Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/E7esm12hvTfLWyezx8JdzIl8YcY.roa
File: E7esm12hvTfLWyezx8JdzIl8YcY.roa (raw, json)
Hash identifier: ipAyfC8joCocQmRcEABD8Jr3JmOYo572XENWF/++E2s=
Subject key identifier: 13:B7:AC:9B:5D:A1:BD:37:CB:5B:27:B3:C7:C2:5D:CC:89:7C:61:C6
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08F1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/E7esm12hvTfLWyezx8JdzIl8YcY.roa
Signing time: Thu 15 Jun 2023 01:54:12 +0000
ROA not before: Thu 15 Jun 2023 01:54:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 01:54:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=13B7AC9B5DA1BD37CB5B27B3C7C25DCC897C61C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:ce:38:77:94:a2:18:eb:65:1f:9e:0b:af:
0a:30:4f:5a:29:22:68:47:d7:11:89:58:4a:c2:9b:
89:05:57:a9:13:f9:32:e3:f3:a3:5f:c5:a8:ad:9c:
8a:b3:6e:64:98:b7:ed:37:4f:88:63:27:16:e6:77:
65:4b:9c:5b:1a:86:26:e2:fd:a8:75:5b:b5:64:63:
b8:50:f2:25:80:65:78:14:e3:8a:d4:51:8e:06:98:
0b:eb:48:55:fd:41:96:1d:4a:75:a1:c2:9f:f6:6a:
b1:af:22:29:aa:ed:e8:31:05:54:fa:b4:97:be:d9:
f6:f8:49:3c:81:ee:e7:74:cd:b1:27:b2:0e:e2:c5:
38:f8:cd:ab:3c:cd:8c:e7:35:1e:f2:bc:48:a2:4b:
60:09:34:0b:b4:f5:2a:ad:ee:07:63:3d:e7:68:43:
a2:4a:9e:6a:0a:ca:43:22:a1:11:9a:d1:e3:b3:fe:
2a:38:a6:e8:f3:81:3e:00:dd:27:b8:c6:16:1a:b4:
d1:c2:e3:6b:ab:5e:87:e6:33:3a:21:18:25:80:c7:
34:6b:30:f5:65:ec:f7:e8:f8:3f:b3:cd:19:2d:c6:
44:3a:b6:86:29:bd:26:f2:bd:65:93:fe:e4:a4:0c:
d6:05:cb:4b:f9:61:97:0a:2e:5f:f8:b9:36:44:46:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:AC:9B:5D:A1:BD:37:CB:5B:27:B3:C7:C2:5D:CC:89:7C:61:C6
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/E7esm12hvTfLWyezx8JdzIl8YcY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:0a:42:8a:7a:62:b4:54:15:21:d5:33:13:2f:03:51:84:52:
a3:dd:fe:4e:b7:7b:91:67:8b:5d:78:2c:40:a0:6a:0b:97:fd:
d4:05:45:97:5f:31:ef:90:c7:5a:7a:d9:44:fa:8e:db:f6:47:
88:f7:47:28:cc:cf:1e:c4:c8:5f:89:9d:4e:41:de:b3:de:e2:
9b:fa:b3:2e:a7:89:15:5e:05:3d:fd:d0:42:6d:13:69:99:ba:
49:cf:fd:5c:e5:10:ed:60:0c:4e:e6:71:87:d6:e0:f5:ad:d6:
ad:fc:9e:49:36:30:6a:fa:75:0d:4c:9c:f4:27:b1:d4:da:e8:
57:29:7a:a6:37:a7:d4:d7:78:ed:64:f0:eb:2c:f1:5a:74:59:
e4:c9:00:53:1a:d3:fc:b9:92:31:69:33:8a:2f:8c:42:ce:70:
11:77:1c:c4:ca:d1:8d:11:a7:af:ee:33:cd:20:36:e6:ee:4e:
1e:ad:e3:f5:c2:ed:c1:ee:cc:ff:82:da:3f:5e:4b:ff:2b:e8:
9e:19:8e:40:81:b1:3f:30:72:f6:85:24:56:7d:51:2f:db:62:
45:30:b3:e9:c3:56:12:bd:68:cf:80:4c:f1:cc:07:64:63:7a:
ec:26:ce:5b:ca:d7:45:fd:78:29:69:b7:5f:bd:17:e3:a0:eb:
2c:9f:18:b8
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTUw
MTU0MTJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDEzQjdBQzlCNURBMUJE
MzdDQjVCMjdCM0M3QzI1RENDODk3QzYxQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBdc44d5SiGOtlH54LrwowT1opImhH1xGJWErCm4kFV6kT+TLj
86NfxaitnIqzbmSYt+03T4hjJxbmd2VLnFsahibi/ah1W7VkY7hQ8iWAZXgU44rU
UY4GmAvrSFX9QZYdSnWhwp/2arGvIimq7egxBVT6tJe+2fb4STyB7ud0zbEnsg7i
xTj4zas8zYznNR7yvEiiS2AJNAu09Sqt7gdjPedoQ6JKnmoKykMioRGa0eOz/io4
pujzgT4A3Se4xhYatNHC42urXofmMzohGCWAxzRrMPVl7Pfo+D+zzRktxkQ6toYp
vSbyvWWT/uSkDNYFy0v5YZcKLl/4uTZERjpzAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUE7esm12hvTfLWyezx8JdzIl8YcYwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvRTdlc20xMmh2VGZM
V3lleng4SmR6SWw4WWNZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAjgpC
inpitFQVIdUzEy8DUYRSo93+Trd7kWeLXXgsQKBqC5f91AVFl18x75DHWnrZRPqO
2/ZHiPdHKMzPHsTIX4mdTkHes97im/qzLqeJFV4FPf3QQm0TaZm6Sc/9XOUQ7WAM
TuZxh9bg9a3WrfyeSTYwavp1DUyc9Cex1NroVyl6pjen1Nd47WTw6yzxWnRZ5MkA
UxrT/LmSMWkzii+MQs5wEXccxMrRjRGnr+4zzSA25u5OHq3j9cLtwe7M/4LaP15L
/yvonhmOQIGxPzBy9oUkVn1RL9tiRTCz6cNWEr1oz4BM8cwHZGN67CbOW8rXRf14
KWm3X70X46DrLJ8YuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org