Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/7d_VMKmY-wxkAiuUojhIRssVsvQ.roa
File: 7d_VMKmY-wxkAiuUojhIRssVsvQ.roa (raw, json)
Hash identifier: hBx2QI2kS6aBHCCawA5WREE0fHPCl8WmDjwA84fmlIM=
Subject key identifier: ED:DF:D5:30:A9:98:FB:0C:64:02:2B:94:A2:38:48:46:CB:15:B2:F4
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07E1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/7d_VMKmY-wxkAiuUojhIRssVsvQ.roa
Signing time: Tue 13 Jun 2023 15:54:12 +0000
ROA not before: Tue 13 Jun 2023 15:54:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2017 (0x7e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 15:54:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=EDDFD530A998FB0C64022B94A2384846CB15B2F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:d9:dc:62:2b:63:78:4a:21:98:e0:f9:a1:
a0:08:18:95:fe:79:b7:13:d2:c7:f7:f1:06:34:1a:
89:bb:9e:b6:67:2f:f2:db:0d:1a:2a:3b:90:66:0c:
db:b8:2e:df:1c:e1:a2:39:94:99:2d:d2:f8:3a:7a:
06:2a:73:8d:ec:b1:6f:a5:99:31:49:e9:db:9c:be:
05:74:ec:85:85:cf:4a:fb:51:91:1a:68:c9:7c:a9:
f3:26:0e:5f:a1:75:7d:96:34:da:0d:3f:81:8e:67:
ae:e2:b4:96:b9:b9:88:78:15:7f:c3:ea:99:f4:c8:
74:79:77:68:85:52:46:52:35:64:b2:34:cd:81:cc:
e7:be:25:fc:60:9c:64:49:6c:5d:62:59:49:65:fd:
25:3f:25:d1:ae:bf:8c:b8:d5:4e:1a:04:10:38:20:
a4:72:9d:b6:60:ae:3c:cc:98:b0:8d:61:87:b9:ef:
23:e0:1d:0e:97:8b:85:b4:aa:b8:75:5b:8a:ed:98:
19:e6:b9:77:cc:c5:a2:a4:ab:04:a5:09:5f:e3:3f:
b8:c8:51:58:2a:ba:fc:c1:69:6e:e8:00:4a:2c:dd:
fd:29:8b:32:43:85:c9:aa:4c:81:00:33:53:e0:0b:
11:cb:c8:46:32:41:70:06:66:70:69:f8:12:2c:56:
97:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:D5:30:A9:98:FB:0C:64:02:2B:94:A2:38:48:46:CB:15:B2:F4
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/7d_VMKmY-wxkAiuUojhIRssVsvQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:90:6c:ce:5c:15:a8:01:fe:fd:ab:8c:33:f2:ab:f9:6c:81:
2e:74:21:d6:07:25:f4:d0:7d:52:a3:05:48:ba:6d:48:70:a0:
ed:62:cb:59:b6:be:a0:f3:59:a5:f2:5c:1f:7f:9f:10:ce:15:
94:3b:bd:a7:dc:11:3b:10:49:b2:c7:d0:b0:67:3a:cb:b5:c5:
67:a3:57:4c:fb:06:82:87:00:f0:1c:2e:52:bf:8c:d1:54:5e:
f0:a9:65:82:83:f4:c4:3e:dd:52:2d:84:41:db:89:e9:08:6f:
97:51:77:36:a7:ff:6b:c1:0b:99:73:8c:5f:84:8c:62:5d:75:
c7:ea:84:a9:c3:e5:f7:59:87:78:80:14:98:f9:8b:3d:93:00:
16:9b:9b:e0:d5:c9:e8:68:72:3e:2b:93:b5:f3:c1:1f:40:9c:
df:61:f7:80:ff:af:74:3b:a8:f3:18:54:29:78:d4:66:a1:8c:
b0:4c:cc:dd:4a:3c:13:ea:ab:ec:92:a5:5d:26:9a:00:06:a5:
0c:dd:3d:bc:9f:84:ed:1c:24:aa:9e:d3:d0:24:57:cc:7b:d6:
d2:ac:66:27:83:80:89:b9:e0:05:35:38:31:82:16:e3:81:a9:
d8:bb:e7:3b:fc:bc:78:79:05:be:08:f5:c9:5b:cf:a4:38:27:
a6:62:b5:1b
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
NTU0MTJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEVEREZENTMwQTk5OEZC
MEM2NDAyMkI5NEEyMzg0ODQ2Q0IxNUIyRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjitncYitjeEohmOD5oaAIGJX+ebcT0sf38QY0Gom7nrZnL/Lb
DRoqO5BmDNu4Lt8c4aI5lJkt0vg6egYqc43ssW+lmTFJ6ducvgV07IWFz0r7UZEa
aMl8qfMmDl+hdX2WNNoNP4GOZ67itJa5uYh4FX/D6pn0yHR5d2iFUkZSNWSyNM2B
zOe+JfxgnGRJbF1iWUll/SU/JdGuv4y41U4aBBA4IKRynbZgrjzMmLCNYYe57yPg
HQ6Xi4W0qrh1W4rtmBnmuXfMxaKkqwSlCV/jP7jIUVgquvzBaW7oAEos3f0pizJD
hcmqTIEAM1PgCxHLyEYyQXAGZnBp+BIsVpdTAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU7d/VMKmY+wxkAiuUojhIRssVsvQwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvN2RfVk1LbVktd3hr
QWl1VW9qaElSc3NWc3ZRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEApJBs
zlwVqAH+/auMM/Kr+WyBLnQh1gcl9NB9UqMFSLptSHCg7WLLWba+oPNZpfJcH3+f
EM4VlDu9p9wROxBJssfQsGc6y7XFZ6NXTPsGgocA8BwuUr+M0VRe8KllgoP0xD7d
Ui2EQduJ6Qhvl1F3Nqf/a8ELmXOMX4SMYl11x+qEqcPl91mHeIAUmPmLPZMAFpub
4NXJ6GhyPiuTtfPBH0Cc32H3gP+vdDuo8xhUKXjUZqGMsEzM3Uo8E+qr7JKlXSaa
AAalDN09vJ+E7Rwkqp7T0CRXzHvW0qxmJ4OAibngBTU4MYIW44Gp2LvnO/y8eHkF
vgj1yVvPpDgnpmK1Gw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org