Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/5w4d61mcNiX9wv6DgwHXfuE6bF4.roa
File: 5w4d61mcNiX9wv6DgwHXfuE6bF4.roa (raw, json)
Hash identifier: f4dlGv8mdMx2mMzvPr9GZTz49ZjDEcGHW7Ji8oLxrfs=
Subject key identifier: E7:0E:1D:EB:59:9C:36:25:FD:C2:FE:83:83:01:D7:7E:E1:3A:6C:5E
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 088D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/5w4d61mcNiX9wv6DgwHXfuE6bF4.roa
Signing time: Wed 14 Jun 2023 13:24:05 +0000
ROA not before: Wed 14 Jun 2023 13:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189 (0x88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 13:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E70E1DEB599C3625FDC2FE838301D77EE13A6C5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:30:53:49:21:0f:85:41:ab:cd:d0:75:aa:
8c:82:2e:a4:36:c5:cb:c5:6f:a5:4d:09:c8:8b:67:
47:d3:25:11:16:23:1c:90:1a:d3:44:dd:4c:bc:2a:
1c:99:5e:5e:a7:99:6b:cb:b0:c0:b1:4d:56:a0:88:
6a:ce:28:f8:0f:68:53:8c:0e:5b:b5:76:7f:c5:a5:
d4:77:52:9b:a2:7e:c3:32:c0:4c:43:3a:9e:a5:fc:
be:a9:3f:99:9b:51:47:a7:3b:d3:cc:ab:1f:8b:17:
8b:31:8e:f3:b2:23:eb:dd:d4:be:a5:8c:00:ad:4d:
3d:ca:0c:ad:5b:a2:fa:e8:45:e5:f2:c7:e6:6c:a7:
c4:22:45:60:47:c2:68:a3:6a:8f:81:e9:ab:a2:4d:
68:8f:4d:34:da:f6:16:01:cd:82:33:e6:25:37:5f:
a9:72:27:99:a8:f7:a9:1f:52:8c:5e:1d:fb:85:4e:
de:d3:f6:24:2e:c7:d2:c4:55:f3:a8:26:6c:c8:21:
38:42:09:cd:36:fc:57:ad:ec:94:93:6d:29:73:ad:
2a:a2:5e:33:29:14:5c:ea:21:57:38:87:e3:5d:09:
f8:7b:1c:88:6c:c6:60:2f:e5:2b:35:88:13:df:4e:
5a:fc:09:db:3d:11:91:ba:87:e1:56:5e:b5:7a:5e:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0E:1D:EB:59:9C:36:25:FD:C2:FE:83:83:01:D7:7E:E1:3A:6C:5E
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/5w4d61mcNiX9wv6DgwHXfuE6bF4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:35:3c:f8:42:ed:d9:94:5c:f6:9f:85:45:d8:1c:7c:b8:04:
40:3c:6b:31:43:76:14:69:dc:ac:ae:92:4f:e3:25:ab:92:ce:
83:3c:8f:10:ba:a5:1f:a0:a9:95:f3:3c:86:6b:9a:70:ef:9e:
c3:ff:64:33:1f:7d:70:b8:c8:30:e7:6b:14:19:19:db:5b:ce:
c1:95:fb:5c:bc:91:50:8a:a5:11:6a:ca:dc:28:91:6e:94:d2:
11:10:70:3f:70:3c:0c:20:28:90:be:17:73:4b:fe:58:80:ba:
f9:dd:db:14:ca:4d:9e:92:37:08:0b:a0:8c:41:27:14:6a:a1:
b0:c3:39:52:67:2e:f7:ea:29:65:ac:9b:3b:d8:2b:91:f7:81:
0e:74:72:64:73:83:a3:0a:a2:59:0c:a1:26:dc:78:43:68:1b:
bc:e6:19:fd:a4:38:a9:bc:97:c6:3b:73:32:4e:4a:e6:db:82:
39:22:a0:3e:93:18:c5:1c:31:b3:70:00:36:91:43:5c:47:52:
e3:d5:63:dc:8e:32:1e:6b:39:7b:4f:be:0f:33:20:9c:2c:d1:
7f:bb:63:f4:ce:02:9f:09:dc:e9:bb:c2:01:d3:b0:d0:73:43:
3a:ea:eb:a4:5a:a9:89:27:a4:07:99:1d:cc:5c:b6:71:7b:f9:
b4:11:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org