Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/acq-3CMmbpRj8EFqPtWDQqtvhFQ.roa
File: acq-3CMmbpRj8EFqPtWDQqtvhFQ.roa (raw, json)
Hash identifier: bpoK7m+fgP8eZoOas22ze/J0KUyQgW1kONU6PQkh8Y0=
Subject key identifier: 69:CA:BE:DC:23:26:6E:94:63:F0:41:6A:3E:D5:83:42:AB:6F:84:54
Certificate issuer: /CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Certificate serial: 06CE
Authority key identifier: 7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/acq-3CMmbpRj8EFqPtWDQqtvhFQ.roa
Signing time: Wed 04 May 2022 13:21:42 +0000
ROA not before: Wed 04 May 2022 13:21:42 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 7018
IP address blocks: 101.49.0.0/18 maxlen: 24
101.49.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1742 (0x6ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Validity
Not Before: May 4 13:21:42 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=69CABEDC23266E9463F0416A3ED58342AB6F8454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:51:ca:40:12:63:de:5f:a8:28:13:47:04:
8f:b3:1c:b1:e2:e9:40:3a:5b:0a:8f:52:10:3d:b8:
b0:61:8f:f3:ac:56:d4:9d:82:3b:17:47:4a:8a:3b:
55:d3:9a:c1:97:ef:1d:f9:71:c2:e9:76:ec:94:42:
ee:e0:5c:53:b2:0b:c7:a8:f2:66:6c:ea:28:03:27:
0e:53:0e:fc:c5:46:00:3f:49:d7:67:13:5e:30:e0:
8e:36:ec:f5:00:32:64:fe:4b:35:d3:9e:fd:6e:c4:
13:e5:fe:68:16:5a:f9:b8:f9:ad:47:dc:60:19:e0:
ba:a8:a8:f8:19:3b:78:51:b6:2a:af:eb:cb:1a:6d:
37:04:6d:e0:71:e2:86:71:4c:2a:9f:3d:bd:64:a3:
0e:c8:09:f0:33:0c:5e:bb:a1:84:a7:ff:ca:80:5f:
97:3f:ff:36:61:a0:11:05:8e:d0:19:61:28:cf:13:
d1:de:9c:fa:0c:ee:68:24:fb:5b:67:37:f6:a5:e7:
1f:23:0d:17:a9:55:da:2b:5f:ae:46:f9:21:82:b1:
e7:a0:83:c1:22:89:34:e0:09:71:ee:8e:26:ec:c5:
01:e7:99:81:0f:f7:f8:6d:4f:5d:c0:e2:59:c9:bc:
5a:cb:e4:19:ae:67:c3:92:27:f4:84:79:f5:6f:a3:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CA:BE:DC:23:26:6E:94:63:F0:41:6A:3E:D5:83:42:AB:6F:84:54
X509v3 Authority Key Identifier:
keyid:7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/fxbsYdIUp0ANAGShh6E9zMHnhUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/acq-3CMmbpRj8EFqPtWDQqtvhFQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.0.0/18
101.49.160.0/19
Signature Algorithm: sha256WithRSAEncryption
55:98:11:3c:43:33:12:1f:73:e6:0d:82:c6:bb:da:f1:52:b9:
b0:e2:ca:4b:26:ea:d8:a9:31:5e:c7:ef:9f:9b:e8:92:05:b6:
73:7b:f1:b2:d1:ad:27:8b:d0:74:02:72:73:88:4c:4a:09:80:
05:e7:af:6d:93:e0:b9:4a:7e:2f:a4:b7:33:67:16:5b:02:e0:
74:af:b5:a3:31:05:d6:1c:31:ea:60:04:d9:27:0b:25:de:85:
64:20:87:94:6e:a6:97:89:12:27:55:e4:f4:ff:07:86:69:16:
61:84:42:2c:01:81:50:0f:03:14:6b:9a:d1:62:77:19:9c:52:
79:0b:0f:65:13:ed:2b:79:a8:4c:df:4e:64:1c:7d:47:2d:c6:
4d:cf:3b:61:be:cb:2a:43:a8:bd:a6:d9:35:eb:b1:35:b2:e7:
35:63:79:65:2b:95:8f:00:f9:0e:e9:35:13:5c:44:f9:8b:b6:
e2:59:80:60:1a:a6:d1:0b:fb:16:05:52:de:79:1b:6d:fe:41:
2f:72:c4:e9:4a:27:c4:b8:1a:6d:c2:73:8c:c8:bf:3d:1b:64:
12:94:57:cd:29:0a:df:d0:59:18:a9:0f:04:75:20:b4:3b:1f:
d8:3b:84:ff:4e:df:f3:47:4d:12:3e:58:34:a7:65:ca:7b:89:
7e:ea:ee:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org