Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/4Zf1bn_jZd0A8xTSxxZ7CR8Yncw.roa
File: 4Zf1bn_jZd0A8xTSxxZ7CR8Yncw.roa (raw, json)
Hash identifier: VkDJ2B50ZxyVfzf+DI+xk9q1ux2UwhNyNkq/9lyTtjg=
Subject key identifier: E1:97:F5:6E:7F:E3:65:DD:00:F3:14:D2:C7:16:7B:09:1F:18:9D:CC
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 54
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/4Zf1bn_jZd0A8xTSxxZ7CR8Yncw.roa
Signing time: Sat 08 May 2021 06:35:44 +0000
ROA not before: Sat 08 May 2021 06:35:44 +0000
ROA not after: Thu 28 Apr 2022 06:28:58 +0000
asID: 59077
IP address blocks: 106.75.128.0/20 maxlen: 20
106.75.144.0/20 maxlen: 20
106.75.160.0/20 maxlen: 20
106.75.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: May 8 06:35:44 2021 GMT
Not After : Apr 28 06:28:58 2022 GMT
Subject: CN=E197F56E7FE365DD00F314D2C7167B091F189DCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:16:99:8a:0f:e7:7d:92:5e:49:c3:51:56:
21:6c:de:71:31:05:34:1f:17:24:1a:5b:f2:2b:ac:
0a:ca:5f:72:6a:b5:cc:42:38:59:af:1f:0d:9d:fd:
44:6e:6f:07:30:f0:cb:42:35:d1:aa:e0:97:d4:53:
06:c5:75:8d:93:24:88:9f:ef:45:b9:21:af:d0:2b:
c2:29:43:52:6b:1d:5d:e0:86:3c:84:72:fc:36:4a:
bc:40:dd:f7:07:4f:4a:6f:2c:81:08:e1:6d:51:c6:
61:1b:5c:46:25:ee:72:a3:1b:06:00:85:59:0a:64:
0a:51:09:61:08:e0:c2:87:00:80:d8:e3:2e:43:0e:
68:ab:ee:23:f1:cf:ab:58:c6:16:51:a9:ad:db:f1:
66:7c:94:a9:e0:43:8b:3e:6b:03:88:98:95:97:b1:
de:f1:93:84:00:68:04:c0:4e:48:cc:24:70:b6:de:
fd:e8:f0:aa:e5:09:4a:6c:b3:fd:f4:99:20:84:9d:
ea:b9:4e:78:84:ff:d7:7f:5b:08:08:74:6f:07:80:
e9:cb:f6:1f:84:46:cc:61:89:3b:e9:71:4e:f3:e2:
b0:b2:5e:87:cf:47:4d:00:f9:d1:49:21:a8:42:41:
9d:5d:69:45:f5:8d:d6:52:3c:26:34:0c:5d:8a:ab:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:F5:6E:7F:E3:65:DD:00:F3:14:D2:C7:16:7B:09:1F:18:9D:CC
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/4Zf1bn_jZd0A8xTSxxZ7CR8Yncw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.128.0/18
Signature Algorithm: sha256WithRSAEncryption
74:eb:c7:72:cc:d1:0d:ec:a7:ab:6f:d4:28:92:68:37:d6:62:
75:cd:f2:b3:80:e5:d0:79:fb:1d:87:e1:29:d8:f8:78:a2:df:
b5:c5:31:d9:33:ef:da:14:cd:68:79:7a:09:12:5b:a3:2d:4f:
c3:13:99:c8:76:95:b3:83:55:a2:59:ca:f8:b0:9d:62:33:cf:
46:6c:c3:81:da:66:f9:54:13:3a:46:6d:df:0f:cb:0a:8c:05:
09:34:89:6d:0f:32:7a:09:1c:25:dd:a6:a2:89:51:52:e5:50:
e4:77:2f:94:a3:46:a4:91:ad:51:de:d1:2e:af:02:c7:b0:13:
b4:b1:d1:e7:cd:90:e8:18:70:32:20:9d:fc:f1:15:f5:59:0e:
85:8b:22:d5:a6:dc:4f:f2:a9:82:ee:4f:61:fd:13:25:68:08:
9d:eb:e8:bf:48:b6:20:b3:92:25:0d:d8:b4:71:a9:f9:31:50:
87:30:6b:51:c5:8c:fe:4e:da:9e:fe:8f:ef:f0:56:3c:aa:0c:
2c:00:cc:8a:c7:0d:7c:14:13:45:01:e7:f2:16:bb:14:c9:67:
a1:a0:99:66:21:af:4e:22:83:61:61:3d:88:58:25:82:0c:82:
94:bb:6e:b8:6f:3f:79:d7:19:e9:1e:16:14:ce:3a:2f:2f:91:
49:78:ab:61
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNUQ3
QzFCMEMyOThFRDE4MzM3MUM5REZBNDlENUI1RkNEREU5ODRGMB4XDTIxMDUwODA2
MzU0NFoXDTIyMDQyODA2Mjg1OFowMzExMC8GA1UEAxMoRTE5N0Y1NkU3RkUzNjVE
RDAwRjMxNEQyQzcxNjdCMDkxRjE4OURDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANG7FpmKD+d9kl5Jw1FWIWzecTEFNB8XJBpb8iusCspfcmq1zEI4
Wa8fDZ39RG5vBzDwy0I10argl9RTBsV1jZMkiJ/vRbkhr9ArwilDUmsdXeCGPIRy
/DZKvEDd9wdPSm8sgQjhbVHGYRtcRiXucqMbBgCFWQpkClEJYQjgwocAgNjjLkMO
aKvuI/HPq1jGFlGprdvxZnyUqeBDiz5rA4iYlZex3vGThABoBMBOSMwkcLbe/ejw
quUJSmyz/fSZIISd6rlOeIT/139bCAh0bweA6cv2H4RGzGGJO+lxTvPisLJeh89H
TQD50UkhqEJBnV1pRfWN1lI8JjQMXYqrP98CAwEAAaOCAfEwggHtMB0GA1UdDgQW
BBThl/Vuf+Nl3QDzFNLHFnsJHxidzDAfBgNVHSMEGDAWgBTl18GwwpjtGDNxyd+k
nVtfzd6YTzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC84MTcv
NWRmQnNNS1k3Umd6Y2NuZnBKMWJYODNlbUU4LmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC81ZGZCc01LWTdSZ3pjY25mcEoxYlg4M2VtRTguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC84MTcvNFpmMWJuX2paZDBBOHhU
U3h4WjdDUjhZbmN3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BmpLgDANBgkqhkiG9w0BAQsFAAOCAQEAdOvHcszRDeynq2/UKJJoN9Zidc3ys4Dl
0Hn7HYfhKdj4eKLftcUx2TPv2hTNaHl6CRJboy1PwxOZyHaVs4NVolnK+LCdYjPP
RmzDgdpm+VQTOkZt3w/LCowFCTSJbQ8yegkcJd2moolRUuVQ5HcvlKNGpJGtUd7R
Lq8Cx7ATtLHR582Q6BhwMiCd/PEV9VkOhYsi1abcT/Kpgu5PYf0TJWgInevov0i2
ILOSJQ3YtHGp+TFQhzBrUcWM/k7anv6P7/BWPKoMLADMiscNfBQTRQHn8ha7FMln
oaCZZiGvTiKDYWE9iFglggyClLtuuG8/edcZ6R4WFM46Ly+RSXirYQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org