Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/5PhSreeOa_ifnFoVv_afP6syWAg.roa
File: 5PhSreeOa_ifnFoVv_afP6syWAg.roa (raw, json)
Hash identifier: ICQ/Xn04OLLMpUwkGUJPl4go4oeDwKMaMwfaNskPnbw=
Subject key identifier: E4:F8:52:AD:E7:8E:6B:F8:9F:9C:5A:15:BF:F6:9F:3F:AB:32:58:08
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08D1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/5PhSreeOa_ifnFoVv_afP6syWAg.roa
Signing time: Wed 14 Jun 2023 21:54:05 +0000
ROA not before: Wed 14 Jun 2023 21:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2257 (0x8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 21:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E4F852ADE78E6BF89F9C5A15BFF69F3FAB325808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ac:18:19:49:bb:9f:bb:28:db:9e:39:0a:b2:
1e:3c:c3:81:21:a6:d0:ab:ba:dd:0b:4a:b6:5b:48:
9d:69:79:75:89:9b:9a:4c:32:22:ec:3c:09:10:a2:
e3:5a:cd:91:d5:6e:62:cd:b6:6e:74:a5:c2:10:a2:
e1:65:dd:d8:0a:16:fa:87:41:8c:83:ec:e9:af:a9:
3e:a1:ff:e6:e5:59:7e:09:82:5a:1e:d7:83:62:ed:
3d:17:80:6d:be:50:f3:1c:12:70:d3:04:78:a9:22:
02:49:75:29:dc:e1:0e:58:93:28:af:d3:65:36:df:
a1:90:7b:6a:6f:1c:bf:8f:1b:d9:18:8c:24:f5:68:
f4:a7:bd:7d:13:b8:ee:fd:d6:60:bc:28:c8:9d:f3:
b2:76:15:f7:a0:b3:66:bf:36:de:41:f2:5d:91:7c:
b4:8b:1a:a2:64:cd:49:02:f9:7f:47:23:69:7c:34:
4b:55:69:ec:90:6d:cf:83:c2:e4:cf:e5:b4:31:40:
f3:57:13:d9:7f:98:47:9e:a3:5c:63:2b:8c:54:d7:
c0:66:a9:12:c2:3c:37:17:f1:29:86:77:91:37:92:
53:70:20:4b:59:19:8c:3d:b8:f2:99:e2:d8:86:6e:
a5:13:24:49:ef:10:f7:44:a7:0e:fe:d6:a8:b8:91:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F8:52:AD:E7:8E:6B:F8:9F:9C:5A:15:BF:F6:9F:3F:AB:32:58:08
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/5PhSreeOa_ifnFoVv_afP6syWAg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
15:41:38:47:b5:63:3b:56:03:bd:a2:2b:63:81:6c:74:a1:7e:
14:3d:d0:cd:7b:57:07:8c:6a:47:56:ff:ff:1c:85:de:ca:da:
17:4d:e2:4e:ab:ee:b1:34:a0:79:4b:bb:52:92:29:7e:43:b4:
e6:f9:93:3c:dc:f7:9a:8b:36:94:fe:b9:c2:d7:9d:74:bb:3b:
14:bc:cf:65:ec:c5:7a:f3:c9:55:63:eb:67:bb:d6:aa:73:01:
97:f2:b2:b0:b0:c9:83:a1:ba:96:cd:13:c2:da:63:ee:5b:fe:
8c:3a:80:e8:2f:35:69:4b:34:66:c7:2c:16:da:df:f3:ae:0a:
73:c9:6d:a3:21:86:25:cb:a4:cc:ef:12:06:81:f8:cc:4e:b1:
f0:b3:9b:f3:bb:a6:39:a0:a7:96:1b:bf:72:24:8a:92:f3:c8:
5f:db:37:e0:ed:f8:23:02:a7:98:25:ca:9d:bf:81:4c:b1:27:
42:90:ab:a7:d7:dc:c9:cc:2b:b4:3c:6b:29:da:af:99:87:38:
c3:66:13:e0:45:6a:e4:5c:f2:34:4d:3b:75:3f:88:30:e5:dd:
10:56:3c:58:06:8d:c5:c9:e9:cb:70:b9:9c:31:47:4d:36:7d:
60:37:b9:49:e6:27:ba:7b:70:29:d2:59:54:5f:e8:48:46:db:
5c:b5:13:9e
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MTU0MDVaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEU0Rjg1MkFERTc4RTZC
Rjg5RjlDNUExNUJGRjY5RjNGQUIzMjU4MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5rBgZSbufuyjbnjkKsh48w4EhptCrut0LSrZbSJ1peXWJm5pM
MiLsPAkQouNazZHVbmLNtm50pcIQouFl3dgKFvqHQYyD7OmvqT6h/+blWX4Jgloe
14Ni7T0XgG2+UPMcEnDTBHipIgJJdSnc4Q5Ykyiv02U236GQe2pvHL+PG9kYjCT1
aPSnvX0TuO791mC8KMid87J2Ffegs2a/Nt5B8l2RfLSLGqJkzUkC+X9HI2l8NEtV
aeyQbc+DwuTP5bQxQPNXE9l/mEeeo1xjK4xU18BmqRLCPDcX8SmGd5E3klNwIEtZ
GYw9uPKZ4tiGbqUTJEnvEPdEpw7+1qi4kQS/AgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU5PhSreeOa/ifnFoVv/afP6syWAgwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvNVBoU3JlZU9hX2lm
bkZvVnZfYWZQNnN5V0FnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAFUE4
R7VjO1YDvaIrY4FsdKF+FD3QzXtXB4xqR1b//xyF3sraF03iTqvusTSgeUu7UpIp
fkO05vmTPNz3mos2lP65wteddLs7FLzPZezFevPJVWPrZ7vWqnMBl/KysLDJg6G6
ls0Twtpj7lv+jDqA6C81aUs0ZscsFtrf864Kc8ltoyGGJcukzO8SBoH4zE6x8LOb
87umOaCnlhu/ciSKkvPIX9s34O34IwKnmCXKnb+BTLEnQpCrp9fcycwrtDxrKdqv
mYc4w2YT4EVq5FzyNE07dT+IMOXdEFY8WAaNxcnpy3C5nDFHTTZ9YDe5SeYnuntw
KdJZVF/oSEbbXLUTng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org