Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/FOBfkAmZSQGpC3uijBi5XQOcSYA.roa
File: FOBfkAmZSQGpC3uijBi5XQOcSYA.roa (raw, json)
Hash identifier: kxrYjMY3rXm/Uvjq/lJQVWxLxboZ3z4OQ+55v6Qla20=
Subject key identifier: 14:E0:5F:90:09:99:49:01:A9:0B:7B:A2:8C:18:B9:5D:03:9C:49:80
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0936
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/FOBfkAmZSQGpC3uijBi5XQOcSYA.roa
Signing time: Thu 15 Jun 2023 07:24:05 +0000
ROA not before: Thu 15 Jun 2023 07:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2358 (0x936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 07:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=14E05F9009994901A90B7BA28C18B95D039C4980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a7:4d:62:12:e3:63:c4:ea:09:ad:4f:39:d7:
54:62:74:a7:1c:f2:06:ec:84:38:5c:e8:2c:e7:22:
c9:2f:a3:4f:75:53:8f:fb:4e:61:a2:aa:30:03:ae:
2c:d7:3f:e6:1a:fc:5f:fc:1b:07:48:ca:e0:1b:1f:
24:d9:6f:12:f6:c8:83:38:27:26:af:c0:86:e0:d5:
f3:f6:01:21:df:bc:a9:6a:28:90:6d:77:c6:12:97:
7f:b7:85:82:49:bb:b5:0b:08:11:67:c7:9f:b1:46:
8b:92:25:5c:1c:6a:60:b6:2b:14:e5:1b:88:a9:1f:
0a:9d:e2:50:ec:15:b4:b5:04:ac:00:5f:ff:52:12:
65:73:fe:5c:1b:49:e7:ba:ba:07:d3:23:b7:19:8e:
e3:c9:1b:4b:41:5f:40:59:1b:45:cc:f1:f4:35:e1:
53:dd:c6:67:e5:1c:c0:b3:2f:bb:58:08:64:08:ea:
84:6c:d6:7a:f2:09:68:6f:b4:df:71:0b:5a:fb:6c:
20:13:6a:7a:a0:37:c1:f1:ee:45:fd:d6:16:d7:42:
76:64:aa:92:30:3a:ff:af:bb:e5:fa:ba:a4:cd:b5:
f0:9e:6b:3b:ff:74:bc:20:1d:cd:e4:0b:f5:91:39:
6a:e2:7e:60:ff:f1:1d:39:cd:41:57:43:41:a2:0e:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E0:5F:90:09:99:49:01:A9:0B:7B:A2:8C:18:B9:5D:03:9C:49:80
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/FOBfkAmZSQGpC3uijBi5XQOcSYA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
21:8d:74:80:52:9f:d5:d2:5d:7d:ec:05:11:6d:de:b3:a3:4b:
09:f4:23:67:36:95:0f:43:d7:bc:a0:f4:d1:67:89:f2:0d:63:
74:0d:ce:f9:f5:1b:42:dd:9e:47:b8:a6:83:2c:54:e7:4a:82:
b7:bb:37:08:fb:e9:ed:6d:31:52:e1:f0:f6:c8:33:c5:93:17:
5d:85:a6:d6:8e:a7:4f:fb:c6:3c:c8:ba:2a:28:c6:0e:cf:d6:
40:52:3c:ca:cf:c3:8f:c8:1d:9b:db:85:4f:6e:47:f5:8d:77:
31:b7:46:55:3e:35:32:67:51:91:1c:d7:3e:da:e2:1e:c2:25:
68:31:47:0f:e1:f8:1e:6c:3d:1e:3e:f3:af:98:13:da:f0:d9:
ec:7f:c8:08:91:a9:34:0e:fa:06:0e:2f:9e:f4:a2:ce:47:94:
a9:a5:b6:e3:df:79:d8:c9:b5:1c:50:04:3c:35:b3:f8:0a:18:
80:d7:e9:65:1d:55:b5:5a:ef:e2:92:e3:8e:72:85:a5:f5:3a:
3e:a3:88:1d:7b:c7:a3:71:43:ba:0e:1f:f0:de:ac:80:d8:4d:
ac:35:5d:57:b3:fd:f5:3d:4a:52:1a:ad:af:73:41:3d:7d:5f:
76:8b:aa:09:5a:1f:be:f6:83:e2:28:13:3b:71:83:a9:79:d5:
57:8e:97:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org