Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/kCbz-pzL0ukT0gcn34oTNOKGhhY.roa
File: kCbz-pzL0ukT0gcn34oTNOKGhhY.roa (raw, json)
Hash identifier: 1BTd1L63NWrvrBg8wv03pctw5rjfyrzat3r9HXk2wP0=
Subject key identifier: 90:26:F3:FA:9C:CB:D2:E9:13:D2:07:27:DF:8A:13:34:E2:86:86:16
Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Certificate serial: 01D3
Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/kCbz-pzL0ukT0gcn34oTNOKGhhY.roa
Signing time: Fri 31 Dec 2021 06:50:03 +0000
ROA not before: Fri 31 Dec 2021 06:50:03 +0000
ROA not after: Thu 06 Oct 2022 05:53:12 +0000
asID: 45090
IP address blocks: 124.220.0.0/14 maxlen: 24
175.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647
Validity
Not Before: Dec 31 06:50:03 2021 GMT
Not After : Oct 6 05:53:12 2022 GMT
Subject: CN=9026F3FA9CCBD2E913D20727DF8A1334E2868616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:50:18:43:1f:5a:ab:8e:2c:7d:99:5c:be:
66:e9:e5:a7:2a:c2:c0:48:72:c9:e4:63:e1:bd:dd:
04:ba:60:43:7d:13:b7:bb:60:a3:73:82:bc:08:e7:
7b:e6:c4:e5:d8:8c:2c:05:dd:8a:1f:5e:ea:4f:7a:
fa:9b:78:28:ee:cc:ae:3e:a1:40:06:1d:02:cb:11:
2d:dc:c8:a5:1b:f5:fe:0a:d2:14:46:86:70:03:26:
55:8f:90:ce:72:d1:09:48:bc:dd:e9:92:84:a0:47:
97:fd:24:de:1f:2e:fc:fa:b1:b0:1a:9a:9b:49:5e:
35:b6:50:6b:93:38:61:98:75:3c:a3:05:96:51:51:
cd:3f:fd:24:2f:89:ca:39:7f:db:37:65:f6:18:b5:
d8:07:6e:ca:e9:a0:7d:b3:ae:7c:a1:f2:bd:f6:f4:
86:e6:08:ff:f7:fd:cf:1f:78:b2:67:d9:57:e8:18:
83:4c:a2:5e:67:42:2e:64:c3:cf:04:20:0a:0f:12:
9e:73:9c:28:79:2c:a1:f4:68:7f:c8:60:25:b3:4f:
6b:04:d4:ac:aa:95:9b:5a:25:23:ef:31:b8:71:d2:
43:9c:c6:d3:e2:de:47:c7:31:67:27:cf:85:65:d2:
5d:45:41:f3:a8:3c:df:97:95:dc:d8:03:38:3d:cc:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:26:F3:FA:9C:CB:D2:E9:13:D2:07:27:DF:8A:13:34:E2:86:86:16
X509v3 Authority Key Identifier:
keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/kCbz-pzL0ukT0gcn34oTNOKGhhY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.220.0.0/14
175.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:1f:18:2c:fe:1e:04:96:ad:0f:22:bd:d2:29:d5:2e:09:9d:
c2:69:fd:31:8a:98:62:c8:97:96:ff:96:55:c8:b1:e4:4c:90:
31:e5:92:5b:11:16:39:36:88:c3:1e:8b:20:65:83:a3:15:71:
2c:68:33:22:29:e4:2e:57:b8:71:b8:85:26:9f:b3:00:5a:f5:
18:c5:03:97:d3:ea:6c:0f:ed:10:b3:bf:2e:3a:92:0f:86:1f:
6d:e7:4a:f7:a1:ba:fc:ca:ce:61:b2:7d:d2:19:60:d7:45:9e:
71:4a:13:2e:89:8b:b6:6c:26:ce:78:31:9e:86:04:f0:67:df:
ab:c8:1d:29:96:1c:71:d3:e5:84:98:2f:5a:e7:51:04:05:fe:
39:00:c6:d1:b7:ce:32:01:77:d5:94:06:17:de:43:69:af:ee:
eb:90:78:33:14:bd:12:b5:03:61:b3:0e:ff:15:e2:b8:56:d0:
1b:2f:4e:b0:6d:77:0b:1a:df:11:f4:ae:9e:b7:c3:7f:53:6e:
9a:94:30:29:4e:ae:78:80:06:75:93:7f:9b:f5:cc:f5:a9:47:
ff:f8:ea:5f:b6:0a:6a:31:a7:89:b3:81:7b:ba:c3:cc:e7:b0:
29:17:53:18:6c:8e:bb:33:18:4e:17:9a:a7:39:0a:4e:f8:e0:
5b:0f:4d:c1
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRE
QzIwRDk2MTJDNUI3NzQ5OUE2RDIyM0E2NTJCMkUzOEIxMTY0NzAeFw0yMTEyMzEw
NjUwMDNaFw0yMjEwMDYwNTUzMTJaMDMxMTAvBgNVBAMTKDkwMjZGM0ZBOUNDQkQy
RTkxM0QyMDcyN0RGOEExMzM0RTI4Njg2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDc3FAYQx9aq44sfZlcvmbp5acqwsBIcsnkY+G93QS6YEN9E7e7
YKNzgrwI53vmxOXYjCwF3YofXupPevqbeCjuzK4+oUAGHQLLES3cyKUb9f4K0hRG
hnADJlWPkM5y0QlIvN3pkoSgR5f9JN4fLvz6sbAamptJXjW2UGuTOGGYdTyjBZZR
Uc0//SQvico5f9s3ZfYYtdgHbsrpoH2zrnyh8r329IbmCP/3/c8feLJn2VfoGINM
ol5nQi5kw88EIAoPEp5znCh5LKH0aH/IYCWzT2sE1KyqlZtaJSPvMbhx0kOcxtPi
3kfHMWcnz4Vl0l1FQfOoPN+XldzYAzg9zNkJAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUkCbz+pzL0ukT0gcn34oTNOKGhhYwHwYDVR0jBBgwFoAUZNwg2WEsW3dJmm0i
OmUrLjixFkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2
L1pOd2cyV0VzVzNkSm1tMGlPbVVyTGppeEZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L2tDYnotcHpMMHVrVDBn
Y24zNG9UTk9LR2hoWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwIwYIKwYBBQUHAQcBAf8EFDASMBAEAgABMAoD
AwJ83AMDAK+yMA0GCSqGSIb3DQEBCwUAA4IBAQAbHxgs/h4Elq0PIr3SKdUuCZ3C
af0xiphiyJeW/5ZVyLHkTJAx5ZJbERY5NojDHosgZYOjFXEsaDMiKeQuV7hxuIUm
n7MAWvUYxQOX0+psD+0Qs78uOpIPhh9t50r3obr8ys5hsn3SGWDXRZ5xShMuiYu2
bCbOeDGehgTwZ9+ryB0plhxx0+WEmC9a51EEBf45AMbRt84yAXfVlAYX3kNpr+7r
kHgzFL0StQNhsw7/FeK4VtAbL06wbXcLGt8R9K6et8N/U26alDApTq54gAZ1k3+b
9cz1qUf/+OpftgpqMaeJs4F7usPM57ApF1MYbI67MxhOF5qnOQpO+OBbD03B
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org