Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/DjJ3_OwY9wlf44MGvJq3YxoBagw.roa
File: DjJ3_OwY9wlf44MGvJq3YxoBagw.roa (raw, json)
Hash identifier: MwQY3dMn9YN/yKSbGRKKvk5fHA0poErGYgPNqopJoeE=
Subject key identifier: 0E:32:77:FC:EC:18:F7:09:5F:E3:83:06:BC:9A:B7:63:1A:01:6A:0C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07B1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/DjJ3_OwY9wlf44MGvJq3YxoBagw.roa
Signing time: Tue 13 Jun 2023 09:54:01 +0000
ROA not before: Tue 13 Jun 2023 09:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969 (0x7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 09:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0E3277FCEC18F7095FE38306BC9AB7631A016A0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:04:41:d8:96:1d:49:1f:f0:92:b6:f9:13:
36:c8:ff:ae:59:f3:6d:d9:b1:74:9f:b8:21:12:a3:
bf:94:b1:51:93:fc:b5:5f:fd:14:0e:6f:34:56:55:
93:02:28:d2:ca:57:b7:65:b1:fb:ba:99:de:7b:17:
f6:2c:56:35:d3:7d:63:96:f5:f5:c8:5c:d4:25:7f:
be:90:57:8a:4f:9c:ee:fe:98:73:bf:d2:84:a1:68:
45:04:6a:29:5f:63:31:97:d4:eb:c7:e9:60:df:e3:
15:01:2a:e8:cf:e7:3c:e6:e2:ab:e8:b4:a3:22:fa:
d2:4d:bf:49:e3:b9:20:a6:bd:ac:a8:68:28:e2:27:
8e:42:7a:6b:09:07:f9:36:24:c4:78:9e:70:f8:b7:
c9:38:a8:3c:e2:4a:f3:9c:16:8a:cc:79:35:54:ac:
9c:d1:3b:ec:30:36:e1:59:18:52:41:51:74:64:f9:
d6:2a:2b:74:36:aa:34:b2:b4:8f:af:28:0e:0b:7d:
87:49:92:79:a1:9e:35:fd:1d:d8:55:3d:f6:a7:4b:
ba:c8:db:8d:93:5f:54:29:11:ef:bb:fa:c7:97:b2:
5a:4a:1e:ec:7c:8d:b0:ab:af:10:1d:72:6e:90:69:
ce:be:0b:2f:03:b9:d1:49:31:0b:e9:b9:ec:02:23:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:77:FC:EC:18:F7:09:5F:E3:83:06:BC:9A:B7:63:1A:01:6A:0C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/DjJ3_OwY9wlf44MGvJq3YxoBagw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
83:15:7b:19:ab:68:19:2b:c7:67:b4:91:9a:84:f0:ee:2b:24:
65:f3:f4:f4:13:f3:33:3f:87:31:a6:1e:65:45:29:12:04:6e:
6d:c7:ca:a3:99:81:14:1a:03:5b:69:9a:1f:2c:22:13:a1:ec:
54:c6:97:8c:8c:ca:b3:97:c2:f9:be:6a:18:d8:b3:43:f9:d3:
c1:9e:a7:a0:d2:95:22:48:f2:bf:5a:97:79:2e:d1:11:0b:cd:
4c:a2:4e:dc:b6:35:5b:52:90:5e:f0:95:c8:f2:5b:07:8b:ba:
8b:ff:aa:0c:45:3c:95:1d:89:78:39:b5:01:cb:ac:dc:f2:b7:
0f:e9:e1:b4:98:b4:c1:16:ed:ca:7c:a9:c8:7e:95:8c:2f:99:
6b:86:52:61:03:58:40:d4:96:d6:1d:81:45:a5:fe:fb:45:54:
2e:93:ca:a8:c0:d6:46:91:4f:e8:6d:ce:df:93:55:cc:fc:43:
f0:1e:a0:39:ae:36:83:37:28:42:6c:1e:99:35:e7:d6:7c:81:
ee:01:ae:13:ae:fe:aa:74:32:0d:aa:64:5d:5f:66:62:06:92:
2e:b9:74:94:a3:2e:84:cd:6e:f8:74:ee:0b:df:ec:af:92:93:
8b:c4:c1:2d:04:49:32:90:3c:a0:3a:f6:48:a9:b3:b8:ec:8f:
c9:cf:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org