Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/B-x7heD8lHpqBgLJlCScO33KElg.roa
File: B-x7heD8lHpqBgLJlCScO33KElg.roa (raw, json)
Hash identifier: r30GP5A317P7JsS8AwVBg8mdYJ1EvCoTzjImC+TJttw=
Subject key identifier: 07:EC:7B:85:E0:FC:94:7A:6A:06:02:C9:94:24:9C:3B:7D:CA:12:58
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07A5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B-x7heD8lHpqBgLJlCScO33KElg.roa
Signing time: Tue 13 Jun 2023 08:32:02 +0000
ROA not before: Tue 13 Jun 2023 08:32:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957 (0x7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 08:32:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=07EC7B85E0FC947A6A0602C994249C3B7DCA1258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:94:91:a7:2a:b8:57:61:28:ff:3d:fe:6b:
42:37:92:12:c8:3b:d8:4a:62:c1:74:6a:27:24:af:
b6:a4:b0:8a:74:7f:dc:92:7f:b9:99:3c:8c:e4:de:
f5:c5:12:6a:2b:36:2a:f3:e0:f8:f1:b8:87:d2:01:
79:74:43:d1:44:63:9e:81:d1:38:ee:65:2d:61:2f:
8d:e4:b7:f6:a9:5d:7b:58:51:29:79:3b:b6:88:2c:
5b:23:09:05:93:bf:32:30:02:99:be:a6:b4:b3:04:
5c:3a:76:9e:c6:47:34:d2:c1:e0:08:36:69:37:c1:
0b:4b:f5:97:41:cf:34:11:42:16:b0:7a:f1:76:3d:
b6:a4:7f:97:3a:88:e2:e6:d7:30:10:21:2a:27:8c:
36:ca:19:6f:cd:c2:f4:9c:63:1e:72:4c:77:b5:14:
66:40:94:33:46:14:47:d9:e3:30:a8:f0:16:9a:aa:
e9:0a:c5:da:19:3b:28:90:71:fb:56:ff:bf:12:b5:
9b:03:35:31:ea:79:89:9d:2c:95:29:cb:b8:d8:cf:
6c:96:de:e6:fc:8d:8d:c7:f7:d9:4d:46:82:e2:5f:
c8:12:4a:6f:42:62:9f:b4:b6:f8:f3:69:4b:b5:07:
32:81:8e:d6:72:34:11:52:3f:e6:22:ff:46:5f:81:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:7B:85:E0:FC:94:7A:6A:06:02:C9:94:24:9C:3B:7D:CA:12:58
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B-x7heD8lHpqBgLJlCScO33KElg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:c4:a5:bd:74:a2:6d:0f:81:1f:ac:92:e8:5e:d2:6d:3a:ed:
9e:5d:60:d6:5f:72:ad:86:e3:38:b5:18:f7:4c:f2:9b:05:10:
8d:c1:14:bf:6e:ae:fa:74:62:89:2d:79:c6:57:3a:bf:92:a4:
4d:47:34:6d:2e:36:ef:44:5c:58:22:90:b6:ea:7f:e8:15:ad:
5f:1a:15:fd:0a:aa:fa:a6:db:30:1a:90:2e:05:78:75:05:fc:
a0:2d:46:3a:55:eb:8d:e8:d8:f5:8f:58:c3:6e:dd:1b:9d:57:
9b:39:48:5e:5d:d2:9f:04:74:59:3a:43:ea:19:e0:fb:07:16:
2b:f5:c2:7c:ba:91:80:f8:42:3b:6f:54:62:fb:b7:70:6b:f1:
1c:5c:a5:22:b8:f8:6e:d5:ff:9b:ab:30:55:67:16:28:a1:91:
c1:66:09:72:1b:ee:9b:a6:9d:42:eb:da:1a:13:c9:3a:92:1e:
77:ed:af:c3:3f:de:0b:9c:34:a5:72:48:b7:80:96:7a:73:f3:
98:c8:1d:b7:98:7e:88:53:23:06:98:e7:95:85:a0:2b:aa:c9:
91:2d:9e:2b:63:4f:b1:67:12:f7:cf:ba:a4:b7:40:1e:f9:0a:
99:a9:c7:ee:83:ed:23:7a:f4:3f:b9:75:d1:05:25:a2:e8:1f:
93:ab:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org