Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/MZ58nla3UXopahIdoXUumSZf3n8.roa
File: MZ58nla3UXopahIdoXUumSZf3n8.roa (raw, json)
Hash identifier: HgOfLk68nHQ3Ur7/C1b6ZeGR30vCz3qncEiaZ2whnhg=
Subject key identifier: 31:9E:7C:9E:56:B7:51:7A:29:6A:12:1D:A1:75:2E:99:26:5F:DE:7F
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 081D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/MZ58nla3UXopahIdoXUumSZf3n8.roa
Signing time: Tue 13 Jun 2023 23:24:04 +0000
ROA not before: Tue 13 Jun 2023 23:24:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 23:24:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=319E7C9E56B7517A296A121DA1752E99265FDE7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:19:16:7c:01:3a:60:47:0d:15:6a:62:ec:
40:57:49:37:27:4b:a6:42:ae:3c:71:dc:58:8d:3d:
b0:34:ea:b0:83:48:b5:27:e7:d1:c5:b8:f2:0f:d2:
ce:da:97:52:05:18:04:69:a4:ff:a6:98:1e:f1:42:
d2:10:6f:a6:a2:f3:1a:e3:9b:02:4d:08:73:18:6a:
d1:df:3a:ac:57:e4:a8:22:5b:9f:5d:4c:1d:84:66:
85:8f:d9:83:4c:73:a3:a1:c2:ca:b0:eb:f8:55:c0:
5e:52:20:87:ca:e5:2a:c6:73:87:0e:c7:0d:0c:a5:
4c:e0:55:ac:d9:e8:02:23:dc:60:21:bf:a3:56:cd:
20:11:0f:d2:41:9c:1c:80:05:ec:a6:7a:eb:2d:3f:
b4:24:40:2e:55:cb:8d:ad:8d:44:19:5e:76:c1:b3:
ba:a3:d9:bf:32:48:0c:b7:7a:23:ca:59:df:f2:3b:
1b:6b:45:18:e7:26:f6:cd:f0:34:61:5f:4b:53:ce:
ea:7a:76:70:9a:66:4a:1c:a2:e1:28:c9:32:9c:fd:
3f:f3:aa:18:5f:2e:35:a2:d9:87:c7:4b:f3:0c:98:
63:61:33:34:24:40:11:f3:e7:b0:c1:4e:40:ab:7c:
b9:1e:28:c2:3d:98:93:3f:3a:ba:c4:31:d3:3a:a1:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9E:7C:9E:56:B7:51:7A:29:6A:12:1D:A1:75:2E:99:26:5F:DE:7F
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/MZ58nla3UXopahIdoXUumSZf3n8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:4c:ec:0c:d0:78:71:f9:31:84:3f:42:c3:68:b8:18:e7:80:
df:56:47:32:a8:45:e4:0f:04:91:5c:70:0b:c7:32:f6:3f:39:
36:b6:4a:b7:e2:56:df:f6:98:e7:2c:35:5b:ce:fc:30:a7:c7:
85:ff:fc:60:e3:ca:8f:5c:b5:20:c7:c1:34:9f:f0:23:cf:7d:
52:88:cd:25:68:3b:ef:5c:8e:cc:b7:93:1d:c5:33:8a:a6:ff:
3f:b2:3b:d0:ef:e1:21:87:9c:1f:1b:ed:5f:4f:2e:63:a6:8a:
16:1b:b4:75:6f:06:9b:f0:40:1e:8c:c7:36:41:c6:54:8a:ed:
76:eb:a3:70:40:be:d8:d8:0f:e6:29:98:dd:9f:65:0f:b6:32:
76:a9:81:c0:6b:e7:0f:fa:ac:7d:92:31:34:be:29:17:e4:13:
05:be:d2:8a:36:72:1b:55:fd:7d:58:47:e9:b4:28:fa:b0:31:
86:5b:c7:1e:3a:00:ed:22:93:41:b8:a7:59:c0:61:03:3e:80:
29:10:bd:68:50:fd:c6:b2:0a:2e:7d:7a:c7:16:c3:2c:db:d9:
6c:59:ac:75:e1:8e:20:ad:63:e5:44:8d:69:ac:dc:b4:f9:da:
75:fe:d0:c5:2e:37:e6:7b:ad:31:a0:a1:7b:f0:e9:83:3b:38:
4b:b6:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org