Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/KYx-8BgZqFjyTy_oNQgvTQ7l2oc.roa
File: KYx-8BgZqFjyTy_oNQgvTQ7l2oc.roa (raw, json)
Hash identifier: xtRlv0bBcNwLB0GaW0epnKzmGNaU9w8hIufTOfg4Ndw=
Subject key identifier: 29:8C:7E:F0:18:19:A8:58:F2:4F:2F:E8:35:08:2F:4D:0E:E5:DA:87
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07ED
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/KYx-8BgZqFjyTy_oNQgvTQ7l2oc.roa
Signing time: Tue 13 Jun 2023 17:24:02 +0000
ROA not before: Tue 13 Jun 2023 17:24:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 17:24:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=298C7EF01819A858F24F2FE835082F4D0EE5DA87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:96:8a:94:a8:8f:78:03:5b:72:9b:70:b4:
db:11:d7:e7:e1:56:40:0c:56:d9:ce:3d:f0:02:dd:
ce:c8:c1:f1:89:fa:fb:7c:18:e3:54:aa:de:24:4f:
10:a0:e5:f9:01:c6:1e:3e:b7:87:af:21:08:76:7e:
8b:70:cc:c4:f6:cf:40:a2:6e:4f:9b:d4:78:67:5b:
7b:2f:ea:1d:1b:80:fb:98:6b:c6:a4:ca:0a:1f:4c:
f5:00:d3:e0:76:10:12:68:b8:0c:0b:59:8c:3b:42:
a5:66:94:b3:a0:e2:c0:fa:3b:98:0f:61:8c:9c:d8:
a5:b3:68:25:29:d4:e3:af:dc:aa:ec:f6:6d:81:dc:
b6:9b:35:ba:6b:f9:c0:4e:96:c2:69:d5:7e:33:e8:
be:24:64:34:3f:49:4e:00:98:94:72:4a:99:71:3f:
07:78:2a:21:c3:07:02:cf:52:75:0e:5f:6a:f9:d8:
00:39:30:24:d7:d7:1f:46:40:c1:b0:5b:dd:a1:38:
fb:7c:7e:fb:1e:96:04:31:72:06:c5:e3:4c:aa:82:
ae:d5:f9:c5:a8:8e:2d:66:d1:9f:64:9b:ae:e6:13:
60:66:f8:55:66:2a:ef:a3:0b:45:4c:65:b6:ae:71:
77:c3:a4:53:4a:e0:07:30:7a:60:d3:ae:1a:d3:ba:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8C:7E:F0:18:19:A8:58:F2:4F:2F:E8:35:08:2F:4D:0E:E5:DA:87
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/KYx-8BgZqFjyTy_oNQgvTQ7l2oc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
54:6d:72:08:9b:d1:b3:0b:bc:f5:47:e8:1e:b3:18:d5:e1:74:
58:f9:bc:f5:e4:ae:9e:cd:d6:55:42:8b:67:46:94:41:69:17:
38:43:02:9d:85:01:c2:b2:8e:d5:de:42:3e:5c:3f:c6:e2:38:
cd:82:b7:1d:54:16:94:7a:ba:36:81:f1:90:b0:f0:69:e6:6f:
78:e8:e1:e7:1d:a3:15:5a:58:d7:34:be:06:ff:1d:b0:c2:25:
8b:51:29:a4:85:1f:37:6b:eb:b1:6d:fb:32:4c:4c:99:4b:e7:
2f:2a:25:bf:53:04:e7:db:01:83:27:94:85:72:00:d9:d3:b5:
c6:09:c6:04:32:90:99:2e:a8:09:d2:bd:25:76:d5:1a:6f:be:
04:c9:86:b6:16:9e:0e:bd:48:19:9c:b0:9d:b4:b5:27:c2:b3:
43:b6:82:25:b5:e2:1d:06:de:1c:64:dc:4d:e7:33:a6:98:d9:
23:51:4d:8b:38:8f:76:8f:32:90:80:fe:f1:23:9b:55:0b:a3:
08:5a:33:78:c4:4a:16:ed:bf:40:c7:1d:d9:19:34:6b:a8:1e:
4c:25:f7:e2:97:8c:4d:45:ec:1d:11:19:9e:67:5b:1e:6c:a0:
a7:ad:de:13:8a:79:5e:c5:2a:76:78:a0:dc:80:24:4e:c9:ac:
38:2e:d7:3d
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
NzI0MDJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDI5OEM3RUYwMTgxOUE4
NThGMjRGMkZFODM1MDgyRjREMEVFNURBODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC2paKlKiPeANbcptwtNsR1+fhVkAMVtnOPfAC3c7IwfGJ+vt8
GONUqt4kTxCg5fkBxh4+t4evIQh2fotwzMT2z0Cibk+b1HhnW3sv6h0bgPuYa8ak
ygofTPUA0+B2EBJouAwLWYw7QqVmlLOg4sD6O5gPYYyc2KWzaCUp1OOv3Krs9m2B
3LabNbpr+cBOlsJp1X4z6L4kZDQ/SU4AmJRySplxPwd4KiHDBwLPUnUOX2r52AA5
MCTX1x9GQMGwW92hOPt8fvselgQxcgbF40yqgq7V+cWoji1m0Z9km67mE2Bm+FVm
Ku+jC0VMZbaucXfDpFNK4AcwemDTrhrTumYfAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUKYx+8BgZqFjyTy/oNQgvTQ7l2ocwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvS1l4LThCZ1pxRmp5
VHlfb05RZ3ZUUTdsMm9jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAVG1y
CJvRswu89UfoHrMY1eF0WPm89eSuns3WVUKLZ0aUQWkXOEMCnYUBwrKO1d5CPlw/
xuI4zYK3HVQWlHq6NoHxkLDwaeZveOjh5x2jFVpY1zS+Bv8dsMIli1EppIUfN2vr
sW37MkxMmUvnLyolv1ME59sBgyeUhXIA2dO1xgnGBDKQmS6oCdK9JXbVGm++BMmG
thaeDr1IGZywnbS1J8KzQ7aCJbXiHQbeHGTcTeczppjZI1FNiziPdo8ykID+8SOb
VQujCFozeMRKFu2/QMcd2Rk0a6geTCX34peMTUXsHREZnmdbHmygp63eE4p5XsUq
dnig3IAkTsmsOC7XPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org