Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/MD9TezDykWPVyZHzVvpGvZxkp-Q.roa
File: MD9TezDykWPVyZHzVvpGvZxkp-Q.roa (raw, json)
Hash identifier: 5pYAwXbPHKjnyPg7y38d8d8s0Zm35Pbrrehs64IJSb0=
Subject key identifier: 30:3F:53:7B:30:F2:91:63:D5:C9:91:F3:56:FA:46:BD:9C:64:A7:E4
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08A1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/MD9TezDykWPVyZHzVvpGvZxkp-Q.roa
Signing time: Wed 14 Jun 2023 15:54:04 +0000
ROA not before: Wed 14 Jun 2023 15:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 15:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=303F537B30F29163D5C991F356FA46BD9C64A7E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:b4:16:0e:dc:d9:40:e4:49:35:fd:bf:e0:
4e:63:00:8d:b5:6e:85:ed:53:d0:50:43:38:08:b1:
34:8d:a5:bf:72:b6:94:86:1b:13:91:55:a6:42:18:
ce:a3:6e:5e:a5:46:9e:0a:c3:fc:e3:4f:52:d6:ed:
85:8c:4a:d4:4d:c5:0d:31:cd:8c:10:e8:b6:a9:a0:
31:fe:c8:cb:8b:8e:7e:b4:cd:e4:8c:7c:a5:91:4f:
55:8d:e4:08:ec:7f:93:d6:44:65:c4:2c:f6:35:2a:
33:99:fe:a7:64:e6:12:67:ba:6b:a3:2b:13:2d:5f:
f4:37:d5:99:b3:d4:29:b3:31:b4:39:7e:13:73:54:
d2:95:c6:62:5b:94:ff:19:c8:7e:5e:5d:15:96:08:
7f:6e:73:6f:a8:0d:d0:75:1a:47:5a:5f:ae:36:75:
3e:50:8e:0d:69:00:92:32:13:d0:d9:bc:89:eb:01:
d3:63:47:e7:36:f4:fe:99:bd:54:5e:8c:ba:2d:ce:
99:57:2a:51:a6:1d:46:3a:14:4b:7d:8d:78:03:97:
6a:66:5b:a2:ec:ff:d6:e7:ad:f1:8c:33:37:40:d6:
5f:28:de:6e:57:92:76:1d:58:13:ee:0f:c9:c9:64:
18:9f:7f:f3:ae:7f:d5:95:01:28:95:1b:44:da:9f:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3F:53:7B:30:F2:91:63:D5:C9:91:F3:56:FA:46:BD:9C:64:A7:E4
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/MD9TezDykWPVyZHzVvpGvZxkp-Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:0e:d5:31:5a:fe:c2:d9:35:a9:fd:b1:8e:30:0b:38:78:3b:
03:fc:e4:7b:4a:ac:fb:b4:0d:7b:da:d0:94:07:79:4f:7c:e2:
ca:15:d9:c7:79:84:d2:01:31:62:a7:89:93:49:7b:0c:76:6d:
6e:e4:87:82:aa:fe:a3:e3:0d:78:7a:e7:e1:4d:11:3d:67:3e:
dc:99:b1:28:e1:1e:10:db:45:2e:22:87:3c:6a:08:2c:59:b3:
56:5b:22:27:b8:0e:bb:46:ac:a5:9d:22:5d:ee:27:64:75:e1:
3b:2c:ef:3b:72:e6:a0:24:f8:b5:9d:af:49:ce:db:25:05:47:
f8:05:59:a3:b9:57:06:a8:92:65:80:8c:65:a4:1e:30:12:47:
ec:73:82:da:60:b0:3c:d9:2b:66:3b:24:73:51:c6:35:cc:a4:
ff:ec:55:20:6b:51:e9:5d:3e:57:4e:93:9b:3d:75:12:0f:69:
bc:91:2d:1e:e4:c4:60:b7:9e:07:fb:f5:58:1e:ff:35:06:93:
57:ff:76:4b:7f:fd:d5:4f:1f:ec:4c:59:fc:76:05:c1:bd:3b:
3a:05:fb:1d:96:66:14:ff:50:a3:03:dc:9a:86:e1:81:d7:38:
73:a5:3a:c6:aa:97:fc:fa:a6:b2:85:a4:5f:0d:ce:55:87:81:
a2:37:3e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org