Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/I0SARFYfhwhauNg2tiJM68bI8Fo.roa
File: I0SARFYfhwhauNg2tiJM68bI8Fo.roa (raw, json)
Hash identifier: uIR1c52DrrcxFWaZnHXP4t86lg0BODOXvWEwe5jgOSk=
Subject key identifier: 23:44:80:44:56:1F:87:08:5A:B8:D8:36:B6:22:4C:EB:C6:C8:F0:5A
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0879
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/I0SARFYfhwhauNg2tiJM68bI8Fo.roa
Signing time: Wed 14 Jun 2023 10:54:05 +0000
ROA not before: Wed 14 Jun 2023 10:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2169 (0x879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 10:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=23448044561F87085AB8D836B6224CEBC6C8F05A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:22:a6:26:d3:cc:62:19:7c:91:76:fb:6a:
9d:c2:23:be:62:b8:f6:cf:c1:99:cc:ff:df:38:d5:
08:6d:7d:ae:5e:43:01:1d:9e:24:a4:e5:06:b8:f2:
45:5f:ca:d3:48:33:2a:ba:c6:fd:17:96:dd:e4:11:
b3:2d:1b:ed:7c:15:26:f9:c8:44:38:3f:f2:fd:5e:
ed:a9:5b:bf:aa:66:7d:fd:45:d3:12:be:7f:43:b1:
4d:d5:1f:87:c1:0d:11:e8:46:81:85:43:3c:59:cb:
b1:34:6d:39:36:6d:68:2b:eb:e9:4e:02:dd:33:d9:
bd:16:85:d7:cb:e0:b4:4f:d2:36:28:6d:e3:46:32:
cb:40:20:e8:da:a6:5b:cf:80:d1:09:9d:19:1e:2f:
1e:a6:ad:bf:b0:6e:3b:6c:78:7a:53:d4:69:42:82:
0c:b4:d3:7e:65:64:b1:b4:b3:44:38:36:9d:a9:73:
b8:8b:47:69:cc:ee:61:9c:52:1e:5b:34:2a:d1:37:
f9:d8:2d:5a:70:9c:59:bf:ea:62:30:06:22:dc:b1:
fb:fa:0b:79:04:ed:bc:58:08:1a:0f:71:09:33:9a:
db:72:5e:e3:26:3e:63:90:70:19:17:d2:25:83:fd:
91:27:27:10:bd:5d:46:11:57:71:8a:03:95:a3:6c:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:44:80:44:56:1F:87:08:5A:B8:D8:36:B6:22:4C:EB:C6:C8:F0:5A
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/I0SARFYfhwhauNg2tiJM68bI8Fo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
31:d4:a4:e7:3f:11:ca:a1:0e:1a:2e:a6:fd:fe:d2:fa:e9:60:
3e:01:5f:c3:23:a5:8a:1b:93:1c:96:b9:6a:46:d1:bc:26:41:
40:12:e1:8b:12:38:9f:7f:1c:cc:6e:2c:ee:98:1b:a9:5a:dd:
67:76:e9:e6:65:0a:51:d6:ad:8f:72:32:17:fa:48:17:fc:0e:
37:ea:ed:a4:ec:c4:fd:af:0c:e9:21:cb:f1:44:cc:8e:f3:12:
67:5f:f4:75:30:89:bd:33:bd:b2:ed:89:fe:bc:a3:a8:33:ef:
f2:36:ef:25:9c:0a:8b:df:ad:af:39:ff:19:fc:df:d8:ca:12:
ad:4c:1e:01:1c:47:5b:88:66:ad:35:c4:3e:8b:5f:6c:36:a7:
bf:e8:d4:e4:a6:8e:25:da:b3:c5:8b:5b:a1:26:54:14:ad:da:
cf:6e:d7:ab:24:b0:fe:60:5e:5e:e8:e4:eb:ec:b8:d9:df:01:
f6:f7:d3:cf:cb:d5:0e:fd:9e:33:d1:92:72:fb:49:a7:8f:7a:
f4:c6:15:7c:b8:60:0f:d3:c2:a2:5d:9d:29:bb:63:82:e5:9a:
38:f7:33:58:1b:2f:22:21:0f:c6:ae:73:94:27:ca:75:5b:2e:
e0:ed:06:44:0d:f6:39:26:81:6d:5b:1d:78:d9:5d:54:0f:1e:
7a:dc:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org