Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/6B2bLswwmWXEbEe6JAL7XhU-aFU.roa
File: 6B2bLswwmWXEbEe6JAL7XhU-aFU.roa (raw, json)
Hash identifier: im4szVMV2AprUsY5sHcjLAAjKkZ23b8BX2bvqLDOArE=
Subject key identifier: E8:1D:9B:2E:CC:30:99:65:C4:6C:47:BA:24:02:FB:5E:15:3E:68:55
Certificate issuer: /CN=11EF7AFED17B7B1DC7CFD1427288D01E5BEBE947
Certificate serial: 40
Authority key identifier: 11:EF:7A:FE:D1:7B:7B:1D:C7:CF:D1:42:72:88:D0:1E:5B:EB:E9:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/6B2bLswwmWXEbEe6JAL7XhU-aFU.roa
Signing time: Mon 07 Jun 2021 13:35:34 +0000
ROA not before: Mon 07 Jun 2021 13:35:34 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
103.41.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11EF7AFED17B7B1DC7CFD1427288D01E5BEBE947
Validity
Not Before: Jun 7 13:35:34 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=E81D9B2ECC309965C46C47BA2402FB5E153E6855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:b7:98:4d:f6:bd:66:0b:90:ad:7d:b1:25:
91:c1:67:74:0c:01:85:62:7c:6a:b1:4b:98:53:e7:
6e:62:50:49:a1:f2:f3:3d:2b:db:e8:4b:39:b3:37:
d8:fe:14:62:37:df:ce:74:fe:71:a6:e8:01:59:e1:
56:30:79:e0:c4:9c:da:15:eb:c2:b7:a6:af:51:d5:
86:12:43:e8:0c:38:b2:3e:dd:19:5b:be:42:a4:be:
06:af:e9:36:33:8a:03:46:b2:56:64:b2:f8:64:5d:
22:44:39:2a:a0:bd:80:03:dc:2f:81:5a:d9:42:ed:
48:f2:b7:59:b6:70:3b:10:dd:67:a6:da:89:83:66:
75:76:51:8d:bf:87:09:59:2b:41:e8:df:74:5f:82:
b2:43:12:ae:fb:56:90:f3:2f:0f:46:a0:f7:81:ee:
b8:15:55:14:1c:30:a6:8c:ca:90:d8:81:de:95:82:
2d:90:46:7e:81:70:74:50:17:c3:05:58:46:d8:69:
b0:a3:46:4e:fd:f8:f6:88:0f:ca:09:ea:09:6c:1a:
c7:94:b7:5d:f2:66:39:9d:3a:be:26:c1:33:5d:4c:
ff:3e:e4:ee:85:14:d7:f2:7b:fd:d2:a5:aa:11:f0:
6d:6b:c5:b3:b4:5d:3a:5d:63:04:7e:73:d8:9f:6d:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1D:9B:2E:CC:30:99:65:C4:6C:47:BA:24:02:FB:5E:15:3E:68:55
X509v3 Authority Key Identifier:
keyid:11:EF:7A:FE:D1:7B:7B:1D:C7:CF:D1:42:72:88:D0:1E:5B:EB:E9:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/6B2bLswwmWXEbEe6JAL7XhU-aFU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.41.232.0/22
Signature Algorithm: sha256WithRSAEncryption
32:e8:6d:82:82:cc:8b:d9:a7:41:0a:c7:db:46:1c:a3:ea:c9:
