Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/M2WO5T2YRgdByX6O0gdxJf25f5Q.roa
File: M2WO5T2YRgdByX6O0gdxJf25f5Q.roa (raw, json)
Hash identifier: sG1XzEqx/n1w1NJBa0UsVZ0jnkjq7c6/Cl2fLqGgxj8=
Subject key identifier: 33:65:8E:E5:3D:98:46:07:41:C9:7E:8E:D2:07:71:25:FD:B9:7F:94
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07CD
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/M2WO5T2YRgdByX6O0gdxJf25f5Q.roa
Signing time: Tue 13 Jun 2023 13:24:03 +0000
ROA not before: Tue 13 Jun 2023 13:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1997 (0x7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 13:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=33658EE53D98460741C97E8ED2077125FDB97F94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:b2:c5:8c:f0:73:dc:b2:32:df:1e:ee:5b:
83:e6:2e:78:a4:f5:4a:75:f0:ee:16:a9:32:88:c2:
2c:48:25:eb:b9:c2:2f:81:71:61:73:4d:24:28:07:
4d:d0:87:2c:02:a6:9d:a7:72:5c:ce:4e:35:31:da:
1c:f2:44:09:ca:54:2f:ff:1b:f7:94:3b:86:42:4b:
e1:01:d3:91:ed:e9:c2:24:26:99:f5:50:d2:78:2d:
74:9a:83:e3:60:31:06:09:ae:e5:63:74:68:54:e7:
45:73:cd:5b:96:0c:95:a1:6c:71:21:95:a2:97:6f:
b4:49:cb:3d:8c:1f:f4:e3:29:f1:32:32:bf:b8:63:
3c:21:4a:69:3e:d3:3d:32:be:60:aa:60:c4:78:01:
94:d0:e6:c4:07:a4:97:ad:2b:37:31:e6:f9:d2:10:
c7:67:6f:2d:bd:0e:85:04:c1:37:fe:ee:51:93:9c:
a7:8e:42:91:74:d2:88:3c:1b:94:68:f4:7a:2e:1e:
67:68:b1:ed:8a:96:58:12:c2:c2:f1:e9:d2:43:4b:
1a:42:df:d7:da:79:95:a7:96:fb:60:a3:77:4c:42:
df:71:35:4c:ae:b3:ed:cf:f3:73:d3:35:fa:46:31:
37:22:64:aa:7e:a0:30:ee:1c:9b:d4:49:91:ab:b8:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:65:8E:E5:3D:98:46:07:41:C9:7E:8E:D2:07:71:25:FD:B9:7F:94
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/M2WO5T2YRgdByX6O0gdxJf25f5Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
93:3c:65:91:f5:a1:3e:c9:50:56:32:74:52:73:3d:90:7d:42:
92:19:23:15:0f:b5:d4:64:11:ee:c8:76:08:76:10:7c:0b:73:
84:b3:28:5f:d0:f4:2a:a3:f7:40:23:e6:eb:33:ff:0d:ef:e5:
e9:ab:c0:ab:de:1d:be:04:f4:4c:a0:b5:ea:f2:9c:0a:30:bc:
c6:64:20:02:da:0f:bc:77:35:b9:2e:63:c9:0f:47:fd:65:ec:
cb:2d:89:5c:83:8d:3a:9b:8e:40:bc:82:53:b7:16:15:9e:6e:
1d:cb:cb:0a:2a:22:b0:1e:57:ec:a7:e2:58:04:9d:c3:93:0a:
8c:d0:6b:9d:8c:5b:a1:01:b1:b4:f8:5e:45:b6:3b:5b:a5:86:
9a:4a:43:74:c5:98:c4:92:63:cd:4f:55:0c:43:31:52:77:19:
c0:4b:d6:f2:41:be:ed:43:bc:6c:5c:d7:01:4d:e9:62:33:9f:
c4:54:35:9c:90:e0:e6:b2:1c:d9:a7:ed:2e:0e:02:85:f9:10:
ba:0a:63:5a:4e:65:2a:b7:e4:38:70:d5:33:ea:b1:a7:b3:38:
57:ca:2f:58:b9:3b:c1:d4:f5:d8:7d:00:e7:40:d9:40:05:80:
ab:3a:a2:b4:f8:0e:61:f3:21:6e:d0:7e:21:c8:c7:f8:8a:25:
9d:62:0e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org