Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/G9vSJLBnNNVUS7BydwrhLE-yTYs.roa
File: G9vSJLBnNNVUS7BydwrhLE-yTYs.roa (raw, json)
Hash identifier: ybaUsk/7t/Bcos6GZ3/s8IO2ra95Rs9tsN3hlM11+jQ=
Subject key identifier: 1B:DB:D2:24:B0:67:34:D5:54:4B:B0:72:77:0A:E1:2C:4F:B2:4D:8B
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 06E2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/G9vSJLBnNNVUS7BydwrhLE-yTYs.roa
Signing time: Thu 18 May 2023 07:23:37 +0000
ROA not before: Thu 18 May 2023 07:23:37 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.41.232.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762 (0x6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: May 18 07:23:37 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=1BDBD224B06734D5544BB072770AE12C4FB24D8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:b4:2d:96:fa:9b:4f:4c:ff:83:34:37:7e:
ef:54:33:5d:b0:ca:97:ed:e3:5f:84:9c:bc:5d:40:
a9:0c:b9:7c:48:b3:89:34:ca:bc:c5:64:3d:f3:88:
2a:e9:bb:a8:6d:fe:48:88:89:a5:00:dd:92:10:7d:
9c:ca:1a:48:e7:cd:80:cd:36:e6:33:2d:dd:e7:9b:
40:bd:03:3f:d2:7b:a3:3d:f9:20:b3:d4:41:d1:a2:
bb:f1:f7:99:ea:98:9e:15:98:74:e5:ab:dc:dd:fb:
80:1a:a4:98:33:41:4f:26:21:86:91:23:91:d5:4f:
ab:6a:1b:1e:ef:24:fc:10:c4:1f:4a:b5:96:0e:8b:
f5:9c:3a:26:9f:c8:d5:9a:a4:45:4e:50:4f:b7:0c:
3c:7a:99:83:d2:bf:1a:97:88:a3:c9:54:de:4c:a0:
ca:ff:d0:7f:b5:e3:fa:e1:39:6a:33:a1:e7:f8:c6:
bd:a9:99:1a:b8:db:5b:b8:de:49:cc:d5:ee:3d:46:
64:69:2f:d6:25:31:5c:4f:fd:78:7b:ac:fc:78:59:
cd:c7:93:f0:39:5f:60:de:aa:82:6e:95:c8:19:9f:
88:d1:c0:9a:5d:0c:a0:ba:14:e3:19:ca:71:34:39:
6a:37:b0:60:6b:da:bd:c0:18:60:12:a3:da:30:20:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DB:D2:24:B0:67:34:D5:54:4B:B0:72:77:0A:E1:2C:4F:B2:4D:8B
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/G9vSJLBnNNVUS7BydwrhLE-yTYs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.41.232.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:8e:a3:f3:55:29:bd:6c:60:b2:4b:70:44:14:4a:a2:b7:c7:
06:ec:fd:4d:73:3a:2c:fd:62:68:4a:08:82:61:36:61:0b:44:
ac:62:1d:8f:87:89:32:95:39:40:41:01:b3:fc:63:17:22:d4:
96:32:90:af:15:70:85:7b:63:a7:79:9b:95:0a:6e:bb:45:71:
2b:24:c0:b4:5e:cf:11:ce:96:c4:56:36:e8:bd:13:b5:4f:10:
45:e0:a2:da:37:53:5a:fd:68:93:51:42:b8:37:53:b0:22:6f:
93:10:71:23:aa:de:dc:5b:fc:db:5b:9a:17:a7:a3:69:d3:78:
5f:68:33:3e:39:98:49:1e:02:bb:cb:90:ba:0d:e6:45:88:77:
38:bc:c1:c5:1e:7c:2d:f0:0d:6c:f1:d7:ab:51:86:67:9e:c8:
a0:0b:27:88:dc:53:9c:f7:92:fb:43:5d:c7:5f:96:f3:f4:b2:
b2:f0:10:f3:17:35:12:bb:72:60:74:71:e9:f9:08:1e:28:19:
06:6b:e1:94:33:76:af:b7:2d:31:9e:17:c1:d8:a5:25:e3:ec:
96:2f:12:1e:b7:a6:16:7f:19:59:d6:2b:39:48:98:7d:eb:36:
a5:32:45:9e:ed:67:1e:a7:6e:d9:38:ff:f2:1b:44:80:a6:fe:
6e:49:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org