Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/JhcatW_A9ZYCKKsD6MvIfb5EQ_M.roa
File: JhcatW_A9ZYCKKsD6MvIfb5EQ_M.roa (raw, json)
Hash identifier: Y9GCRreefqjPW1zhfhhlBZiqNLIiSsecrdNfF1egIr8=
Subject key identifier: 26:17:1A:B5:6F:C0:F5:96:02:28:AB:03:E8:CB:C8:7D:BE:44:43:F3
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0905
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/JhcatW_A9ZYCKKsD6MvIfb5EQ_M.roa
Signing time: Thu 15 Jun 2023 04:24:07 +0000
ROA not before: Thu 15 Jun 2023 04:24:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2309 (0x905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 04:24:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=26171AB56FC0F5960228AB03E8CBC87DBE4443F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:51:1d:bf:73:c8:89:d4:76:2d:45:b1:5c:
8e:af:98:52:19:dc:a1:ff:19:b3:4e:dd:95:4c:80:
a4:3e:2c:68:f5:44:e8:94:94:3f:ef:2b:ea:b9:7d:
6a:a6:95:e6:49:31:d7:a9:b7:f5:07:1e:bb:22:6f:
af:27:06:6f:ea:ee:9a:3f:5d:86:6f:07:a4:03:71:
91:2f:0d:79:a0:00:6b:98:41:09:f4:19:9b:dc:d4:
b8:94:fa:2e:95:91:08:a6:77:6d:e2:91:04:af:11:
9d:2c:ec:bc:1a:81:85:d0:6a:81:db:9b:48:f9:15:
8f:9f:98:51:70:c8:b5:db:46:b1:ef:7d:a6:a2:f2:
60:96:bd:29:a6:33:07:90:51:b5:9b:ed:4e:fa:2e:
40:34:11:1c:5c:4a:91:1f:d3:0c:7e:6f:e2:41:70:
e6:f3:33:9b:74:5e:2a:8f:69:9b:bd:06:e0:1e:8c:
39:58:22:a3:c2:74:e2:38:65:8c:1e:87:d9:be:6f:
81:ec:86:ea:ac:6d:c4:43:35:72:79:ba:50:6b:91:
d8:06:3c:ba:73:8f:17:62:b9:70:78:42:c7:99:93:
d4:3f:86:75:86:ed:4b:4d:74:f7:0b:92:e9:69:1a:
50:53:f8:c0:a7:ee:ab:95:d3:de:ff:81:6d:6c:b4:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:17:1A:B5:6F:C0:F5:96:02:28:AB:03:E8:CB:C8:7D:BE:44:43:F3
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/JhcatW_A9ZYCKKsD6MvIfb5EQ_M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
58:12:5a:b3:58:41:ba:17:3e:c5:c4:9c:fe:ad:f1:31:a1:ca:
f8:94:c5:b4:10:e4:d7:b5:21:b8:f1:64:d1:76:d3:4b:2a:e6:
c9:67:81:cb:42:d4:75:71:ac:36:96:31:cc:a1:65:fd:13:db:
5a:00:17:8d:ec:b5:d3:49:e3:f5:92:dc:9d:e8:e0:2e:c6:eb:
30:f6:44:a3:55:42:cb:b1:66:b6:b0:6c:11:3f:a9:6a:3f:55:
22:ff:32:88:75:cb:b3:ae:c5:fe:a3:34:26:86:a4:99:87:97:
50:c6:f3:8c:07:40:c1:52:75:b2:0b:3b:bf:dc:35:50:08:2e:
f1:b3:ff:5e:44:f5:09:23:4b:39:48:82:34:75:41:d6:43:b2:
3d:dd:da:8b:79:ad:3b:d0:3f:26:0a:ca:d2:12:b6:30:d1:53:
88:60:3f:81:6d:2f:10:22:4f:3f:bc:8c:a5:e4:2e:bf:a0:3f:
84:c9:05:13:c9:6d:d5:42:20:d5:fe:4e:4e:cd:cc:d5:53:a9:
38:a0:8a:d2:ee:99:b7:a0:2b:4b:1b:7e:5f:d9:b4:0e:b2:13:
22:8e:c0:7b:7a:23:fc:d0:96:8c:8a:5c:7c:6a:1f:03:1d:d7:
c0:c7:5f:ef:80:cc:52:80:c5:82:21:bc:97:55:c9:9b:1e:02:
c7:dd:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org