Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/L0wssobNX7MyyaDGH6vEifguAqY.roa
File: L0wssobNX7MyyaDGH6vEifguAqY.roa (raw, json)
Hash identifier: 1TiLpYbjlCPWX/U5h2dNJJJSPNTH0+aPKEG5kLjQlDw=
Subject key identifier: 2F:4C:2C:B2:86:CD:5F:B3:32:C9:A0:C6:1F:AB:C4:89:F8:2E:02:A6
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0875
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/L0wssobNX7MyyaDGH6vEifguAqY.roa
Signing time: Wed 14 Jun 2023 10:24:13 +0000
ROA not before: Wed 14 Jun 2023 10:24:13 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2165 (0x875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 10:24:13 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=2F4C2CB286CD5FB332C9A0C61FABC489F82E02A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:e7:5b:84:90:b3:83:a9:62:63:01:92:bc:
d0:d5:7c:d2:69:21:25:31:45:f9:1d:03:f7:6a:02:
2a:c9:24:5c:e6:66:7d:c9:ff:ff:72:a9:f9:01:86:
30:dc:cd:e3:1c:6a:aa:cf:92:6f:32:de:70:c5:c5:
65:19:80:55:06:d2:12:31:d7:c0:37:5e:24:98:fa:
73:b1:b7:2c:37:07:d6:39:ad:ed:ff:16:fe:6c:83:
f9:c3:df:f9:9b:bb:fd:d0:47:75:0d:6d:d8:20:1c:
48:d5:ca:0b:ce:c5:1e:74:8c:39:52:9c:b4:7e:c9:
e1:3e:92:3b:d4:bf:5e:be:0c:2b:c5:4a:4e:3c:3a:
6b:85:bc:b8:b3:52:07:0c:30:77:67:ef:73:bc:87:
cb:40:ea:e3:28:5c:c1:9f:63:01:69:a1:c4:de:67:
df:64:8a:36:51:1d:58:07:de:ea:3f:02:7d:07:c0:
0b:3d:01:13:d0:60:a1:ee:4f:f9:2f:e5:2f:15:04:
5d:fe:96:68:ab:52:90:b0:bb:0a:71:71:cc:08:58:
03:6a:40:d4:7d:a3:2e:c3:bb:cb:48:63:5f:3a:01:
e4:66:9e:76:37:71:53:13:81:57:24:ce:92:81:90:
8f:50:3f:5d:b4:c2:ba:7a:ad:f5:e0:d3:a9:c4:86:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4C:2C:B2:86:CD:5F:B3:32:C9:A0:C6:1F:AB:C4:89:F8:2E:02:A6
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/L0wssobNX7MyyaDGH6vEifguAqY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:3e:62:86:8a:5d:00:04:0e:ab:37:5f:2b:62:4d:29:04:82:
72:16:81:72:3e:9a:20:97:13:ad:56:b9:41:fa:52:11:fa:60:
36:0e:8c:30:d1:03:9f:33:de:b3:57:cf:93:da:c4:06:30:b9:
a0:70:7d:72:3f:f9:05:2e:43:44:77:08:2e:4d:ab:16:62:ed:
44:f5:ab:4b:77:84:53:8b:34:6c:27:71:43:cb:ea:72:7d:22:
5f:e3:d5:1a:0c:47:66:de:05:09:24:de:07:76:26:05:5b:ce:
ee:1c:db:69:c1:42:7f:51:f7:ca:50:fe:47:d8:27:4d:62:85:
b9:b7:fc:bc:f1:8e:aa:f7:48:ae:00:0b:2e:7c:36:bb:22:5c:
43:d0:0f:3d:69:66:2f:01:4e:66:dd:79:ad:e5:68:0e:1e:0d:
94:c4:f2:14:15:96:b0:75:2c:0f:af:c8:bb:81:13:5f:8d:14:
bf:b0:82:00:cb:05:66:df:29:0b:c4:b6:91:11:34:6c:c3:66:
d3:55:da:f6:3f:c7:11:6e:b8:6e:79:05:e9:0b:02:fe:29:72:
39:31:34:4a:3b:09:2a:2b:e6:e2:df:ee:84:93:ce:e1:49:26:
cd:d6:b6:61:0c:c5:12:6e:95:35:6a:bc:8a:fb:6e:00:ed:da:
fb:b0:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org