Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/DXJCotacR8SwJxOJh6IcSwuxzO4.roa
File: DXJCotacR8SwJxOJh6IcSwuxzO4.roa (raw, json)
Hash identifier: Zh7LawSFK/HNEUnNRUcX1gAvPf1QmqYsJRrWswFgclk=
Subject key identifier: 0D:72:42:A2:D6:9C:47:C4:B0:27:13:89:87:A2:1C:4B:0B:B1:CC:EE
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07F1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/DXJCotacR8SwJxOJh6IcSwuxzO4.roa
Signing time: Tue 13 Jun 2023 17:54:01 +0000
ROA not before: Tue 13 Jun 2023 17:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 17:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0D7242A2D69C47C4B027138987A21C4B0BB1CCEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:19:3e:13:53:42:a8:80:5a:b5:3a:b1:60:
3c:29:52:c0:25:85:95:6f:bc:5e:12:67:5b:29:78:
33:35:9c:1b:e7:8a:fb:b1:81:f5:fb:c6:32:5f:b5:
b1:74:d0:66:59:57:7c:f2:0b:85:6b:d3:d2:9f:2f:
46:86:23:21:71:80:b1:05:86:08:e9:50:aa:e4:5e:
6d:3d:cf:77:79:83:ad:11:b1:ca:af:41:75:62:ad:
b5:05:c0:15:f9:43:08:5a:33:99:19:56:e6:82:1c:
e0:eb:4f:6f:7d:99:f4:89:f1:4f:27:4d:f7:88:31:
7e:44:06:0d:cf:99:d2:34:0d:6e:c4:9f:9f:ee:07:
1a:dc:c4:a4:f9:f3:b9:19:ed:46:40:6f:46:cb:8d:
98:9e:ab:94:a1:9d:e7:7f:b4:59:cc:f0:b6:a0:c6:
73:13:e0:18:e9:ce:4e:89:f1:ca:48:d7:52:41:71:
1e:70:ec:3f:9b:07:12:97:a2:1d:ef:b4:92:1a:15:
27:9e:4d:c5:d2:ac:86:d6:ed:64:ef:f7:81:ec:7d:
67:b6:a1:74:3b:f1:73:8e:85:80:67:65:96:49:7b:
22:94:a2:9a:de:66:61:42:ad:e6:d7:c1:c3:41:f2:
f0:68:8a:43:74:81:6e:c8:50:61:76:5c:04:40:8a:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:72:42:A2:D6:9C:47:C4:B0:27:13:89:87:A2:1C:4B:0B:B1:CC:EE
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/DXJCotacR8SwJxOJh6IcSwuxzO4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:91:d0:29:96:de:98:2b:dd:5b:dd:c7:63:b0:43:ea:f6:3f:
c2:a7:cd:da:b7:4c:ce:ae:fa:ec:72:17:e3:ef:96:3a:48:cb:
ad:9c:d1:ea:fa:6f:56:d2:bb:68:ec:6f:f3:3f:01:57:bd:1f:
da:62:1a:25:53:81:52:4d:45:d2:49:ff:7a:3d:a1:b9:57:fe:
6c:ee:de:66:c9:66:65:3a:6d:da:6f:b9:35:ac:1b:41:22:e2:
4b:7f:b2:67:47:e6:50:2b:07:66:6d:54:4e:83:c9:eb:ca:56:
f2:f3:f8:c4:6b:b0:a9:81:68:f2:c9:7d:f9:6c:22:d2:5e:f9:
3b:e5:70:92:27:6c:92:da:b3:5f:bf:74:a2:86:14:cb:4b:36:
65:dc:eb:8d:ba:6e:24:a7:f0:a8:6f:1b:26:03:e9:71:16:e3:
23:f9:d8:25:04:7c:cd:b3:90:f8:4b:6d:a5:7f:b5:b1:9d:14:
74:33:c9:94:78:19:3f:9d:65:34:0b:92:65:81:4b:e5:7d:3c:
3d:23:ff:0d:d5:b1:7e:de:fa:5e:7e:37:31:ad:0f:66:60:88:
0e:b9:ce:bf:8d:60:27:c1:65:a1:a0:cb:4a:68:f7:5e:eb:5a:
90:27:08:9c:6a:91:f8:a8:39:18:b9:02:92:2e:93:77:e1:64:
5c:71:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org