Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/JVW1Phgyng-NjxGuQ4375vLIqfA.roa
File: JVW1Phgyng-NjxGuQ4375vLIqfA.roa (raw, json)
Hash identifier: 0k0cUpf/TAnK1ZleRR31RNKldalfTVzmee+o4YHSgXo=
Subject key identifier: 25:55:B5:3E:18:32:9E:0F:8D:8F:11:AE:43:8D:FB:E6:F2:C8:A9:F0
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07E5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/JVW1Phgyng-NjxGuQ4375vLIqfA.roa
Signing time: Tue 13 Jun 2023 16:24:01 +0000
ROA not before: Tue 13 Jun 2023 16:24:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 16:24:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=2555B53E18329E0F8D8F11AE438DFBE6F2C8A9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:f6:ef:4c:ba:ff:79:b2:41:77:74:74:75:
e9:70:9b:65:30:7b:3d:dc:b6:b8:a2:a7:4a:ac:15:
7f:72:7d:88:d4:c1:98:e7:cc:52:1a:8c:bd:8d:75:
73:21:64:1a:8d:14:fd:03:ff:10:c1:5d:3e:64:be:
bd:66:aa:e4:c7:d0:a3:95:e7:f9:61:bd:e5:71:26:
21:e3:a5:25:0c:6c:f5:87:41:51:a4:22:4b:cf:83:
a2:5f:75:13:1f:5c:79:55:32:46:20:4c:0c:8c:1f:
55:7b:1c:6a:4b:dc:f5:83:43:7d:9f:8e:c0:95:9f:
06:d6:87:05:62:f4:20:97:f2:c3:bb:1e:fe:65:9d:
90:fe:36:1d:5c:7e:76:a2:89:bd:f8:c3:cd:de:77:
d6:c1:4c:a3:2a:25:82:a2:aa:8a:be:49:30:aa:13:
cb:7c:cf:ee:bf:cc:42:99:d4:e3:4e:82:c9:81:e5:
88:c5:17:42:b7:f6:bf:d3:f1:63:81:0f:5f:b2:ce:
8c:b7:21:05:fb:76:0a:a2:97:47:f5:4b:8f:1a:c8:
4f:33:d0:8a:d1:aa:35:f4:2f:c9:98:1e:1f:47:e4:
68:fd:35:11:79:1e:7f:bc:36:46:35:ec:ae:47:06:
6f:4b:30:84:56:5c:96:1f:c8:61:3f:4d:2e:34:eb:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:55:B5:3E:18:32:9E:0F:8D:8F:11:AE:43:8D:FB:E6:F2:C8:A9:F0
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/JVW1Phgyng-NjxGuQ4375vLIqfA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
40:28:c1:33:1c:e0:e6:47:16:5f:07:ec:ef:aa:a4:ea:e5:f5:
56:9d:22:c5:40:f7:79:13:21:6c:57:1f:6f:32:f5:ed:4b:20:
67:c5:21:3d:db:72:0d:d9:95:d9:a0:be:4e:c2:f5:86:dd:ee:
0b:9d:bd:11:4e:fa:eb:38:8b:7d:cf:cf:9e:e7:60:b7:fa:e3:
19:c4:49:60:bc:19:50:93:c6:5f:cb:62:f7:a7:d5:fc:71:ac:
a1:22:c5:af:ed:91:36:1e:ed:59:25:c8:38:25:79:b6:fa:92:
a3:c0:65:b7:88:4b:7a:44:dc:6c:ff:d2:48:00:25:a8:ea:5b:
24:36:4c:0d:ce:e9:fe:3a:15:ba:a3:20:b4:6e:ad:bf:a8:fc:
2f:a3:3d:50:e7:28:6d:01:a0:cf:8e:9e:25:e3:77:1c:7d:43:
10:25:45:f3:f5:c7:6e:b3:a6:9e:25:25:e9:0e:77:4b:c0:4e:
d0:14:d4:33:5d:ad:b8:cf:38:bc:fa:1e:51:c6:12:ee:42:ff:
8e:db:a7:fe:54:7a:a4:43:3c:0d:cd:3d:a0:a0:01:92:16:12:
53:2c:95:8d:dd:60:d1:1b:98:e3:6a:50:ae:9a:d5:56:a9:07:
70:49:1c:07:37:60:9e:f3:ee:16:90:c3:9a:13:3c:54:33:0e:
3f:47:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org