Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/DHZ1BcRRWqmQFAKn9mDbJ4a3VS0.roa
File: DHZ1BcRRWqmQFAKn9mDbJ4a3VS0.roa (raw, json)
Hash identifier: 8ZLaz40cDxGS3eb/qdmZapF6HiypUTBUrwKbUzer1RQ=
Subject key identifier: 0C:76:75:05:C4:51:5A:A9:90:14:02:A7:F6:60:DB:27:86:B7:55:2D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 092A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/DHZ1BcRRWqmQFAKn9mDbJ4a3VS0.roa
Signing time: Thu 15 Jun 2023 06:24:19 +0000
ROA not before: Thu 15 Jun 2023 06:24:19 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2346 (0x92a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 06:24:19 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0C767505C4515AA9901402A7F660DB2786B7552D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:60:10:0d:c9:2f:2e:f2:ad:6a:5e:26:73:
86:1a:71:f4:39:61:e1:b1:97:fb:41:31:fd:ac:b5:
9c:8c:29:b3:c9:80:b1:33:e0:93:3a:81:f7:9d:a1:
a1:6e:cb:9f:b0:e3:68:d5:6c:5d:c8:15:b9:b1:bb:
f1:01:49:a6:8a:0b:05:5e:8c:5f:d0:15:31:40:b2:
81:31:26:d7:bb:a3:2a:39:ca:79:38:af:64:7f:59:
7c:3f:24:4c:cd:8d:4d:8f:cd:76:6c:5c:63:35:89:
6c:e0:20:7e:b3:79:04:1d:28:dc:77:e5:ba:2f:84:
92:8e:f5:b3:76:ba:89:3d:11:11:68:9c:ce:42:74:
35:76:bc:3d:2b:80:8c:ab:8a:7b:5c:b0:fc:c4:02:
f7:87:23:e7:f4:86:6f:88:c4:e6:67:e7:b7:46:43:
7d:e4:02:e9:09:6e:50:23:1d:9e:85:e6:ee:5e:fd:
a7:20:ab:ad:f8:66:b1:34:b1:2b:f6:c4:7e:fe:5f:
f6:7f:d7:6e:92:50:97:13:3f:22:d1:84:04:0f:28:
2c:61:ff:5d:ed:7f:0a:a1:34:61:34:b3:4e:c7:83:
1e:f9:3e:64:88:d8:8c:fd:ed:91:2d:09:53:77:35:
0c:94:ac:b1:dc:d5:0f:81:95:fa:f5:dd:d2:c9:8a:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:76:75:05:C4:51:5A:A9:90:14:02:A7:F6:60:DB:27:86:B7:55:2D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/DHZ1BcRRWqmQFAKn9mDbJ4a3VS0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
26:44:5c:9a:1d:b5:0e:59:9a:87:b8:ea:02:11:a3:71:53:72:
c5:14:64:73:ac:6b:d8:e1:4b:ac:69:b1:15:01:3e:13:40:e9:
36:c7:3a:75:6e:26:87:06:24:32:3b:ad:e9:2f:56:b5:1b:1e:
fa:90:8e:ef:00:33:de:00:ea:d5:ea:b9:83:54:8c:2a:b1:9f:
9e:79:93:89:ee:0e:05:3e:68:23:bf:57:bf:1b:b3:af:be:a3:
4c:e5:72:70:bd:11:5f:08:ed:8e:4d:f9:40:b2:41:cf:5c:2e:
56:6e:1c:90:e3:a9:f3:64:16:1e:0f:df:01:cf:da:3c:2f:2d:
a8:91:9a:44:22:35:05:ad:75:68:6d:9b:0c:a0:55:65:b9:32:
d8:9e:26:94:1c:8f:b6:5b:a3:59:db:60:b0:70:45:21:3e:6b:
e0:15:26:26:78:eb:49:e0:43:77:11:e3:20:0e:1e:63:bf:d7:
8d:30:de:6e:47:e0:77:4b:23:af:0b:70:45:e5:2c:35:38:80:
55:fe:9a:08:2a:3e:1c:0c:cd:c8:e2:d8:e4:37:6d:fa:0c:ac:
83:1f:1d:e4:e6:d8:87:f5:23:e2:7e:f6:a3:38:50:71:de:4a:
ee:ec:7a:4f:f7:99:7f:eb:0f:c2:fd:8f:95:11:8d:cc:a4:3e:
43:65:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org