Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/JMTeEKO9xeCzGwc9ccmZMmX1clM.roa
File: JMTeEKO9xeCzGwc9ccmZMmX1clM.roa (raw, json)
Hash identifier: EvW8mXdvCcomUZBJUjd6aUJmCfVKAbg62CwaMJCp2do=
Subject key identifier: 24:C4:DE:10:A3:BD:C5:E0:B3:1B:07:3D:71:C9:99:32:65:F5:72:53
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 090D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/JMTeEKO9xeCzGwc9ccmZMmX1clM.roa
Signing time: Thu 15 Jun 2023 05:24:09 +0000
ROA not before: Thu 15 Jun 2023 05:24:09 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 05:24:09 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=24C4DE10A3BDC5E0B31B073D71C9993265F57253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:6a:78:f7:9c:7f:93:02:43:83:3c:c7:d8:
d9:0c:fc:85:30:14:5a:e3:40:96:05:0c:c2:ad:06:
ff:b4:ae:a3:7b:ad:14:49:d1:2b:1e:90:c9:95:c8:
39:ad:d1:74:d4:dc:5a:a8:f2:b5:b7:21:8a:46:7d:
78:49:bc:d3:c8:df:8d:11:02:4c:29:ca:e4:5e:42:
93:97:f1:5f:56:68:ba:ed:ee:af:c3:44:f6:98:11:
be:d2:be:0a:87:2f:13:c1:12:71:4a:78:73:37:09:
48:e0:74:f1:b1:d6:74:d8:fc:11:e7:7a:fa:8b:0e:
ab:b8:88:e7:7c:cc:47:99:0a:5e:f7:96:0f:a4:32:
6f:6d:49:d8:48:64:99:7c:23:e7:83:8b:62:88:c0:
44:d6:1c:a0:b3:f2:e6:e5:6d:17:2d:bd:ff:0a:ee:
8f:7b:b8:0b:d4:99:e4:96:99:2b:5d:5a:e3:14:77:
0a:9b:54:d6:00:0a:23:11:48:12:30:ed:aa:cb:a9:
25:78:4d:7b:3a:48:69:99:0f:42:00:be:e2:b1:11:
dd:b4:8d:f6:87:59:09:60:c1:0c:35:6a:e7:82:c4:
e5:c8:ff:96:7e:4a:bb:2f:8c:3c:57:ac:f4:58:7a:
76:06:59:0d:6d:95:ff:2f:d4:1b:2c:09:da:96:a5:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C4:DE:10:A3:BD:C5:E0:B3:1B:07:3D:71:C9:99:32:65:F5:72:53
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/JMTeEKO9xeCzGwc9ccmZMmX1clM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
19:26:b8:43:cd:c8:24:cc:45:0e:b4:51:d4:07:97:e7:b6:65:
fb:0a:18:6c:f6:6c:ae:76:af:50:83:96:89:b0:9b:9d:a3:2d:
a4:92:05:b3:7f:1a:05:e9:43:42:3a:6d:ec:cf:04:37:8b:cd:
02:9f:ce:95:4e:67:4e:8d:18:3a:80:d4:99:4f:44:10:14:de:
e3:b9:a3:90:ec:27:47:d0:72:8e:53:45:61:36:5b:aa:4d:1e:
ba:24:85:3e:a1:0a:65:c5:a3:94:6c:90:23:94:39:53:d8:92:
42:a5:9c:1c:85:96:9c:88:f5:bb:ed:04:94:87:0c:eb:61:7c:
11:bb:8a:98:6f:fe:93:fb:64:af:89:6e:19:2a:27:5d:b1:4e:
6e:6a:68:42:2b:55:84:df:8f:ef:e1:e7:a2:93:71:4e:08:34:
0c:a3:28:c1:70:f7:8a:17:e9:9e:65:30:f2:c4:b5:38:d5:66:
93:a5:ca:55:c2:67:8b:9b:3d:a7:65:58:21:ef:c6:f1:c3:0d:
15:94:b5:dd:2a:d4:2e:ea:0e:07:f1:38:94:6e:b3:f2:2b:b9:
27:f3:d6:5a:e2:98:8e:43:b1:08:d7:64:8b:bc:87:1c:03:f3:
d7:64:8f:80:ce:58:e0:e4:22:ed:20:a9:8d:d2:8f:b6:18:e8:
2a:38:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org