Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/NV9PuqUglXJWwxSGyNSaQr9Pm6w.roa
File: NV9PuqUglXJWwxSGyNSaQr9Pm6w.roa (raw, json)
Hash identifier: RAWo1JQgOKvac6LSaty/JgqbbNAux0m+5yI4K/p84s4=
Subject key identifier: 35:5F:4F:BA:A5:20:95:72:56:C3:14:86:C8:D4:9A:42:BF:4F:9B:AC
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0821
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/NV9PuqUglXJWwxSGyNSaQr9Pm6w.roa
Signing time: Tue 13 Jun 2023 23:54:03 +0000
ROA not before: Tue 13 Jun 2023 23:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 23:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=355F4FBAA520957256C31486C8D49A42BF4F9BAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:e5:a0:29:6b:54:45:d1:ba:45:3f:61:db:
6f:f0:b1:0b:4b:bc:b5:c3:64:96:b7:24:d7:94:0d:
2e:04:4f:e6:1a:10:cc:ec:21:50:ec:aa:54:2e:ed:
29:11:ca:3e:cb:3f:4e:64:3c:9c:35:1a:48:e8:f9:
ca:88:92:5d:84:33:06:be:aa:cb:c8:56:86:5b:55:
68:55:3b:7b:52:3d:59:e7:4a:35:ce:44:cd:e2:0a:
12:1b:8d:52:fb:3a:aa:71:45:bc:8c:e2:6b:45:e9:
d2:99:5c:9d:1e:00:0d:c0:f0:5d:5c:02:66:06:bb:
30:5a:0c:5a:10:e4:cc:2e:93:09:3f:47:92:af:60:
a0:cc:ca:9b:77:2e:34:9f:cf:d5:ef:35:33:71:31:
5b:d1:b0:11:34:a6:ed:90:28:82:e6:38:fe:8c:c7:
5c:3b:36:c7:88:ca:a3:16:34:1c:85:6b:17:a2:53:
37:fd:5a:95:4c:7a:77:f6:9e:19:e0:64:64:6f:c3:
e6:d5:48:93:43:10:4a:c4:67:9a:4a:0c:b1:ce:d8:
0b:3c:50:08:28:40:ee:4c:1a:8d:d9:c9:c3:a3:2b:
5d:ad:e3:59:1a:a6:c7:08:c2:f5:a4:c8:e3:57:94:
57:18:82:d9:40:7f:a3:ea:51:b7:5d:1c:a4:a7:96:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:4F:BA:A5:20:95:72:56:C3:14:86:C8:D4:9A:42:BF:4F:9B:AC
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/NV9PuqUglXJWwxSGyNSaQr9Pm6w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
28:10:e4:7d:0f:33:f6:f5:e8:bc:51:1e:ac:6b:cf:56:65:6a:
f0:e9:9c:85:34:da:64:bc:3b:61:8a:cd:e3:7f:24:6a:56:1d:
1d:4b:09:a8:89:74:eb:b4:be:26:cf:bf:82:49:7a:7e:5f:96:
b3:1f:81:3c:20:95:ed:1f:cc:1e:d2:71:71:05:4c:10:6b:5c:
fc:66:2a:fb:87:dc:12:99:4a:44:92:03:cf:7f:59:4b:a7:d6:
0a:ad:a7:7e:36:58:23:96:d4:5b:b5:bc:77:19:c9:62:d7:7f:
45:ec:7b:30:63:fa:32:64:c7:a1:e4:c8:70:a8:53:8c:51:72:
37:38:7c:d5:b1:0d:81:f8:eb:c3:33:04:73:14:69:71:c4:d5:
3b:7d:83:c5:7b:43:13:68:06:2f:b3:14:d6:a6:7b:c9:11:a0:
61:43:45:3d:99:15:2d:f1:e6:33:af:a8:d3:32:8d:94:9f:cb:
f0:5b:22:30:91:31:ec:6e:d9:3a:41:f6:94:58:80:8a:48:5f:
63:19:82:01:db:7d:a8:d0:80:b1:19:b7:2a:d1:62:29:fe:37:
6f:4e:ac:66:d2:10:89:d8:bc:ef:17:d9:80:ad:78:77:74:a7:
dc:9f:c5:b9:ef:87:f4:15:4f:b7:25:8d:01:b6:d5:0c:a4:08:
d7:c9:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org