Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/LPg8yxOpMMwkm-zqxSDYEZGjN6A.roa
File: LPg8yxOpMMwkm-zqxSDYEZGjN6A.roa (raw, json)
Hash identifier: CBLX4RDLS1IabETKwWRMA9G6XDy/LXy5hOCrvuFp9cE=
Subject key identifier: 2C:F8:3C:CB:13:A9:30:CC:24:9B:EC:EA:C5:20:D8:11:91:A3:37:A0
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 091A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/LPg8yxOpMMwkm-zqxSDYEZGjN6A.roa
Signing time: Thu 15 Jun 2023 05:50:18 +0000
ROA not before: Thu 15 Jun 2023 05:50:18 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2330 (0x91a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 05:50:18 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=2CF83CCB13A930CC249BECEAC520D81191A337A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:28:8f:e5:08:92:41:3a:b3:63:e0:68:d6:28:
5f:f2:04:47:49:d1:10:aa:37:2f:af:44:b5:0f:a5:
5c:9c:c6:e9:7b:e4:38:5c:0e:26:c4:c4:17:47:d8:
3f:18:65:d9:88:75:38:52:ff:89:eb:65:4f:5b:18:
7f:65:08:f4:cd:68:52:cc:0c:fb:63:df:b5:c4:97:
1d:dd:86:df:5c:c8:3d:68:2c:1a:e4:68:4a:dc:2e:
59:ab:74:f8:20:d8:57:f4:de:b5:2f:22:a7:51:4f:
8c:a8:dc:fd:ac:9d:59:1d:e9:5d:cd:9f:c5:79:48:
24:3c:ab:7c:17:93:1d:37:c4:ce:fa:53:2b:52:2c:
6b:8f:8f:37:89:41:2d:b5:c1:18:50:f6:c6:f0:e3:
32:87:55:eb:a2:1c:f6:70:2a:98:a4:74:b3:66:0a:
13:60:e7:0d:59:4c:53:75:7f:b7:f5:f8:fe:5e:54:
2c:ac:e5:15:5a:f4:b9:65:f9:a3:c9:73:66:17:55:
d5:16:24:53:98:63:d0:ed:5b:01:97:41:93:3b:50:
55:fe:e2:d7:38:2c:83:49:48:bd:54:5a:7d:17:6c:
69:47:31:63:b2:15:3a:7e:18:47:7e:10:e0:57:2a:
a5:13:b4:cf:7d:20:97:3f:d7:c1:7c:e0:c6:91:83:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:3C:CB:13:A9:30:CC:24:9B:EC:EA:C5:20:D8:11:91:A3:37:A0
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/LPg8yxOpMMwkm-zqxSDYEZGjN6A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
01:e6:10:50:b0:d4:78:06:6e:39:b4:bc:39:a4:c7:06:5f:ab:
c8:2c:59:3e:8e:32:e4:a9:5e:a4:7f:bc:94:85:76:be:5b:6b:
38:5c:1d:63:c4:5b:8f:4f:62:ee:2a:77:67:b3:a5:cd:a1:bb:
b3:ad:ce:d1:f9:17:60:a1:db:da:93:cc:0e:75:77:94:3a:07:
94:5b:eb:08:2c:da:43:f5:8a:7d:c6:15:0c:b3:c5:47:91:1c:
0e:b6:41:89:d7:75:88:fd:5b:f5:61:36:34:01:45:98:64:c0:
d8:5e:5b:c3:91:ff:0f:ed:06:ba:24:85:88:1b:aa:d3:df:53:
97:40:73:91:c9:8f:ac:4d:91:1c:d2:ef:2a:74:df:27:1d:09:
fb:a9:ec:42:0c:38:4c:8d:ae:28:fa:33:68:88:f2:68:01:cf:
7e:04:75:b5:ec:f0:7f:2d:0e:5d:f7:28:7d:26:b1:0a:7c:ae:
74:33:74:b3:1a:e5:71:1a:a5:c0:25:e4:82:fb:77:36:4e:47:
24:15:a8:2d:13:9d:7f:a5:84:21:a1:81:6b:1e:52:2a:85:40:
19:7c:75:6d:60:1c:8c:fc:b4:e4:b0:b5:fd:84:95:ea:51:2f:
c4:7b:c8:59:ba:9f:4e:12:04:84:5f:85:e0:5e:04:9c:45:30:
2d:7b:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org