Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/HokbgHJwT6OUZmkPDsvwojF1Btc.roa
File: HokbgHJwT6OUZmkPDsvwojF1Btc.roa (raw, json)
Hash identifier: jQsd0sKcdmCrI3zqOKV2BQUgwZkDXrJiSb6BO2xMPfw=
Subject key identifier: 1E:89:1B:80:72:70:4F:A3:94:66:69:0F:0E:CB:F0:A2:31:75:06:D7
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07E9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/HokbgHJwT6OUZmkPDsvwojF1Btc.roa
Signing time: Tue 13 Jun 2023 16:54:02 +0000
ROA not before: Tue 13 Jun 2023 16:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2025 (0x7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 16:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1E891B8072704FA39466690F0ECBF0A2317506D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:c6:13:ec:3f:7d:35:f5:e0:08:67:52:ab:
de:8a:5a:c5:c0:7e:dd:57:23:b3:76:ff:d3:c1:03:
7b:b3:4d:6d:4d:82:1a:8d:0e:4d:3d:c0:25:11:e9:
f8:2a:ab:49:9c:ec:6f:a7:9d:11:24:5d:29:4c:4e:
6b:04:91:3d:7d:2f:2b:ad:e5:f4:e0:b7:4c:16:70:
05:78:e1:bf:a7:67:9f:db:51:63:0f:af:28:cb:c2:
63:3e:9b:03:6a:47:2e:13:5a:da:95:d9:67:47:31:
7a:29:8c:91:bd:02:56:49:1f:d6:77:8c:c6:20:80:
2d:00:fe:95:28:81:62:79:47:e0:73:41:8b:7e:b0:
55:80:80:00:b9:b9:34:04:28:d8:a0:75:ba:6a:99:
12:5d:ab:53:0f:ce:04:ce:c5:97:31:5c:78:53:1a:
14:15:65:0f:53:ea:d0:e3:2c:12:74:f1:d0:f5:48:
cf:99:52:21:66:c0:0a:7c:65:ed:25:4c:77:4d:3f:
af:2d:f9:9f:38:34:be:81:d6:8e:9f:0d:bf:bd:cf:
18:be:97:b3:e6:5c:5b:65:63:44:68:ce:fa:e9:ed:
86:71:47:c1:8a:6f:4d:73:b1:31:8d:b9:14:fc:f4:
cd:32:2c:29:1a:b7:7a:f4:3f:b3:1b:50:23:2d:f0:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:1B:80:72:70:4F:A3:94:66:69:0F:0E:CB:F0:A2:31:75:06:D7
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/HokbgHJwT6OUZmkPDsvwojF1Btc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:c0:5b:b2:7c:b1:ef:cc:37:91:32:8a:36:83:71:13:51:b3:
a9:63:02:52:d7:e8:bf:9a:3e:68:60:79:e9:fe:0f:5f:45:1e:
6e:f6:2e:92:d5:3a:77:c9:5a:81:42:71:b1:b1:ca:2e:86:3e:
1e:1a:a1:b4:3d:c7:2c:f8:24:a9:61:01:ad:d8:4b:59:76:bb:
9d:b1:76:02:6f:c6:4e:22:a0:60:b0:c3:e1:4a:1a:a6:26:f0:
20:fe:72:1a:a7:d8:da:91:9d:da:b0:99:b3:c8:43:75:c4:52:
a5:5e:8f:d1:e7:6f:95:c8:e4:19:17:56:4e:81:21:0e:a1:17:
23:9e:c0:bf:8d:48:94:f1:65:69:89:c5:8e:97:cd:1e:01:cf:
56:b8:a1:ee:c5:40:06:fd:2a:d9:24:98:08:48:78:f7:df:a4:
1d:9f:83:ed:d7:b8:74:43:c0:66:f0:ef:2a:dd:b1:b7:01:4f:
ec:85:48:04:93:c7:1f:7f:34:4e:b6:36:90:a9:52:de:0d:aa:
99:09:85:40:78:ad:52:ec:49:f2:ff:51:69:d8:ad:95:22:d9:
40:8c:26:03:20:6c:fe:b0:eb:19:c1:53:bd:b1:6f:6f:0d:c2:
7c:bc:6e:21:c6:e2:3b:bf:1e:77:f9:bc:d8:31:06:50:5f:cf:
79:c2:20:1f
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
NjU0MDJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDFFODkxQjgwNzI3MDRG
QTM5NDY2NjkwRjBFQ0JGMEEyMzE3NTA2RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0t8YT7D99NfXgCGdSq96KWsXAft1XI7N2/9PBA3uzTW1NghqN
Dk09wCUR6fgqq0mc7G+nnREkXSlMTmsEkT19Lyut5fTgt0wWcAV44b+nZ5/bUWMP
ryjLwmM+mwNqRy4TWtqV2WdHMXopjJG9AlZJH9Z3jMYggC0A/pUogWJ5R+BzQYt+
sFWAgAC5uTQEKNigdbpqmRJdq1MPzgTOxZcxXHhTGhQVZQ9T6tDjLBJ08dD1SM+Z
UiFmwAp8Ze0lTHdNP68t+Z84NL6B1o6fDb+9zxi+l7PmXFtlY0Rozvrp7YZxR8GK
b01zsTGNuRT89M0yLCkat3r0P7MbUCMt8CVhAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUHokbgHJwT6OUZmkPDsvwojF1BtcwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvSG9rYmdISndUNk9V
Wm1rUERzdndvakYxQnRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAO8Bb
snyx78w3kTKKNoNxE1GzqWMCUtfov5o+aGB56f4PX0UebvYuktU6d8lagUJxsbHK
LoY+HhqhtD3HLPgkqWEBrdhLWXa7nbF2Am/GTiKgYLDD4UoapibwIP5yGqfY2pGd
2rCZs8hDdcRSpV6P0edvlcjkGRdWToEhDqEXI57Av41IlPFlaYnFjpfNHgHPVrih
7sVABv0q2SSYCEh499+kHZ+D7de4dEPAZvDvKt2xtwFP7IVIBJPHH380TrY2kKlS
3g2qmQmFQHitUuxJ8v9RaditlSLZQIwmAyBs/rDrGcFTvbFvbw3CfLxuIcbiO78e
d/m82DEGUF/PecIgHw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org