Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/pP1D-_BF5eenGkkQLWa4ph-ADSI.roa
File: pP1D-_BF5eenGkkQLWa4ph-ADSI.roa (raw, json)
Hash identifier: rnlyb+NXqGX1TVJ2Y+Ia4A/ss0zFCRzy5qaMJ+E4Nq0=
Subject key identifier: A4:FD:43:FB:F0:45:E5:E7:A7:1A:49:10:2D:66:B8:A6:1F:80:0D:22
Certificate issuer: /CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Certificate serial: 0699
Authority key identifier: 7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/pP1D-_BF5eenGkkQLWa4ph-ADSI.roa
Signing time: Mon 25 Apr 2022 04:08:42 +0000
ROA not before: Mon 25 Apr 2022 04:08:42 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 22773
IP address blocks: 101.49.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Validity
Not Before: Apr 25 04:08:42 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=A4FD43FBF045E5E7A71A49102D66B8A61F800D22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:8c:79:5f:3e:a2:2a:bf:6b:eb:d6:fe:06:
01:04:4b:e7:cf:f8:03:37:36:6c:23:87:d2:ba:99:
35:10:eb:64:5f:b7:c4:9b:c0:2c:11:ff:75:ff:6a:
5b:cc:44:e4:1e:fe:23:10:9a:f9:8e:1d:d7:bd:68:
1b:e4:11:65:a7:ea:e7:90:8c:71:5b:b8:d0:b5:6e:
27:10:ad:2d:07:2d:64:bf:e7:bc:7b:45:c9:58:00:
d2:4f:ee:b0:7f:94:21:53:e8:10:2b:ab:cf:73:62:
a0:fe:ee:e0:4d:02:e6:36:6d:41:70:21:f7:51:f3:
49:9c:af:0c:ea:cb:ba:db:1b:af:fc:a0:5b:29:a0:
ed:10:d2:2b:47:cf:f7:75:4c:b6:cd:d8:eb:d5:dd:
50:fd:4b:d4:ec:95:e1:c2:3c:2d:3d:72:57:8f:14:
ab:60:bc:8e:af:32:02:f2:22:c8:65:85:78:6c:3e:
f7:56:e3:76:66:b1:75:f3:9b:36:ac:35:50:66:51:
3a:89:6a:86:2f:69:55:76:29:d0:47:14:a9:82:bc:
42:4f:14:22:87:66:3b:9e:51:ec:26:e6:26:14:a4:
6e:9d:0c:19:cd:02:cf:03:be:b4:32:66:ca:52:f8:
b7:d8:d1:77:b6:d8:88:ba:5b:a0:8e:46:7c:07:c8:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:43:FB:F0:45:E5:E7:A7:1A:49:10:2D:66:B8:A6:1F:80:0D:22
X509v3 Authority Key Identifier:
keyid:7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/fxbsYdIUp0ANAGShh6E9zMHnhUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/pP1D-_BF5eenGkkQLWa4ph-ADSI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.49.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:90:3e:b8:d8:51:e7:82:57:51:2c:0a:81:e6:46:b6:97:c6:
46:cf:c0:ba:aa:8d:7a:0c:d3:ef:fb:22:6c:7a:d5:c8:56:e5:
71:35:9e:b0:54:40:37:7f:8e:b8:d4:0d:29:63:4d:c8:a5:16:
36:79:0f:ab:37:fb:91:74:8d:94:5c:8f:b8:8b:96:9f:8f:98:
f7:d8:fb:bc:a6:0a:b6:45:cf:af:61:f0:14:9d:73:8c:8a:36:
60:b3:74:6a:8e:ad:ec:36:2a:5d:13:5a:90:ce:8c:0c:8a:7a:
20:aa:4f:4c:96:8b:6b:f5:ba:0e:4c:f8:41:e6:81:3a:a0:ca:
95:4f:d4:5b:e7:25:9b:01:c2:e4:0a:1b:56:b4:10:5c:27:6d:
a5:32:b6:46:97:33:66:e1:a1:d9:32:2e:e3:b3:a9:11:55:12:
00:53:91:f3:fc:5c:9a:d5:f3:0a:f1:a6:26:d8:69:45:ef:71:
bf:1b:d3:a0:78:45:8a:e8:6d:e4:02:19:91:34:25:54:b5:96:
64:b6:82:72:e4:c4:75:7d:e7:9c:b9:b4:ee:ce:32:c6:0e:02:
db:9f:f7:96:fb:e1:96:b1:70:92:a6:7e:75:5f:c8:af:16:fb:
c6:42:64:1f:a1:72:4d:bb:05:b1:46:7e:ce:fc:bd:89:cd:e8:
13:3e:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org