Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/2piGYcm0QA22TmImIe0QYM3kJjc.roa
File: 2piGYcm0QA22TmImIe0QYM3kJjc.roa (raw, json)
Hash identifier: WoSlPECo9jMmYdIl53+5D7fCYVR9RZFv0++D1kiS5nw=
Subject key identifier: DA:98:86:61:C9:B4:40:0D:B6:4E:62:26:21:ED:10:60:CD:E4:26:37
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07C5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/2piGYcm0QA22TmImIe0QYM3kJjc.roa
Signing time: Tue 13 Jun 2023 12:24:01 +0000
ROA not before: Tue 13 Jun 2023 12:24:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1989 (0x7c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 12:24:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=DA988661C9B4400DB64E622621ED1060CDE42637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:dd:f7:9f:a5:e6:10:de:fa:4a:4d:25:e1:
93:1d:d6:67:f6:37:51:4a:2c:36:a9:67:01:f1:33:
35:31:46:e5:86:87:34:d6:5c:4b:a0:bd:c3:4f:0b:
e3:a1:53:cd:1f:bc:50:37:3d:a5:83:6d:d9:75:58:
c4:31:49:0a:b5:91:3c:12:c9:67:16:2a:1d:13:53:
76:ae:6f:2a:8e:ce:9f:e4:d8:73:c1:8c:a5:e5:50:
69:bf:8b:f1:04:97:17:6f:9b:f2:af:71:61:6b:8d:
d6:d3:3a:73:ca:ed:f4:a1:11:f7:f7:73:20:76:5d:
d4:43:40:96:5e:f9:0a:ec:28:58:69:33:13:fb:ce:
39:b9:34:a0:41:1f:14:19:15:50:86:f8:0d:42:b0:
51:9c:bc:37:b1:c3:7b:3f:34:32:d8:eb:14:1d:7e:
4e:56:40:ff:31:e0:e1:7f:0b:ae:bf:0d:e3:71:58:
9a:ca:f4:0f:73:aa:42:fe:99:30:36:15:15:a3:a2:
30:e5:60:86:9c:18:73:57:df:4e:f9:fd:0f:d8:92:
6b:a1:aa:76:99:8b:28:de:a7:68:92:e5:d2:5b:22:
79:96:b9:77:eb:2c:cb:b7:6a:25:b5:3f:75:54:1f:
17:3f:59:f9:18:cd:e6:7e:07:cc:73:87:4e:32:15:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:98:86:61:C9:B4:40:0D:B6:4E:62:26:21:ED:10:60:CD:E4:26:37
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/2piGYcm0QA22TmImIe0QYM3kJjc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
68:5f:2f:97:76:0c:ae:bd:86:3b:66:33:38:0b:ca:61:91:86:
a2:1c:46:77:09:19:a1:da:e1:f5:41:73:3a:f1:d2:d1:dc:d7:
e4:0a:1b:c5:91:a4:db:04:73:c5:cc:74:45:7d:28:c3:96:19:
a8:ef:5d:7f:23:36:c7:3b:6e:cd:1a:8f:0c:43:a2:46:25:66:
e4:1c:8c:47:15:4b:7f:16:7b:ea:ca:16:b1:e1:92:43:77:ec:
24:29:87:56:89:de:66:75:ae:44:d4:02:e0:71:d4:72:97:cb:
49:a0:18:0c:66:ba:0c:d5:8c:ef:13:8d:f2:b7:d6:88:d2:c9:
d2:5a:32:92:61:d2:ca:36:aa:d1:f9:5c:45:5b:21:f2:03:31:
19:9a:f3:d7:16:65:a9:25:f3:d3:39:cc:01:bd:53:62:f7:1b:
bc:22:f5:58:8a:95:dc:f9:66:45:a8:91:34:c6:04:14:bc:c7:
90:7a:29:02:ff:58:d3:a0:a4:1b:d5:50:b2:c6:e8:5e:66:e2:
d9:40:df:b7:c1:d2:29:f9:7d:a8:73:e3:2a:ed:7b:e9:5d:02:
8f:a0:28:c2:2c:36:78:a6:45:ee:9a:49:4c:98:b7:06:86:ee:
11:6f:dc:9c:43:aa:c0:7c:42:5c:6d:ba:cc:fa:a4:ef:b5:f3:
ce:b4:f4:69
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
MjI0MDFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKERBOTg4NjYxQzlCNDQw
MERCNjRFNjIyNjIxRUQxMDYwQ0RFNDI2MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDae933n6XmEN76Sk0l4ZMd1mf2N1FKLDapZwHxMzUxRuWGhzTW
XEugvcNPC+OhU80fvFA3PaWDbdl1WMQxSQq1kTwSyWcWKh0TU3aubyqOzp/k2HPB
jKXlUGm/i/EElxdvm/KvcWFrjdbTOnPK7fShEff3cyB2XdRDQJZe+QrsKFhpMxP7
zjm5NKBBHxQZFVCG+A1CsFGcvDexw3s/NDLY6xQdfk5WQP8x4OF/C66/DeNxWJrK
9A9zqkL+mTA2FRWjojDlYIacGHNX3075/Q/YkmuhqnaZiyjep2iS5dJbInmWuXfr
LMu3aiW1P3VUHxc/WfkYzeZ+B8xzh04yFd7zAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU2piGYcm0QA22TmImIe0QYM3kJjcwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvMnBpR1ljbTBRQTIy
VG1JbUllMFFZTTNrSmpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAaF8v
l3YMrr2GO2YzOAvKYZGGohxGdwkZodrh9UFzOvHS0dzX5AobxZGk2wRzxcx0RX0o
w5YZqO9dfyM2xztuzRqPDEOiRiVm5ByMRxVLfxZ76soWseGSQ3fsJCmHVoneZnWu
RNQC4HHUcpfLSaAYDGa6DNWM7xON8rfWiNLJ0loykmHSyjaq0flcRVsh8gMxGZrz
1xZlqSXz0znMAb1TYvcbvCL1WIqV3PlmRaiRNMYEFLzHkHopAv9Y06CkG9VQssbo
Xmbi2UDft8HSKfl9qHPjKu176V0Cj6Aowiw2eKZF7ppJTJi3BobuEW/cnEOqwHxC
XG26zPqk77XzzrT0aQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org