Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/L4wZLlX7kIUcMhO_wwviXzR1T3E.roa
File: L4wZLlX7kIUcMhO_wwviXzR1T3E.roa (raw, json)
Hash identifier: rhHpCIYE8vaFA+Y6UEdIkS6dLestDtBjDcxSVLLWD+g=
Subject key identifier: 2F:8C:19:2E:55:FB:90:85:1C:32:13:BF:C3:0B:E2:5F:34:75:4F:71
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07C1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/L4wZLlX7kIUcMhO_wwviXzR1T3E.roa
Signing time: Tue 13 Jun 2023 11:54:02 +0000
ROA not before: Tue 13 Jun 2023 11:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1985 (0x7c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 11:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=2F8C192E55FB90851C3213BFC30BE25F34754F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:80:51:91:49:f9:08:90:b1:66:05:a4:8d:bb:
0c:5a:20:25:86:b4:2d:0d:7b:8c:02:9b:9f:6e:98:
72:ab:cb:99:e4:18:80:b4:35:33:ac:e8:f3:8c:a3:
91:b4:33:77:ce:c4:a2:6b:5f:4b:67:4d:80:2f:1a:
9d:47:bd:22:93:58:f4:6d:7e:e9:62:74:1e:7c:10:
18:d8:e3:7d:13:54:88:4a:91:d2:02:17:ae:32:bd:
55:6c:de:46:21:be:f0:de:ea:83:c7:68:63:c3:05:
db:c7:a3:6f:db:6d:c9:d4:ee:fb:b3:8f:59:26:30:
ef:55:ec:82:6a:79:43:5a:92:69:5d:6a:bf:d2:44:
3a:ff:fd:7a:1f:30:06:17:3c:54:40:ae:cc:18:31:
c6:13:a3:d7:30:85:a2:6e:eb:a0:59:96:08:d9:13:
0d:ff:93:ae:13:97:8d:1e:63:ff:97:36:bb:db:df:
d5:7d:ca:d2:f1:af:a8:eb:aa:ad:3f:f1:83:4a:25:
20:dd:30:9f:d7:0a:f5:bb:75:27:4a:fd:30:f1:f7:
a5:bf:b2:bc:1a:e7:49:83:d3:b9:90:a0:74:d4:d6:
23:ef:51:6a:da:09:68:83:2f:a2:ac:f9:9b:29:56:
e4:b2:11:47:06:00:ff:93:3a:13:9f:2c:af:52:15:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8C:19:2E:55:FB:90:85:1C:32:13:BF:C3:0B:E2:5F:34:75:4F:71
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/L4wZLlX7kIUcMhO_wwviXzR1T3E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
20:58:30:b6:68:29:9b:65:88:96:53:f7:e1:19:35:0f:f5:0c:
c9:41:a6:51:52:ed:58:4c:a8:c2:24:ac:0d:ea:3f:bb:56:66:
b1:30:fd:43:1d:c3:25:8f:5f:9d:c6:19:25:5d:9d:4e:96:42:
f5:5a:2e:75:3e:63:ba:08:99:a7:38:cf:75:54:c0:34:16:b7:
5d:cf:59:63:90:67:d3:d7:fc:79:f5:3c:e7:54:41:f7:46:13:
ff:16:d2:d5:58:9b:b4:90:a5:db:d8:ec:d5:7f:37:38:2f:3d:
c1:7f:26:8f:3a:bb:e1:20:40:58:86:54:94:0d:f4:4e:37:7f:
3d:c4:a8:e8:fe:c5:93:a1:63:e5:33:9e:60:3f:84:71:b7:d5:
2b:4d:6d:b5:7e:d8:48:8e:75:dd:3d:89:4b:d0:ad:40:7e:93:
33:f2:df:8f:98:a6:d3:4a:3d:a3:8c:2c:ee:ce:58:9f:40:24:
0c:43:2a:9e:74:5c:0e:9f:df:bc:28:46:e8:75:78:09:dc:2c:
c7:00:84:df:02:e8:40:30:8f:91:fb:14:93:a7:d5:d8:4b:78:
04:f6:68:96:d9:2d:d0:47:d9:12:09:1f:50:aa:77:57:c7:5b:
33:f6:02:08:f5:34:f0:15:73:19:3e:e5:21:7c:2a:17:f1:a8:
ca:f3:f4:54
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
MTU0MDJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDJGOEMxOTJFNTVGQjkw
ODUxQzMyMTNCRkMzMEJFMjVGMzQ3NTRGNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcgFGRSfkIkLFmBaSNuwxaICWGtC0Ne4wCm59umHKry5nkGIC0
NTOs6POMo5G0M3fOxKJrX0tnTYAvGp1HvSKTWPRtfulidB58EBjY430TVIhKkdIC
F64yvVVs3kYhvvDe6oPHaGPDBdvHo2/bbcnU7vuzj1kmMO9V7IJqeUNakmldar/S
RDr//XofMAYXPFRArswYMcYTo9cwhaJu66BZlgjZEw3/k64Tl40eY/+XNrvb39V9
ytLxr6jrqq0/8YNKJSDdMJ/XCvW7dSdK/TDx96W/srwa50mD07mQoHTU1iPvUWra
CWiDL6Ks+ZspVuSyEUcGAP+TOhOfLK9SFZvrAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUL4wZLlX7kIUcMhO/wwviXzR1T3EwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvTDR3WkxsWDdrSVVj
TWhPX3d3dmlYelIxVDNFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAIFgw
tmgpm2WIllP34Rk1D/UMyUGmUVLtWEyowiSsDeo/u1ZmsTD9Qx3DJY9fncYZJV2d
TpZC9VoudT5jugiZpzjPdVTANBa3Xc9ZY5Bn09f8efU851RB90YT/xbS1VibtJCl
29js1X83OC89wX8mjzq74SBAWIZUlA30Tjd/PcSo6P7Fk6Fj5TOeYD+EcbfVK01t
tX7YSI513T2JS9CtQH6TM/Lfj5im00o9o4ws7s5Yn0AkDEMqnnRcDp/fvChG6HV4
CdwsxwCE3wLoQDCPkfsUk6fV2Et4BPZoltkt0EfZEgkfUKp3V8dbM/YCCPU08BVz
GT7lIXwqF/GoyvP0VA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org