Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/GFJ4ZPsFQy4n93thhDI1P3Es3cY.roa
File: GFJ4ZPsFQy4n93thhDI1P3Es3cY.roa (raw, json)
Hash identifier: WCDC9spunTESSRbI0LUNOvVNrv1gPJoiEYNvDYTrncg=
Subject key identifier: 18:52:78:64:FB:05:43:2E:27:F7:7B:61:84:32:35:3F:71:2C:DD:C6
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07B5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/GFJ4ZPsFQy4n93thhDI1P3Es3cY.roa
Signing time: Tue 13 Jun 2023 10:24:01 +0000
ROA not before: Tue 13 Jun 2023 10:24:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973 (0x7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 10:24:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=18527864FB05432E27F77B618432353F712CDDC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:0b:ba:61:e1:42:c5:a2:a0:e5:9c:41:62:
c6:8e:bf:e2:e3:9a:e2:27:44:06:cf:df:23:90:f5:
10:14:ed:9c:56:e1:20:a6:f1:c0:c3:43:46:ef:f2:
8e:da:84:df:ad:7f:20:95:34:89:3b:f7:68:1d:d4:
fd:89:53:58:bd:4e:6a:12:ad:9d:e7:50:b4:8d:c5:
6a:da:7b:a3:d9:61:15:66:a5:fb:4d:ee:f7:02:5a:
03:5d:4d:26:74:d9:b1:61:ca:ef:d0:1e:5d:39:53:
b6:cd:cc:93:d7:31:0e:5c:26:28:ae:52:3e:4f:6e:
76:74:15:55:ce:b0:33:7b:8d:ca:ea:dc:f9:37:f5:
b8:c5:5e:31:77:74:d7:db:18:9b:d0:0a:b1:ed:93:
e8:ef:ea:95:d1:09:cc:7b:84:e5:ea:74:bd:4c:de:
23:15:db:e1:04:a4:e8:0b:9b:f8:cc:51:e9:26:cb:
43:07:f9:be:0a:d1:1d:82:af:6b:0e:ef:6c:0d:e6:
0c:55:59:a4:8f:ea:a5:34:6f:d8:82:b6:f8:25:e7:
a7:0e:9c:83:2d:ea:a8:6f:35:46:07:d8:15:f1:23:
f1:90:0d:d1:ba:b3:29:3c:44:d1:eb:0b:db:76:d4:
a5:e8:15:a1:76:ec:f5:e9:d8:ab:cc:d1:f4:cd:73:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:52:78:64:FB:05:43:2E:27:F7:7B:61:84:32:35:3F:71:2C:DD:C6
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/GFJ4ZPsFQy4n93thhDI1P3Es3cY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
21:76:a7:cb:00:65:fa:8a:5b:24:5d:e8:d9:7f:86:06:dc:19:
85:22:a0:6c:43:fc:5e:50:71:5c:db:93:9c:82:f0:d7:9a:3b:
6a:43:a0:a8:a3:f1:93:38:85:80:86:a5:f0:19:5d:9b:b6:89:
c3:c3:c8:0d:d7:c0:3f:f5:ac:b1:d1:49:64:06:0d:a8:f1:b2:
20:28:3d:76:35:1d:ac:54:d7:e4:b3:01:e3:19:37:d1:6f:8f:
d0:87:99:57:3b:ba:cf:1b:3f:96:86:d5:d4:cb:72:e4:e6:d2:
cc:07:bc:66:96:bf:ff:a2:5a:87:59:36:23:04:ce:a7:04:bd:
b0:f5:d5:0d:ce:68:24:6c:9d:b4:3b:ca:87:87:9f:64:cb:0d:
47:cb:08:da:0a:53:e6:14:3a:01:63:97:f3:ff:3a:1a:7b:c0:
f4:d6:25:20:b5:5e:52:6b:5c:1b:fd:d2:27:fe:65:33:4a:90:
bd:63:d7:09:27:8e:88:28:7d:20:8b:06:7e:f0:85:d4:c5:75:
f9:b1:76:33:e3:4d:56:9f:23:98:67:02:47:d4:4c:0c:a6:e3:
fe:d0:5e:49:92:a2:d0:75:ba:09:55:f7:c3:3d:7d:ab:f5:32:
e5:df:0a:9d:cd:42:3c:f2:35:86:d5:38:7d:17:25:69:41:7e:
15:c0:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org