Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/7slTxg2uDTLJ8HzMtlVXY9ueh9M.roa
File: 7slTxg2uDTLJ8HzMtlVXY9ueh9M.roa (raw, json)
Hash identifier: G5QyP6O1mNSh6kmdN7jFYpiH1JxMv1xLzVYp17IQ5G0=
Subject key identifier: EE:C9:53:C6:0D:AE:0D:32:C9:F0:7C:CC:B6:55:57:63:DB:9E:87:D3
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 084D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/7slTxg2uDTLJ8HzMtlVXY9ueh9M.roa
Signing time: Wed 14 Jun 2023 05:24:12 +0000
ROA not before: Wed 14 Jun 2023 05:24:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 05:24:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=EEC953C60DAE0D32C9F07CCCB6555763DB9E87D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:14:e1:9b:dc:a6:fe:c6:81:a6:a8:b6:d8:
1a:be:b5:3b:53:86:fd:0f:85:71:7b:07:0b:ad:88:
70:f2:66:21:00:c8:68:ae:ba:10:09:ca:2f:12:20:
39:c0:71:b7:2f:37:03:2b:56:6b:d1:fa:da:b1:86:
c5:a9:f9:81:23:98:f2:d8:9e:43:3a:48:ed:f5:51:
e6:0c:20:52:6e:96:83:db:3e:46:28:94:cb:e9:49:
4c:e7:8a:31:48:c4:1f:a8:c8:1e:37:0e:50:4b:e6:
f3:eb:ae:a7:52:da:3c:d7:28:d3:7c:55:0c:e2:39:
f8:99:30:ce:a2:b6:a7:5d:61:ae:60:8c:7d:89:a7:
57:45:c2:55:c2:7c:c8:23:68:f3:ee:bb:73:1e:58:
90:19:4c:12:de:1f:9f:9d:95:9f:fd:c6:af:d1:1c:
96:6a:c8:23:d3:17:4c:66:71:42:5c:d8:34:f4:17:
34:7f:df:b4:9a:fd:61:84:27:ca:3c:fb:9b:80:e1:
17:81:54:a8:30:f1:88:e8:5a:b6:b0:3b:d8:62:65:
54:4b:c3:20:3c:84:60:ed:3d:b3:3e:35:4c:8a:89:
2a:bc:35:4e:8d:45:21:dc:64:3a:27:50:c0:0d:48:
d4:89:ba:d1:86:0c:bf:fe:6f:bb:e9:b2:a1:fe:a8:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C9:53:C6:0D:AE:0D:32:C9:F0:7C:CC:B6:55:57:63:DB:9E:87:D3
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/7slTxg2uDTLJ8HzMtlVXY9ueh9M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:30:5a:09:f1:84:d6:c0:c7:97:09:a8:cb:ab:a0:ec:f3:dd:
aa:5d:34:47:bd:55:b2:44:8b:77:23:fc:01:29:05:79:af:91:
ce:80:d8:f2:69:c3:58:57:b3:25:be:d2:87:9e:9f:b4:0d:e4:
23:0e:e0:fd:6e:07:fe:df:28:66:ab:e0:8b:7e:96:70:01:78:
8a:9a:91:4e:25:96:f4:96:b2:60:07:cb:bf:6a:e9:59:d2:6a:
34:8e:90:66:40:28:6e:e3:41:14:68:30:fc:39:e5:9c:59:ff:
c4:10:ec:ab:69:11:d7:35:52:0d:f1:ca:c7:35:66:b8:d2:61:
2a:13:15:f8:e5:02:2e:a5:2f:e5:01:a6:a0:9a:42:2b:8c:90:
6c:2f:44:74:4e:3d:7f:47:fe:e0:ea:7c:9d:97:f1:68:ae:76:
b6:f7:d0:b6:7b:7c:e8:c6:00:9c:85:9d:05:5a:63:2c:7d:15:
f2:b2:f8:0c:62:27:7a:0d:f5:91:be:43:13:d5:11:c2:d3:92:
7c:fd:cf:ce:54:f9:93:11:ed:ff:9e:55:d7:5a:c9:30:8d:5f:
cd:14:99:70:18:d4:64:45:b6:84:56:47:a5:3a:b0:1b:84:4a:
0d:96:59:89:af:dd:4d:5e:70:c5:fd:db:35:e8:94:db:be:4a:
df:bf:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org