Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/-jvrJ-OCHMxcfvc7yvEgrNZoFEM.roa
File: -jvrJ-OCHMxcfvc7yvEgrNZoFEM.roa (raw, json)
Hash identifier: /wmAnqi3SxOkmuGjgiD9uL9Kd9wyQEvyWSgInXHiT9Y=
Subject key identifier: FA:3B:EB:27:E3:82:1C:CC:5C:7E:F7:3B:CA:F1:20:AC:D6:68:14:43
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08C1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-jvrJ-OCHMxcfvc7yvEgrNZoFEM.roa
Signing time: Wed 14 Jun 2023 19:54:07 +0000
ROA not before: Wed 14 Jun 2023 19:54:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241 (0x8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 19:54:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=FA3BEB27E3821CCC5C7EF73BCAF120ACD6681443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:c7:6b:1d:ea:5f:fe:2b:88:47:85:6b:90:
95:bd:d1:34:77:a5:10:ad:88:8a:24:56:5d:64:ce:
98:0e:c7:96:0a:bb:b1:a8:e9:84:f5:8b:4d:4c:04:
22:ee:15:76:07:60:ae:ce:d0:32:27:9f:05:a2:f7:
7c:26:3b:86:3c:22:9f:6e:a8:d7:cc:1d:da:5e:b0:
c6:6a:77:36:f7:20:76:0a:77:95:16:d0:a1:a5:8e:
6a:b5:77:91:a5:2d:e1:81:aa:82:a2:69:8c:2a:96:
6b:21:0e:aa:b4:b8:6b:89:c0:d5:80:ec:e1:78:ae:
63:94:22:f2:86:ac:1b:f5:9c:6f:a6:8c:5e:ca:bd:
7c:8d:14:40:4b:a0:99:b7:7b:92:14:41:8a:d1:76:
87:47:4c:7a:09:0a:e3:6c:1d:5e:38:df:cb:2c:ac:
08:41:d8:6c:65:80:08:1e:cb:ee:94:bc:9e:d1:95:
b6:0b:25:a2:47:d1:0d:d5:4d:51:6e:fa:d4:89:29:
c1:91:e4:50:20:2a:ea:2b:07:12:b4:dd:59:5b:12:
02:db:db:b2:0a:62:9d:6b:55:70:fb:64:fe:cf:2e:
82:51:7d:82:b2:19:86:a9:7c:2f:d3:39:6c:87:5c:
4a:73:5e:73:78:85:e8:aa:60:a9:31:91:34:2a:d1:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3B:EB:27:E3:82:1C:CC:5C:7E:F7:3B:CA:F1:20:AC:D6:68:14:43
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-jvrJ-OCHMxcfvc7yvEgrNZoFEM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:f1:b7:50:9d:84:57:d2:eb:b4:16:c0:5b:f9:17:70:14:7a:
a5:17:f1:09:d5:4b:bc:a0:84:4e:66:aa:d2:83:4a:0f:0c:2a:
87:f9:06:f9:93:50:fd:e5:22:e5:39:e8:42:9c:05:44:da:39:
73:cf:93:a4:bc:03:3f:94:70:97:6d:69:d5:b2:cb:c3:ad:b1:
5e:96:59:cc:f6:28:f0:99:17:f0:82:3f:2e:0f:5e:01:a3:2c:
80:bf:29:cc:06:6d:a8:3f:29:6d:ce:27:10:0b:71:a1:df:c2:
2d:9c:31:d2:3d:c4:9f:b1:5e:57:1e:73:99:83:7c:7b:e1:73:
bc:fb:ad:c6:9a:52:fb:d4:65:bb:6e:4e:fb:1a:cb:f6:b5:3b:
d3:4b:d4:af:e8:09:ea:58:7b:6f:6d:5c:b1:21:30:e1:3d:84:
9e:c6:f5:7b:7f:1d:0d:8b:a2:54:62:41:9e:7b:ca:ff:ef:3c:
9c:57:ec:76:60:76:a7:df:48:71:29:a2:30:f7:40:5a:46:8e:
c7:a6:b3:a2:aa:d4:31:ea:3d:01:14:5c:3c:33:c6:02:68:f7:
39:38:f2:a5:5b:f7:be:7b:89:f5:36:54:b9:9a:cc:25:f9:76:
11:37:f5:de:3a:f1:b8:e2:35:ea:bc:6d:43:2d:d1:e4:b3:85:
f1:3a:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org