Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/8SKYnvl9E-Tb0oSFg5HcR9MWoAg.roa
File: 8SKYnvl9E-Tb0oSFg5HcR9MWoAg.roa (raw, json)
Hash identifier: 1ReAJA2wac2n9HvIeZ4OgMO9ih6FCZE3OmCVxcqm+Ss=
Subject key identifier: F1:22:98:9E:F9:7D:13:E4:DB:D2:84:85:83:91:DC:47:D3:16:A0:08
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08D9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/8SKYnvl9E-Tb0oSFg5HcR9MWoAg.roa
Signing time: Wed 14 Jun 2023 22:54:07 +0000
ROA not before: Wed 14 Jun 2023 22:54:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265 (0x8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 22:54:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=F122989EF97D13E4DBD284858391DC47D316A008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:5a:04:e8:85:31:07:10:d0:75:8b:c7:8d:
f5:02:dd:60:9c:dc:91:93:f3:5a:06:13:88:69:be:
18:fa:0d:c5:23:3b:50:3e:17:57:1a:2b:b3:3b:b1:
2f:41:22:97:8a:ea:a0:1d:74:f9:5a:0c:dd:df:c0:
72:09:c2:58:63:6e:f2:b5:4a:f7:e1:01:75:d4:9f:
87:1f:45:77:c0:e5:3d:50:e7:32:f4:ba:e2:55:c3:
fa:63:56:18:ba:15:17:d8:d4:25:bc:73:c1:3e:08:
37:f8:c0:15:e4:94:a3:a4:68:91:e3:e8:29:7f:77:
26:84:e5:72:42:a7:ec:8f:5e:e0:4a:b1:97:a6:f9:
a5:ca:ba:d5:0a:e0:76:c8:3c:c7:cc:fd:31:3f:6a:
60:10:9f:86:4e:44:7b:98:1d:07:8c:d5:00:7e:89:
4f:5c:86:2c:07:35:9a:79:7a:18:3e:02:82:1b:0d:
14:90:29:7a:cd:4f:52:0a:ea:fc:e5:55:17:ea:c5:
d4:e9:e9:b5:8e:46:69:ba:6f:33:92:e9:d8:53:40:
26:f3:75:e2:ab:d5:1d:2c:fe:d9:59:a8:e8:e1:71:
40:a7:aa:a3:bb:56:05:de:f6:09:1e:ff:4d:ee:8e:
9f:d9:4a:4f:2a:23:8c:a8:a5:df:f1:4a:dc:c2:00:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:22:98:9E:F9:7D:13:E4:DB:D2:84:85:83:91:DC:47:D3:16:A0:08
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/8SKYnvl9E-Tb0oSFg5HcR9MWoAg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:33:75:f8:bf:77:bd:ee:69:4f:db:a5:c9:08:8f:62:2a:5b:
e1:a4:80:48:83:99:15:99:62:32:7a:dd:17:49:c5:7e:2f:8b:
c8:5f:7c:8e:36:33:3e:ef:cd:ee:14:97:d4:44:d3:3e:6b:22:
0e:27:c3:4f:1e:88:65:6b:bb:14:2c:a8:cc:88:b7:55:55:cd:
30:f8:ac:4f:18:f6:7f:4e:5e:70:c1:f1:10:ae:24:6c:87:fa:
17:fb:a0:8c:13:3d:83:53:81:cb:cd:d5:dd:d8:88:f9:f3:d4:
bf:13:bd:80:e9:60:9b:87:11:42:ef:36:79:08:5e:f2:4e:57:
04:c2:fd:c5:c3:9f:13:ad:e8:04:2a:43:00:61:08:eb:79:ea:
89:cd:12:d9:0a:4b:be:66:37:b3:6e:7e:96:3d:89:c5:86:7d:
79:05:ee:1d:93:4a:e8:94:2a:52:74:7b:69:3d:01:0e:ae:3f:
38:23:44:de:f0:71:91:ea:43:74:bf:ec:0d:9a:21:4e:44:e1:
93:03:cf:e1:17:fe:df:0b:5f:89:fb:9e:cb:02:0f:f9:bd:e1:
c7:1f:72:40:11:77:79:77:ce:cc:af:51:8a:15:bb:a6:64:69:
a7:27:cc:2c:3c:f2:76:d8:48:18:be:4d:33:02:c5:1a:00:b3:
8a:e6:54:d1
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MjU0MDdaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEYxMjI5ODlFRjk3RDEz
RTREQkQyODQ4NTgzOTFEQzQ3RDMxNkEwMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9o1oE6IUxBxDQdYvHjfUC3WCc3JGT81oGE4hpvhj6DcUjO1A+
F1caK7M7sS9BIpeK6qAddPlaDN3fwHIJwlhjbvK1SvfhAXXUn4cfRXfA5T1Q5zL0
uuJVw/pjVhi6FRfY1CW8c8E+CDf4wBXklKOkaJHj6Cl/dyaE5XJCp+yPXuBKsZem
+aXKutUK4HbIPMfM/TE/amAQn4ZORHuYHQeM1QB+iU9chiwHNZp5ehg+AoIbDRSQ
KXrNT1IK6vzlVRfqxdTp6bWORmm6bzOS6dhTQCbzdeKr1R0s/tlZqOjhcUCnqqO7
VgXe9gke/03ujp/ZSk8qI4yopd/xStzCAIQFAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU8SKYnvl9E+Tb0oSFg5HcR9MWoAgwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvOFNLWW52bDlFLVRi
MG9TRmc1SGNSOU1Xb0FnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEArDN1
+L93ve5pT9ulyQiPYipb4aSASIOZFZliMnrdF0nFfi+LyF98jjYzPu/N7hSX1ETT
PmsiDifDTx6IZWu7FCyozIi3VVXNMPisTxj2f05ecMHxEK4kbIf6F/ugjBM9g1OB
y83V3diI+fPUvxO9gOlgm4cRQu82eQhe8k5XBML9xcOfE63oBCpDAGEI63nqic0S
2QpLvmY3s25+lj2JxYZ9eQXuHZNK6JQqUnR7aT0BDq4/OCNE3vBxkepDdL/sDZoh
TkThkwPP4Rf+3wtfifueywIP+b3hxx9yQBF3eXfOzK9RihW7pmRppyfMLDzydthI
GL5NMwLFGgCziuZU0Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org