Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/9tq0uFubPOBfrT0ICVP_mVH7oLA.roa
File: 9tq0uFubPOBfrT0ICVP_mVH7oLA.roa (raw, json)
Hash identifier: icUiM1e1uvLoHb6ADmSZgrIg5HAe1CbfjKbTeFWLpYg=
Subject key identifier: F6:DA:B4:B8:5B:9B:3C:E0:5F:AD:3D:08:09:53:FF:99:51:FB:A0:B0
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0809
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/9tq0uFubPOBfrT0ICVP_mVH7oLA.roa
Signing time: Tue 13 Jun 2023 20:54:11 +0000
ROA not before: Tue 13 Jun 2023 20:54:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 20:54:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=F6DAB4B85B9B3CE05FAD3D080953FF9951FBA0B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:16:d9:0d:e9:11:af:2e:5e:9d:7e:39:1c:
33:af:df:cb:fb:c5:91:62:d3:a2:c7:82:c5:1c:8a:
3d:d1:b9:49:56:37:f2:d5:ca:ef:fb:fa:2f:9f:c4:
e8:7a:5a:c4:ab:48:05:3c:bb:3b:d0:4b:76:8d:29:
a1:e6:71:ab:13:87:22:2f:4d:ef:79:f1:d2:55:3b:
c5:e5:47:59:32:3e:13:02:c3:da:7e:2d:82:5f:72:
6e:39:f6:89:4d:f8:08:5f:61:da:e3:eb:3c:d4:52:
7c:25:da:47:c4:ae:cd:32:09:ec:dc:5e:0b:1d:0b:
77:6b:de:51:e0:0d:68:c5:79:85:6a:e2:f4:d8:84:
b5:07:13:ff:3f:d8:55:34:fb:85:2a:33:0d:29:bb:
62:f7:3c:cd:dd:19:b7:30:26:44:28:16:40:5b:99:
3d:e8:9e:22:fa:40:e9:19:e4:e7:82:f4:6c:86:c1:
5a:68:ac:b7:51:e1:b4:b6:d7:31:46:81:fd:71:5d:
c7:1e:fd:e8:bd:19:21:52:9a:ca:84:01:a7:01:28:
ce:88:fd:39:5c:7e:eb:85:bf:d6:f2:1b:97:fd:6c:
11:ec:7c:d6:e5:fb:f6:ab:a3:43:20:b2:e4:23:58:
3c:ee:35:f3:79:09:ae:7e:1f:f7:cd:cc:34:2f:0d:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DA:B4:B8:5B:9B:3C:E0:5F:AD:3D:08:09:53:FF:99:51:FB:A0:B0
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/9tq0uFubPOBfrT0ICVP_mVH7oLA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:e4:3c:37:74:3a:aa:b8:c0:69:dd:0e:c6:60:f6:29:d6:03:
86:cf:32:ee:9e:74:ee:e1:ab:58:46:b5:ae:c2:dc:bf:d8:cb:
b5:03:df:1d:e5:48:10:ae:1d:44:6c:99:4f:2b:a2:82:6e:95:
ba:33:48:19:cd:27:34:f5:89:c7:94:02:b0:97:ac:2d:a3:82:
83:07:a4:03:46:a5:c6:60:89:13:23:82:8b:48:0a:06:42:c4:
e8:6d:ce:ed:66:73:38:94:6c:e6:17:92:3e:e0:e2:9a:c3:81:
e2:7a:ca:4f:06:c5:3c:23:a8:da:62:96:ed:b4:95:87:a1:66:
53:81:68:7b:dc:5e:d2:05:81:53:57:fa:fa:91:bb:10:63:24:
08:1b:ed:c1:a1:f2:33:ff:85:49:8e:a2:2a:c6:c2:45:ae:e4:
d1:11:05:86:6a:5f:fb:1b:b8:6f:81:e5:c3:43:d6:07:fe:18:
f8:12:b5:1d:85:98:f2:cb:29:5e:41:1b:72:ad:7f:e8:ec:e4:
24:b8:f0:08:a5:cf:c5:e6:da:10:f3:c1:2f:e8:3d:a6:56:08:
3b:86:32:64:bf:f5:a1:9c:11:79:5e:a1:82:a0:ba:f9:01:6c:
a3:94:8b:a5:2e:df:68:8e:73:ea:66:c0:5f:1d:31:51:06:5b:
2e:60:d4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org