Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/EtOZdjIYIM97E9EoWdkJM7ikASQ.roa
File: EtOZdjIYIM97E9EoWdkJM7ikASQ.roa (raw, json)
Hash identifier: aP1EcJECO9EVfJ8leccHrzzm8GACLsqxvxW6hY0Pnek=
Subject key identifier: 12:D3:99:76:32:18:20:CF:7B:13:D1:28:59:D9:09:33:B8:A4:01:24
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0841
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/EtOZdjIYIM97E9EoWdkJM7ikASQ.roa
Signing time: Wed 14 Jun 2023 03:54:04 +0000
ROA not before: Wed 14 Jun 2023 03:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2113 (0x841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 03:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=12D39976321820CF7B13D12859D90933B8A40124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:37:4d:ca:fb:66:ea:66:95:0b:e9:06:66:
f0:8e:11:99:2c:c5:d6:0c:3c:e3:28:76:24:2d:3c:
c1:fc:9d:b0:f0:d3:8b:9f:10:69:0b:cd:2c:74:c4:
b6:57:91:31:4e:a2:39:50:c2:ff:36:2a:55:51:0c:
80:e2:a2:6e:e9:c2:bb:2a:57:88:71:bb:9f:28:a7:
98:91:85:f9:f8:cc:69:f3:1b:48:b8:de:71:3d:01:
0c:26:29:e3:96:89:98:4b:25:9c:91:86:69:7b:76:
5f:b7:75:2d:a7:86:98:a9:11:7e:57:a4:7e:07:3a:
8d:51:d6:07:f2:cd:6b:17:ef:89:e8:ce:20:50:ec:
aa:11:8c:16:9d:91:eb:20:71:6c:f1:28:65:0f:96:
39:0b:0d:e8:43:1c:cc:62:66:f5:5a:6a:09:34:69:
e0:65:9e:06:61:f3:21:c7:b1:8e:9a:67:3d:d7:a0:
b5:d2:52:0e:15:8e:35:c6:87:63:c0:a2:89:de:98:
68:4a:1a:87:af:52:3d:b3:bb:10:af:0c:fe:ee:8d:
ee:1b:f0:eb:73:9d:59:af:f0:4d:77:ca:0e:9b:ab:
de:fe:29:23:81:7e:99:bf:b9:50:3e:40:e0:d8:3b:
b4:bd:19:3a:74:78:d2:0c:4c:7d:b9:36:b0:5a:97:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D3:99:76:32:18:20:CF:7B:13:D1:28:59:D9:09:33:B8:A4:01:24
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/EtOZdjIYIM97E9EoWdkJM7ikASQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
81:1e:ef:15:cb:71:53:86:b4:8e:a7:09:47:41:58:09:72:a4:
3d:37:a9:72:4f:4f:c8:b7:1c:fa:0b:b8:48:3f:9a:5f:e3:1b:
ae:26:89:7d:da:37:e2:f3:a9:9c:fa:03:ee:cd:e6:65:e8:0a:
8d:13:76:4b:00:86:b3:ae:5e:99:89:ad:6e:b6:b3:1e:c6:c4:
36:b7:81:f9:14:4e:b2:bc:ad:0f:d8:4b:11:22:5b:be:31:67:
05:cc:c5:cf:8b:19:e7:91:93:1d:9b:63:43:d3:7a:9c:77:40:
40:44:86:b9:5f:b8:69:00:45:6e:84:a8:d0:51:86:4d:5a:18:
d3:cf:69:1e:54:03:77:a8:60:dc:ef:be:90:0f:35:54:6a:73:
f4:0b:c4:e4:c1:ab:93:37:c8:b1:3e:fd:62:20:4b:41:a0:2f:
8e:cc:9c:a1:c3:5d:d1:19:e3:ef:88:d2:ac:9d:55:6e:d7:8c:
38:f0:b0:04:ba:24:d8:21:97:62:86:1b:f2:44:f2:83:e0:a7:
f7:3e:bf:f6:25:18:ca:e6:54:d9:fa:65:22:2a:e3:d1:af:53:
52:73:a6:d3:7d:fa:93:79:67:99:5d:87:a6:dd:79:13:80:b9:
98:32:5a:a2:d7:0c:31:81:eb:e0:cc:0c:06:ba:09:18:9a:bf:
86:f1:cc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org