Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/CdlW7mdbwWDr3v4rmlH4OUpVVxk.roa
File: CdlW7mdbwWDr3v4rmlH4OUpVVxk.roa (raw, json)
Hash identifier: DPS6db71V5+jm7d4FTr2vTYZAHpfJQXflOm2RpJTHV4=
Subject key identifier: 09:D9:56:EE:67:5B:C1:60:EB:DE:FE:2B:9A:51:F8:39:4A:55:57:19
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0855
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CdlW7mdbwWDr3v4rmlH4OUpVVxk.roa
Signing time: Wed 14 Jun 2023 06:24:12 +0000
ROA not before: Wed 14 Jun 2023 06:24:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133 (0x855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 06:24:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=09D956EE675BC160EBDEFE2B9A51F8394A555719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:69:bb:8d:77:cc:27:fe:67:67:65:c3:91:
ed:fe:2c:72:76:f4:d2:c0:8a:7c:01:2f:76:c0:06:
3f:ae:39:13:4e:90:48:dd:fe:0b:3d:49:6f:1f:3a:
29:14:22:46:12:00:b9:0e:0d:17:99:ec:08:fb:73:
79:b3:82:bb:4a:a0:19:71:1f:d6:ed:99:e6:18:85:
95:81:0c:e2:6e:e8:90:99:dd:63:b1:a4:35:2a:b0:
15:02:a3:9d:a5:f7:00:44:7a:e2:57:62:b4:6a:87:
91:c4:f7:84:4c:f9:0d:f6:ab:0a:c5:c9:57:d9:89:
fa:12:e4:87:34:c0:a2:13:14:78:ed:d7:1d:21:74:
64:4d:ce:67:53:d2:ae:fb:1d:77:d5:20:ae:da:7e:
41:58:f6:07:fe:bf:d4:77:fa:c2:15:de:f8:da:af:
43:06:36:c1:32:ab:85:fa:46:5e:42:0c:1a:c3:f0:
9b:5a:ab:bb:60:b2:69:9a:26:5a:83:e4:c1:dd:be:
5c:01:4a:db:a4:76:28:c2:47:5e:a0:2a:dc:43:ce:
a0:0e:5c:97:d2:ea:a2:92:31:02:5e:27:9f:16:98:
67:5e:52:e6:d7:0c:eb:27:e7:68:a6:7d:ba:ae:4a:
ab:8a:13:ae:dc:31:05:1d:d2:ba:40:bb:30:e3:ee:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:56:EE:67:5B:C1:60:EB:DE:FE:2B:9A:51:F8:39:4A:55:57:19
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CdlW7mdbwWDr3v4rmlH4OUpVVxk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:a7:c4:18:97:45:21:58:78:6a:f0:99:6e:f9:3d:0c:58:76:
b7:3b:70:0c:9d:a5:48:7e:e3:d2:e7:99:80:4c:53:a3:85:01:
e2:82:d8:be:87:dc:00:f5:c2:4b:21:b5:bd:91:12:fd:96:80:
af:a2:4b:0b:9a:69:83:4f:b4:ce:cb:fd:56:2a:09:ba:e0:01:
7e:99:9b:e8:8f:bc:aa:65:31:4d:86:30:b0:6c:04:5e:a4:cc:
e5:21:e2:ba:11:b6:41:c9:b3:67:53:4e:49:23:02:8a:21:ea:
27:3b:90:bb:0b:75:f5:72:41:29:61:ce:4f:47:36:cf:43:42:
54:48:4c:19:f4:e0:7d:e1:a5:a5:0c:81:00:28:2c:9c:9c:d9:
52:3c:c2:3e:5a:ff:8f:c0:02:e0:14:1c:49:05:c3:3b:d6:6b:
3a:64:10:71:b1:94:af:36:08:22:68:e4:e7:46:66:4f:c1:38:
28:fc:30:42:6c:ab:a7:13:af:1f:59:93:f9:7f:e8:ce:cd:19:
ad:c0:3f:5a:8f:3e:f3:c7:57:ca:fe:70:72:c7:ab:a2:6b:cb:
3c:6e:db:65:54:4d:fa:bb:47:ca:ed:77:ac:3c:d0:8b:66:61:
03:2d:df:cf:32:08:08:a6:aa:66:f5:b3:e7:e4:98:cd:ae:61:
7e:ef:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org