Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/IbzEfbUUCShIpeYwcdxvObA4yPg.roa
File: IbzEfbUUCShIpeYwcdxvObA4yPg.roa (raw, json)
Hash identifier: DEhwvv8m69I5MHMkYs03whJxfw6gUcSaCYXBM6qJLdA=
Subject key identifier: 21:BC:C4:7D:B5:14:09:28:48:A5:E6:30:71:DC:6F:39:B0:38:C8:F8
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 082D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/IbzEfbUUCShIpeYwcdxvObA4yPg.roa
Signing time: Wed 14 Jun 2023 01:24:03 +0000
ROA not before: Wed 14 Jun 2023 01:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2093 (0x82d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 01:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=21BCC47DB514092848A5E63071DC6F39B038C8F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:fb:0e:48:6e:98:57:ec:12:42:6e:af:6e:
dc:9e:a8:00:ad:17:9a:98:7a:a5:46:f8:59:b6:4b:
89:0c:c8:b9:01:75:4a:db:fc:48:98:50:cc:f2:6c:
e7:c9:b6:f7:60:5c:bb:21:28:77:99:42:62:97:6c:
ca:48:fc:fe:2e:7d:5d:8c:0b:fb:ba:d8:a4:a7:28:
8f:b0:2a:15:74:56:58:f2:3b:b7:09:82:90:24:c0:
9f:7d:fc:f6:6f:56:0b:ad:b6:a3:92:64:75:6f:39:
fe:07:cd:65:ed:e5:8c:74:3a:2b:8f:98:4f:5d:8c:
d7:50:0a:15:df:fb:db:db:7c:8d:88:ef:2f:e1:b8:
da:33:48:5d:05:69:28:67:29:09:02:75:49:ff:ba:
f7:d4:91:a5:ac:72:39:4f:d2:c3:2a:5f:a2:3c:bc:
6e:dc:1b:4c:0a:73:96:bf:fc:d1:49:62:30:44:74:
4c:2c:25:e9:2f:9f:e2:e6:4b:b1:7d:e7:48:c9:ce:
b6:1d:4d:99:a6:b6:5d:e7:86:c1:4f:5f:be:2c:21:
6a:ed:be:d7:ea:e9:5e:0d:53:73:f2:a3:66:01:46:
20:8d:b9:1f:2b:4b:5f:b9:d0:2d:64:27:97:95:c6:
cd:d0:76:75:94:46:69:cd:e1:3e:c7:a0:55:6a:3e:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BC:C4:7D:B5:14:09:28:48:A5:E6:30:71:DC:6F:39:B0:38:C8:F8
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/IbzEfbUUCShIpeYwcdxvObA4yPg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:33:2a:a5:ec:56:4b:c3:82:f3:21:94:ac:dd:31:ce:4b:0f:
de:c8:b5:f9:02:3f:58:b0:2c:83:b1:69:f2:19:2b:b1:ad:25:
13:c1:b2:7f:35:49:3c:98:da:09:4d:50:2b:3d:89:e6:2f:57:
26:dc:4f:0e:3b:86:2c:c8:2c:4c:23:11:35:99:7d:46:6a:b9:
2e:f6:dc:e9:47:ff:6b:ac:1c:b5:61:f8:29:e8:7d:78:8b:bf:
85:08:d6:b7:7f:b3:c9:8d:c4:a3:d2:92:b4:57:87:f4:bf:b4:
f0:fa:43:21:f8:52:9e:9b:13:c3:bf:a8:5d:cd:3f:85:ab:fb:
13:33:ad:29:ef:e7:7f:df:6e:fb:6e:d5:0a:d7:63:2c:cf:ac:
c9:6f:70:c1:e3:bd:3d:1f:c5:9b:09:01:1b:5c:fb:ad:aa:2f:
63:9e:37:0b:0f:4b:53:b9:6e:20:36:9b:e7:30:3e:21:ad:71:
a6:f8:4b:19:59:c4:e5:b8:4a:0d:15:6c:30:dc:27:58:e4:2a:
cd:df:fa:f9:87:1d:bb:55:8a:f7:c3:16:e0:b9:7c:28:c2:1b:
6e:24:d1:7c:7f:97:22:38:50:87:6d:ad:11:af:e8:69:19:d1:
43:24:c9:ca:a7:7e:86:6e:94:bd:74:3a:d4:0d:79:f1:93:56:
82:ad:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org