Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/IC1UgDT-zfo0kmn12bEUKjJJMWA.roa
File: IC1UgDT-zfo0kmn12bEUKjJJMWA.roa (raw, json)
Hash identifier: S9LISJbP/iImyIy2yxg6hcgd/CnUmdTivdq+mO7tZMs=
Subject key identifier: 20:2D:54:80:34:FE:CD:FA:34:92:69:F5:D9:B1:14:2A:32:49:31:60
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0901
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/IC1UgDT-zfo0kmn12bEUKjJJMWA.roa
Signing time: Thu 15 Jun 2023 03:54:08 +0000
ROA not before: Thu 15 Jun 2023 03:54:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 03:54:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=202D548034FECDFA349269F5D9B1142A32493160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:d3:d3:24:b8:de:0c:3b:ab:29:9d:dd:a1:
7d:3e:d3:0d:1a:c9:44:db:c4:de:2c:33:c2:7a:46:
68:f1:e2:9b:79:e1:56:f5:86:a7:ae:05:68:5a:b0:
e7:d5:c5:1d:0d:c8:f5:f6:5c:aa:17:2a:98:06:0c:
3c:6c:cb:50:cd:0e:4c:0b:5a:97:64:d5:e1:e5:8a:
4f:12:a9:bb:c4:fd:07:4b:1f:b8:70:07:ae:ec:ca:
74:18:c5:ad:9c:1a:4a:f3:55:06:d3:97:3d:9d:14:
73:6d:5d:c2:bb:5e:23:10:5a:37:de:55:91:0f:96:
80:3e:38:a9:11:72:b8:d5:33:5a:ee:a6:3c:b0:64:
26:cc:88:0c:57:97:31:73:a6:0c:34:bc:55:27:96:
4b:6d:52:82:73:3e:84:f8:8e:cd:b2:65:6f:08:23:
2a:c2:d7:0e:14:93:5b:9e:db:ba:bc:b7:cc:17:e1:
a6:60:7f:17:23:2d:94:50:f4:5a:e5:06:88:85:83:
94:9b:85:5a:ae:3d:a5:b4:42:6a:78:e6:7e:28:6f:
d9:a7:c8:20:39:65:95:0e:bc:58:97:c1:c0:dd:52:
2e:94:6d:2a:d7:7a:86:7a:1d:b3:10:d0:7e:81:f7:
7c:a3:51:83:c5:b1:cd:6b:8a:63:3c:50:c0:c6:fa:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2D:54:80:34:FE:CD:FA:34:92:69:F5:D9:B1:14:2A:32:49:31:60
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/IC1UgDT-zfo0kmn12bEUKjJJMWA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:df:92:61:36:54:26:de:53:58:38:88:81:17:1c:8e:6d:02:
4f:7f:ca:63:86:1f:18:71:ea:17:e2:f6:52:c7:e4:29:dc:bc:
52:67:74:ba:32:43:96:6a:05:59:ec:31:91:85:ff:33:74:da:
4e:23:82:57:2c:12:8f:67:63:e3:a2:ec:8c:1a:33:3e:b8:a7:
c3:98:13:e9:d0:fd:c3:05:4e:ab:66:f2:02:32:2c:3b:cc:c9:
11:ed:84:1e:a4:db:8c:dd:4f:58:b4:9e:c8:e0:7c:25:2b:69:
a8:34:2c:93:05:d3:fa:ac:85:dc:e8:aa:5a:2d:25:8d:a7:d0:
62:f7:bc:64:45:a3:fc:9f:93:5b:d6:6f:df:0d:59:79:09:aa:
d5:7e:36:ad:aa:ca:6a:11:ba:e6:ce:5c:dc:66:c9:2e:2b:26:
29:cd:5b:08:18:84:e5:2b:8f:95:70:66:1b:e1:f4:73:0d:e1:
61:39:3f:45:bf:52:bd:a0:cf:67:69:90:dd:bf:0a:d1:20:4c:
87:99:c8:43:51:91:52:c8:ee:47:2f:5a:31:1b:5d:cc:1d:36:
e6:23:ef:06:aa:43:7e:7e:20:d2:23:09:fb:06:f5:60:aa:47:
91:5d:40:82:cd:c5:e9:04:57:52:f4:90:c3:bc:54:e5:46:de:
95:38:bc:8d
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTUw
MzU0MDhaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDIwMkQ1NDgwMzRGRUNE
RkEzNDkyNjlGNUQ5QjExNDJBMzI0OTMxNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+odPTJLjeDDurKZ3doX0+0w0ayUTbxN4sM8J6Rmjx4pt54Vb1
hqeuBWhasOfVxR0NyPX2XKoXKpgGDDxsy1DNDkwLWpdk1eHlik8SqbvE/QdLH7hw
B67synQYxa2cGkrzVQbTlz2dFHNtXcK7XiMQWjfeVZEPloA+OKkRcrjVM1rupjyw
ZCbMiAxXlzFzpgw0vFUnlkttUoJzPoT4js2yZW8IIyrC1w4Uk1ue27q8t8wX4aZg
fxcjLZRQ9FrlBoiFg5SbhVquPaW0Qmp45n4ob9mnyCA5ZZUOvFiXwcDdUi6UbSrX
eoZ6HbMQ0H6B93yjUYPFsc1rimM8UMDG+kEfAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUIC1UgDT+zfo0kmn12bEUKjJJMWAwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvSUMxVWdEVC16Zm8w
a21uMTJiRVVLakpKTVdBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAjt+S
YTZUJt5TWDiIgRccjm0CT3/KY4YfGHHqF+L2UsfkKdy8Umd0ujJDlmoFWewxkYX/
M3TaTiOCVywSj2dj46LsjBozPrinw5gT6dD9wwVOq2byAjIsO8zJEe2EHqTbjN1P
WLSeyOB8JStpqDQskwXT+qyF3OiqWi0ljafQYve8ZEWj/J+TW9Zv3w1ZeQmq1X42
rarKahG65s5c3GbJLismKc1bCBiE5SuPlXBmG+H0cw3hYTk/Rb9SvaDPZ2mQ3b8K
0SBMh5nIQ1GRUsjuRy9aMRtdzB025iPvBqpDfn4g0iMJ+wb1YKpHkV1Ags3F6QRX
UvSQw7xU5UbelTi8jQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org