bc:9c:3f:d5:05:f4:fa:05:bb:14:c8:20:b7:ed:8e:1c:25:b8:
1f:57:78:49:91:85:a4:4c:79:3d:ba:9b:a0:d5:01:e3:ce:c2:
34:63:f7:52:27:c9:66:63:36:67:48:8f:02:5f:d0:84:32:77:
83:52:58:77:8c:07:fe:49:c0:9c:1f:20:e5:78:19:a8:c9:66:
c2:7e:77:aa:f2:6d:24:11:a6:bc:15:97:4a:72:7f:20:77:c4:
b1:9d:8e:a1:3c:d2:0d:19:ae:b2:43:32:fa:27:8d:da:9a:27:
bc:e2:1e:94:d0:35:73:04:11:29:10:f0:db:a4:16:50:b0:dd:
eb:5d:b5:4b:96:d8:97:e0:7a:d1:0a:14:35:c7:64:83:6d:8d:
19:e3:d4:61:d9:82:ae:d7:0a:94:85:84:f2:41:54:d3:ae:f2:
3a:7c:f8:5e:82:58:a1:72:01:ad:0a:e5:15:ff:fe:2c:ef:8d:
c5:04:b5:d4:0b:82:c9:ee:cd:6b:e0:76:3d:20:aa:b8:8e:36:
52:15:68:04:9b:88:cf:f7:63:58:11:f8:1c:81:a4:22:c7:05:
49:2b:18:03:5f:69:56:df:c0:61:fa:b4:a3:68:98:50:0f:f1:
5c:d8:6c:f5
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMUVG
N0FGRUQxN0I3QjFEQzdDRkQxNDI3Mjg4RDAxRTVCRUJFOTQ3MB4XDTIxMDYwNzEz
MzUzNFoXDTIyMDUyNzA0NTk1MlowMzExMC8GA1UEAxMoRTgxRDlCMkVDQzMwOTk2
NUM0NkM0N0JBMjQwMkZCNUUxNTNFNjg1NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/et5hN9r1mC5CtfbElkcFndAwBhWJ8arFLmFPnbmJQSaHy8z0r
2+hLObM32P4UYjffznT+caboAVnhVjB54MSc2hXrwremr1HVhhJD6Aw4sj7dGVu+
QqS+Bq/pNjOKA0ayVmSy+GRdIkQ5KqC9gAPcL4Fa2ULtSPK3WbZwOxDdZ6baiYNm
dXZRjb+HCVkrQejfdF+CskMSrvtWkPMvD0ag94HuuBVVFBwwpozKkNiB3pWCLZBG
foFwdFAXwwVYRthpsKNGTv349ogPygnqCWwax5S3XfJmOZ06vibBM11M/z7k7oUU
1/J7/dKlqhHwbWvFs7RdOl1jBH5z2J9tbJcCAwEAAaOCAfkwggH1MB0GA1UdDgQW
BBToHZsuzDCZZcRsR7okAvteFT5oVTAfBgNVHSMEGDAWgBQR73r+0Xt7HcfP0UJy
iNAeW+vpRzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yMzkx
L0VlOTZfdEY3ZXgzSHo5RkNjb2pRSGx2cjZVYy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvRWU5Nl90RjdleDNIejlGQ2NvalFIbHZyNlVjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5MS82QjJiTHN3d21XWEVi
RWU2SkFMN1hoVS1hRlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM
AwQCK/p0AwQCZynoMA0GCSqGSIb3DQEBCwUAA4IBAQAy6G2CgsyL2adBCsfbRhyj
6sm8nD/VBfT6BbsUyCC37Y4cJbgfV3hJkYWkTHk9upug1QHjzsI0Y/dSJ8lmYzZn
SI8CX9CEMneDUlh3jAf+ScCcHyDleBmoyWbCfneq8m0kEaa8FZdKcn8gd8SxnY6h
PNINGa6yQzL6J43amie84h6U0DVzBBEpEPDbpBZQsN3rXbVLltiX4HrRChQ1x2SD
bY0Z49Rh2YKu1wqUhYTyQVTTrvI6fPheglihcgGtCuUV//4s743FBLXUC4LJ7s1r
4HY9IKq4jjZSFWgEm4jP92NYEfgcgaQixwVJKxgDX2lW38Bh+rSjaJhQD/Fc2Gz1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org