETAPlCx/xE8uQhcIokubvd
n2o4PXBCSe18EjIUCznQuYuQx23ZWz9qdy4ZQNSZpOCiwC30QdZxesWwNR1IfeA4
Vr9IJEs9w/zjHGBrUjZLnjiQEKSECEaqgHuliy/QkLDs7fyNOrgKZ6lTx13LlkgR
Zd/dOQGkXteD85ONZD3kn2J4GAVDHJgwhQY3AgMBAAGjggIzMIICLzAdBgNVHQ4E
FgQUp63wVFUdKV3moiIXTR8yj5uKyzEwHwYDVR0jBBgwFoAUGUrMMTk1r1QzwrlF
bXQmgvlh6rswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3
L0dVck1NVGsxcjFRendybEZiWFFtZ3ZsaDZycy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvR1VyTU1UazFyMVF6d3JsRmJYUW1ndmxoNnJzLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L3A2M3dWRlVkS1YzbW9p
SVhUUjh5ajV1S3l6RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwYQYIKwYBBQUHAQcBAf8EUjBQME4EAgABMEgw
DAMEAy38CAMEAi38MAMEAi38ZAMEAi38kAMEAmcG5AMEAmfG4DAMAwQDZ8boAwQC
Z8bwMAwDBANn3PgDBAJn3TADBAJn3VwwDQYJKoZIhvcNAQELBQADggEBAB0LsUq5
MLnxrTxx899xVm87B2p81Hqi1AUXnDCWfSKG4+vo/YeukN/jHf0ZXtzGOrFM2yf3
NJVZMeDhzP/o8hi42zGKce/BjkNYuA+q26xconCvaeVPipVh+x8IarECMt8Bbzm8
kSwViv02IqMZLmaM3D/yS30/DJRM3Qjyyb0y4R4E5uIc69JqivACqg8BkqTIp5OF
gUnII+WoB/CHkkFiOzAGsY7SRPQhMbnL1If51Qy/jG/7uO9MQiAe17pj5cuNm78Z
U8jEjMs3W/Pn/hFzddHzl9kgdLr78VxirO7Zfde8bAOP3PfMOM0ObSoOiVekGE+m
MPzTukaudNzLKT0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org