Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/BAFvoolg9pKm4UDlGQrOrjFT09I.roa
File: BAFvoolg9pKm4UDlGQrOrjFT09I.roa (raw, json)
Hash identifier: uYDyGGNOf+QpWXO5EXRuQWM4uSNhGL2+sa9AOkH73Ck=
Subject key identifier: 04:01:6F:A2:89:60:F6:92:A6:E1:40:E5:19:0A:CE:AE:31:53:D3:D2
Certificate issuer: /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial: 0759
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/BAFvoolg9pKm4UDlGQrOrjFT09I.roa
Signing time: Thu 14 Apr 2022 06:48:18 +0000
ROA not before: Thu 14 Apr 2022 06:48:18 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 4812
IP address blocks: 106.75.224.0/20 maxlen: 20
106.75.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Validity
Not Before: Apr 14 06:48:18 2022 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=04016FA28960F692A6E140E5190ACEAE3153D3D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1d:69:99:38:d4:11:bd:f0:7a:c3:9d:70:23:
34:42:e8:85:9c:1d:1c:d5:9e:e0:67:b2:e5:d7:50:
78:bb:26:1e:8a:b9:3a:61:1f:53:a9:40:5e:d9:a1:
e4:a4:90:bc:2c:47:47:a6:a9:70:2a:a4:37:e4:c7:
5e:8e:ad:b6:da:36:22:92:b9:d4:f6:ab:69:90:b6:
9b:13:10:88:d0:a2:93:2d:9f:07:d1:6a:9b:8e:aa:
b1:91:bd:40:a3:16:50:07:eb:8c:2d:81:2f:21:d8:
75:06:8b:72:36:ce:20:6c:a6:72:19:23:96:2d:d7:
0f:d6:24:18:35:9b:7f:39:c8:d7:f4:72:fb:b1:f5:
f0:45:85:97:65:56:08:15:fc:44:00:f3:cf:ac:0a:
94:89:54:43:08:f5:d6:34:6a:b1:fe:be:91:d1:49:
f9:39:de:8e:26:c9:19:52:d0:b3:08:0c:ef:3f:4c:
bf:6a:65:df:aa:d8:4b:2c:46:e8:e7:62:21:5a:6d:
42:e0:df:f8:60:8d:b6:d1:95:8a:a3:fb:1f:b0:13:
76:df:5e:09:df:89:69:05:8a:f4:37:6c:8f:b3:ef:
16:b6:6d:61:17:61:eb:35:96:f4:ff:3a:fd:6e:eb:
d8:c3:cc:16:d8:e6:d1:fe:2a:07:4b:12:75:97:3e:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:01:6F:A2:89:60:F6:92:A6:E1:40:E5:19:0A:CE:AE:31:53:D3:D2
X509v3 Authority Key Identifier:
keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/BAFvoolg9pKm4UDlGQrOrjFT09I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ab:c7:d4:fc:ce:71:ce:76:7f:c5:25:09:df:0d:93:2f:67:27:
a5:31:56:c4:7c:c4:0d:da:a7:c2:bd:8f:80:7f:4c:33:0e:41:
bd:07:ed:8c:d2:e1:f1:27:2d:1b:04:12:ba:36:91:8c:1a:35:
ac:8d:b9:4b:21:b9:76:cd:40:a8:a3:23:5f:7d:80:52:e8:12:
07:58:ae:ff:ab:1e:df:a1:b3:d6:3f:b7:03:1c:76:4d:b8:b2:
0a:a5:d4:49:dd:bd:77:d3:ca:c5:45:ee:5e:dd:f5:66:05:e9:
2e:fe:5d:bd:8e:bd:9a:30:e9:14:22:dd:0c:6c:90:56:ec:19:
93:83:77:ff:28:5a:af:44:26:bc:4c:06:7b:38:8a:85:b6:2a:
8c:e5:c8:d3:3d:fa:1d:f2:00:28:c6:d8:da:16:bf:02:10:35:
e3:93:14:ca:08:09:e8:01:a3:29:cc:23:77:80:ba:f9:6a:09:
b1:46:92:59:a4:ec:59:01:03:e5:33:ec:57:4a:5b:9d:ae:ec:
36:4f:9f:3c:b1:a4:24:8a:6e:95:da:1a:c7:a8:d1:d0:7b:1c:
91:50:e6:7d:63:58:be:f5:e3:b8:e0:6f:72:74:b9:58:0b:69:
bd:d4:17:fe:55:72:e5:cd:57:c4:9a:4b:f5:2e:d3:70:7b:1b:
3f:e7:23:14
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTVE
N0MxQjBDMjk4RUQxODMzNzFDOURGQTQ5RDVCNUZDRERFOTg0RjAeFw0yMjA0MTQw
NjQ4MThaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDA0MDE2RkEyODk2MEY2
OTJBNkUxNDBFNTE5MEFDRUFFMzE1M0QzRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtHWmZONQRvfB6w51wIzRC6IWcHRzVnuBnsuXXUHi7Jh6KuTph
H1OpQF7ZoeSkkLwsR0emqXAqpDfkx16OrbbaNiKSudT2q2mQtpsTEIjQopMtnwfR
apuOqrGRvUCjFlAH64wtgS8h2HUGi3I2ziBspnIZI5Yt1w/WJBg1m385yNf0cvux
9fBFhZdlVggV/EQA88+sCpSJVEMI9dY0arH+vpHRSfk53o4myRlS0LMIDO8/TL9q
Zd+q2EssRujnYiFabULg3/hgjbbRlYqj+x+wE3bfXgnfiWkFivQ3bI+z7xa2bWEX
Yes1lvT/Ov1u69jDzBbY5tH+KgdLEnWXPlrRAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUBAFvoolg9pKm4UDlGQrOrjFT09IwHwYDVR0jBBgwFoAU5dfBsMKY7Rgzccnf
pJ1bX83emE8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3
LzVkZkJzTUtZN1JnemNjbmZwSjFiWDgzZW1FOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNWRmQnNNS1k3Umd6Y2NuZnBKMWJYODNlbUU4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L0JBRnZvb2xnOXBLbTRV
RGxHUXJPcmpGVDA5SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAVqS+AwDQYJKoZIhvcNAQELBQADggEBAKvH1PzOcc52f8UlCd8Nky9nJ6UxVsR8
xA3ap8K9j4B/TDMOQb0H7YzS4fEnLRsEEro2kYwaNayNuUshuXbNQKijI199gFLo
EgdYrv+rHt+hs9Y/twMcdk24sgql1EndvXfTysVF7l7d9WYF6S7+Xb2OvZow6RQi
3QxskFbsGZODd/8oWq9EJrxMBns4ioW2KozlyNM9+h3yACjG2NoWvwIQNeOTFMoI
CegBoynMI3eAuvlqCbFGklmk7FkBA+Uz7FdKW52u7DZPnzyxpCSKbpXaGseo0dB7
HJFQ5n1jWL7147jgb3J0uVgLab3UF/5VcuXNV8SaS/Uu03B7Gz/nIxQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org