Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/0Btehl2qXnLSWczm86Wm3d16c6s.roa
File: 0Btehl2qXnLSWczm86Wm3d16c6s.roa (raw, json)
Hash identifier: hn1XpeTIrXp/O7KFjbORPKMHWh/JGVVH65a5v6JfUe4=
Subject key identifier: D0:1B:5E:86:5D:AA:5E:72:D2:59:CC:E6:F3:A5:A6:DD:DD:7A:73:AB
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08E1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0Btehl2qXnLSWczm86Wm3d16c6s.roa
Signing time: Wed 14 Jun 2023 23:54:06 +0000
ROA not before: Wed 14 Jun 2023 23:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2273 (0x8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 23:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D01B5E865DAA5E72D259CCE6F3A5A6DDDD7A73AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:ff:51:7e:37:38:ce:18:61:66:3a:cd:45:
b0:bd:82:76:69:c2:cc:32:11:76:23:cd:4f:3e:ef:
e1:76:96:d1:95:02:fb:fd:8e:1c:46:15:4c:3a:f0:
30:d9:85:91:6f:bc:4a:2f:27:fe:7f:85:7d:14:9a:
b5:d9:94:1c:d9:64:4f:8d:b8:71:3d:ed:54:9d:0d:
4e:df:7e:18:d4:a9:ef:99:06:56:74:86:9c:47:eb:
eb:02:06:f1:56:c7:29:40:a8:1b:d6:0e:51:a4:5d:
15:e1:8a:83:af:04:a3:dc:f7:82:be:48:e9:76:93:
65:fb:da:bd:34:ad:fb:f2:ab:28:6d:53:00:37:4a:
f0:14:e4:01:00:9e:2d:e1:c5:dd:b9:28:30:86:c8:
3b:85:7d:35:9e:2e:01:d7:44:36:e4:66:b7:ea:7e:
00:5b:93:24:b6:64:3d:a7:ee:d5:f8:24:c1:df:5e:
3d:60:db:91:b4:af:25:2a:7b:f0:06:b3:5f:c3:aa:
a3:f1:63:88:c8:f7:a1:65:9c:1e:f7:25:d9:a4:46:
93:af:d7:b5:8b:e2:82:57:25:e3:f6:15:5b:2d:69:
32:d7:c7:18:7e:bd:e9:c6:38:bc:ab:66:57:68:05:
7e:d4:58:ed:86:3c:ff:ec:7e:55:64:fa:30:f3:fa:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1B:5E:86:5D:AA:5E:72:D2:59:CC:E6:F3:A5:A6:DD:DD:7A:73:AB
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0Btehl2qXnLSWczm86Wm3d16c6s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:0e:7f:90:ca:ff:b7:7e:b4:73:9f:9f:75:29:37:06:12:64:
4b:fd:53:c9:2d:98:e3:99:31:40:b2:a3:7f:ba:39:c2:fc:03:
a7:bb:9d:0b:a6:c8:54:f1:52:e3:13:5f:da:84:05:e8:9f:a9:
df:28:1d:76:c2:24:82:2a:ea:55:e9:2d:a5:e0:f8:c0:e3:6f:
8f:21:a9:65:49:ef:4e:72:52:ae:21:9a:73:23:b1:f0:1a:36:
6d:7c:5d:e1:9d:fc:d0:07:8c:fb:3c:7f:33:f7:b0:9d:ff:c4:
94:c6:de:96:49:2a:fb:8f:f9:08:81:b3:b6:32:60:a5:ce:13:
52:59:d4:10:05:dc:6a:69:08:07:07:b0:74:f1:74:49:87:82:
e7:49:2e:a9:0f:45:de:0c:5a:01:ba:c6:5a:9b:4e:6f:22:b1:
52:32:0d:68:34:d8:fa:ae:7e:55:0b:e3:79:48:a2:a2:5b:1c:
34:a0:38:a3:86:30:80:6a:4d:3c:44:e1:4c:ec:0e:ec:a0:04:
15:47:df:2b:d0:da:53:fc:2d:8a:db:73:a1:7a:23:f9:f3:86:
90:87:86:0e:80:aa:27:8a:74:af:23:1a:08:41:77:81:21:89:
36:b9:48:c2:16:4d:d8:a9:2c:14:12:f9:1c:7c:8d:2d:e2:32:
3b:6a:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org