Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/GWTgC0mxLDth-JDpdLzeTGQzkfo.roa
File: GWTgC0mxLDth-JDpdLzeTGQzkfo.roa (raw, json)
Hash identifier: XXZHq9FaZsidIoYbO9CBp5TJcvLO6c7uZGMFy2Owtj8=
Subject key identifier: 19:64:E0:0B:49:B1:2C:3B:61:F8:90:E9:74:BC:DE:4C:64:33:91:FA
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08C9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/GWTgC0mxLDth-JDpdLzeTGQzkfo.roa
Signing time: Wed 14 Jun 2023 20:54:07 +0000
ROA not before: Wed 14 Jun 2023 20:54:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 20:54:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1964E00B49B12C3B61F890E974BCDE4C643391FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:da:9a:ae:32:02:12:6a:2b:cb:b4:9e:53:
6f:73:1e:7e:fa:05:7d:9c:b2:14:c0:b2:a7:a5:c2:
ca:92:43:d6:64:c3:b1:69:89:b4:3f:51:37:d7:ea:
71:2f:c9:40:17:70:41:c3:00:7f:db:88:38:1b:0e:
f8:76:4f:4d:2d:a5:83:e1:18:45:86:05:40:cd:4e:
69:26:08:d8:c0:2b:a0:5b:eb:a8:af:3d:fa:92:8e:
96:95:02:3a:61:a3:20:b7:da:6d:84:eb:c9:47:e7:
8d:3b:db:0f:3a:8d:52:78:99:79:3d:17:23:03:30:
9f:61:c8:05:f4:c0:fb:a6:bf:fe:bf:f9:5d:97:8c:
00:55:4e:fc:99:7e:b5:27:8d:85:62:bf:24:2c:38:
e0:8e:02:1f:71:10:45:88:ae:4e:5d:38:29:32:61:
91:3a:0c:dc:75:88:87:6a:c4:f3:91:e2:9b:0c:55:
98:04:c8:3e:2e:95:3c:a7:88:06:b8:e3:fb:cc:08:
8a:92:bb:87:cd:fb:fe:d1:b3:25:7d:ee:b0:b0:b7:
5b:9c:1d:3a:e5:48:b9:1c:b9:04:72:ac:88:fb:e7:
f6:9d:79:9d:5c:75:3a:83:16:b1:cf:13:42:dc:8a:
3d:e7:49:99:aa:53:2f:4b:3c:0f:1e:49:4c:71:26:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:64:E0:0B:49:B1:2C:3B:61:F8:90:E9:74:BC:DE:4C:64:33:91:FA
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/GWTgC0mxLDth-JDpdLzeTGQzkfo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:06:4e:fc:ac:51:05:c0:48:1a:ac:a0:21:51:c1:a0:02:db:
4f:9b:c6:4c:e6:41:96:62:d3:29:e8:fe:75:4e:17:9c:d2:36:
54:25:52:e5:5a:de:88:c4:87:b6:11:4c:6a:8c:b0:a7:68:5f:
a4:0b:d4:01:1c:6c:cd:68:6e:b5:5c:0b:27:cd:6d:64:e4:fe:
d5:97:c9:f9:00:00:25:98:d9:b4:6f:42:2e:03:89:7f:57:41:
ef:f2:87:9b:b6:5d:fb:8f:c8:10:e0:87:a1:0b:75:06:9f:38:
de:84:55:ad:6c:84:43:58:eb:00:91:c6:12:cd:16:b3:7a:11:
89:91:9a:55:e3:85:58:71:1b:29:85:12:c4:93:c0:6e:54:df:
4f:7a:f3:a2:f8:c5:ee:1a:7c:c9:17:8f:c7:ae:c5:4f:b6:90:
be:90:1c:5c:c1:c2:5f:bd:86:5b:ac:b1:de:55:0e:28:84:50:
f8:19:e6:6d:91:f4:7a:c7:39:f1:e9:f1:4d:18:64:d4:1b:49:
ce:c1:27:2f:ed:da:ea:55:20:26:90:b9:78:e4:8f:c4:5e:2f:
f7:47:49:39:5a:a7:0e:85:da:d5:34:07:24:a1:42:d4:1a:e5:
fd:ba:6b:ec:c3:0b:67:69:9d:67:45:6d:a5:40:98:b1:7b:0b:
50:f8:1e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org