Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Ixcaf17QvJzFlei_GWM4kxIFxK8.roa
File: Ixcaf17QvJzFlei_GWM4kxIFxK8.roa (raw, json)
Hash identifier: 6osFpwFvh+dS85f0EKwZzR1mEu59cw6Mie3PzVOD3AY=
Subject key identifier: 23:17:1A:7F:5E:D0:BC:9C:C5:95:E8:BF:19:63:38:93:12:05:C4:AF
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0881
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Ixcaf17QvJzFlei_GWM4kxIFxK8.roa
Signing time: Wed 14 Jun 2023 11:54:03 +0000
ROA not before: Wed 14 Jun 2023 11:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177 (0x881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 11:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=23171A7F5ED0BC9CC595E8BF196338931205C4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:37:6d:f9:80:76:78:b3:02:65:0e:8d:d4:
ca:02:0f:88:60:ce:f0:96:b1:28:13:bb:ab:a6:a8:
fe:af:35:10:04:f1:cc:69:e8:dd:bc:85:ec:0b:1f:
5e:54:da:67:69:99:a7:13:3e:e0:8b:13:66:5d:52:
2a:90:83:e2:cc:26:b2:56:e4:41:89:0f:c0:7c:8e:
ef:90:9e:02:f2:e3:e4:ec:e9:53:cd:df:77:9c:f6:
8d:7b:5a:1a:3b:4e:cc:bc:24:5b:d8:90:1c:d6:77:
36:3f:81:10:eb:bf:1f:02:da:b9:a2:0f:45:af:1c:
97:71:82:a9:6d:f0:0f:ba:1a:5c:25:cd:b7:08:07:
1c:65:97:4c:9d:51:6d:6d:62:1b:a8:5f:b3:72:ca:
e1:1e:44:3a:5d:5b:13:4e:c1:b1:95:35:e6:ba:5e:
a0:8c:ca:9c:ca:69:88:e9:0b:51:e7:77:54:7c:f8:
3d:2c:6d:3b:16:a4:c2:02:07:bb:3d:ac:53:b7:28:
9f:b1:bf:2b:38:a3:6d:28:f4:7c:6c:d4:73:7f:1f:
5a:02:ae:65:09:35:dd:8d:38:18:9a:ae:61:a9:93:
a4:4b:d9:56:70:55:c1:31:ae:c3:e9:45:6e:6d:f9:
91:53:36:c8:2b:40:e0:d2:c4:53:e1:d1:0e:b2:00:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:1A:7F:5E:D0:BC:9C:C5:95:E8:BF:19:63:38:93:12:05:C4:AF
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Ixcaf17QvJzFlei_GWM4kxIFxK8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:ae:4e:b5:0e:03:e4:f6:35:bc:1c:dc:7e:0f:1c:75:e0:16:
d7:a9:f0:83:5c:21:1e:5f:e8:c3:6e:c7:2a:33:49:23:d7:cf:
51:3b:5f:b5:ae:5a:d0:5c:10:a8:2c:d5:8c:9c:ae:82:14:86:
6b:83:c3:c7:0e:3c:51:ca:97:73:b8:78:76:e5:85:00:2d:98:
f4:71:39:0a:77:cc:26:b2:9c:79:b9:2b:d8:a8:95:67:ff:35:
df:ff:c8:e7:3b:ac:bd:72:db:b8:6a:36:ec:ef:66:11:14:f0:
f1:da:c3:4e:1d:97:92:7b:59:a4:44:21:1a:87:95:e5:bb:e3:
59:cd:72:3a:ba:6c:97:74:f5:79:f7:e2:10:97:61:c0:6c:de:
bc:68:cb:02:21:23:41:90:50:ee:b8:cd:c3:82:2e:38:75:e6:
c7:71:76:dc:e9:f5:54:18:3f:51:71:89:d7:ae:89:23:ae:17:
40:9c:7b:af:d8:80:0b:08:55:43:2a:44:83:1a:46:7b:79:ec:
27:88:4c:b9:55:98:26:5b:fe:61:9f:ff:46:1b:a2:f8:69:4d:
e5:52:43:43:40:9c:92:77:5a:ba:1b:bd:38:50:6d:b4:69:f3:
9e:4f:05:fc:52:2c:a0:41:6f:34:59:72:30:9a:eb:3b:95:dc:
6c:c4:aa:88
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQx
MTU0MDNaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDIzMTcxQTdGNUVEMEJD
OUNDNTk1RThCRjE5NjMzODkzMTIwNUM0QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq0Ddt+YB2eLMCZQ6N1MoCD4hgzvCWsSgTu6umqP6vNRAE8cxp
6N28hewLH15U2mdpmacTPuCLE2ZdUiqQg+LMJrJW5EGJD8B8ju+QngLy4+Ts6VPN
33ec9o17Who7Tsy8JFvYkBzWdzY/gRDrvx8C2rmiD0WvHJdxgqlt8A+6GlwlzbcI
Bxxll0ydUW1tYhuoX7NyyuEeRDpdWxNOwbGVNea6XqCMypzKaYjpC1Hnd1R8+D0s
bTsWpMICB7s9rFO3KJ+xvys4o20o9Hxs1HN/H1oCrmUJNd2NOBiarmGpk6RL2VZw
VcExrsPpRW5t+ZFTNsgrQODSxFPh0Q6yAPDDAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUIxcaf17QvJzFlei/GWM4kxIFxK8wHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvSXhjYWYxN1F2SnpG
bGVpX0dXTTRreElGeEs4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEADq5O
tQ4D5PY1vBzcfg8cdeAW16nwg1whHl/ow27HKjNJI9fPUTtfta5a0FwQqCzVjJyu
ghSGa4PDxw48UcqXc7h4duWFAC2Y9HE5CnfMJrKcebkr2KiVZ/813//I5zusvXLb
uGo27O9mERTw8drDTh2XkntZpEQhGoeV5bvjWc1yOrpsl3T1effiEJdhwGzevGjL
AiEjQZBQ7rjNw4IuOHXmx3F23On1VBg/UXGJ166JI64XQJx7r9iACwhVQypEgxpG
e3nsJ4hMuVWYJlv+YZ//Rhui+GlN5VJDQ0Cckndauhu9OFBttGnznk8F/FIsoEFv
NFlyMJrrO5XcbMSqiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org