Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/CtAel9l2wAni6KISzILudUQNCnY.roa
File: CtAel9l2wAni6KISzILudUQNCnY.roa (raw, json)
Hash identifier: wYvZ3RVoOovKTiCa/JjDqRfbpSX3ybmtRxcSQH4VJtc=
Subject key identifier: 0A:D0:1E:97:D9:76:C0:09:E2:E8:A2:12:CC:82:EE:75:44:0D:0A:76
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0839
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CtAel9l2wAni6KISzILudUQNCnY.roa
Signing time: Wed 14 Jun 2023 02:54:03 +0000
ROA not before: Wed 14 Jun 2023 02:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 02:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0AD01E97D976C009E2E8A212CC82EE75440D0A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:8b:50:24:a2:d4:4e:d9:39:0d:a9:e8:56:
68:22:05:ce:3f:28:c9:bb:eb:4b:e7:86:08:dd:92:
6c:eb:99:bb:ae:7d:31:45:0f:db:67:b9:00:12:39:
12:57:14:e6:c0:38:3e:50:e0:12:ad:d1:b5:32:8b:
f7:a3:af:a3:f7:8f:89:9d:7d:a3:14:7a:d0:ab:e4:
ca:fd:87:5a:d1:8d:fb:9a:eb:ed:0c:cb:26:38:16:
ac:3a:aa:ae:92:2f:02:38:f1:c6:85:dd:c4:03:ed:
22:9e:c1:a8:87:8a:99:ff:c3:6f:4a:ff:50:3f:bb:
44:f4:e9:f3:83:12:05:4b:96:aa:2a:0d:5f:21:c8:
73:79:2e:1b:db:a8:5d:24:e1:2c:02:55:83:f1:cd:
9e:32:95:54:27:f0:50:bf:b2:c5:ca:57:36:73:15:
e0:76:2a:86:91:ee:f4:65:c1:d3:d5:dc:15:a8:da:
86:e8:4c:a7:2e:85:9f:e1:98:92:56:48:06:32:d5:
d4:7c:1b:f1:53:94:08:e8:de:80:c3:03:d8:56:2f:
e3:c6:b1:c6:9e:7e:ad:67:36:d1:b2:36:62:cc:c6:
29:a1:8d:3a:5c:bf:87:3c:29:76:a2:32:58:e9:91:
40:98:be:7e:86:ec:e4:47:cf:04:71:df:ea:b7:4d:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D0:1E:97:D9:76:C0:09:E2:E8:A2:12:CC:82:EE:75:44:0D:0A:76
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CtAel9l2wAni6KISzILudUQNCnY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:91:5b:5d:80:0f:be:c7:ca:2e:bc:07:50:18:25:8e:98:29:
00:53:33:40:1d:2f:a9:5d:38:e5:a8:b3:3b:da:f9:8a:19:a8:
28:3c:6a:8b:03:00:ba:94:a6:29:d6:17:c5:2c:df:04:c5:3e:
77:53:91:6f:a8:74:94:c0:10:62:7f:55:c1:4d:70:35:67:1b:
c7:b0:43:76:f0:7b:20:80:d8:cf:7d:98:34:67:1a:a0:81:e3:
e4:e0:f6:56:ce:5d:66:67:db:8b:2f:3b:11:0b:cc:e9:f8:4c:
d4:ca:fd:34:74:35:6e:59:e4:f7:6e:75:94:ed:0d:10:98:4c:
a7:58:21:24:0e:89:27:9b:da:36:e0:54:91:5d:c8:31:21:0c:
b0:04:4b:c6:99:7d:33:6a:91:9d:f3:0d:dc:f2:2f:16:f5:b1:
b6:d3:ad:f0:45:2c:f2:17:76:a7:f0:6d:65:a0:ab:fa:ea:38:
9c:7f:b4:2a:52:a3:fd:f2:7a:57:dd:ed:d5:49:24:e4:94:d8:
28:18:af:2c:58:4e:90:1f:90:fc:f4:47:f2:ad:e8:74:3c:a5:
f3:93:28:bc:d8:a8:34:3c:49:cb:fc:11:c1:48:b9:9c:5d:c8:
7e:cf:64:a0:54:d8:ad:3c:32:6c:cd:2b:48:89:29:fb:54:5c:
fa:90:2d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org