Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/NkNOak0GmiG-1_NgKBdbkyydCRU.roa
File: NkNOak0GmiG-1_NgKBdbkyydCRU.roa (raw, json)
Hash identifier: cK+kmAy2TsY4JWyJUsTxscea1u4tRjM+UGxek/d1ZNs=
Subject key identifier: 36:43:4E:6A:4D:06:9A:21:BE:D7:F3:60:28:17:5B:93:2C:9D:09:15
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08A5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/NkNOak0GmiG-1_NgKBdbkyydCRU.roa
Signing time: Wed 14 Jun 2023 16:24:11 +0000
ROA not before: Wed 14 Jun 2023 16:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2213 (0x8a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 16:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=36434E6A4D069A21BED7F36028175B932C9D0915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:f3:ca:0a:62:1f:83:90:7a:e9:b6:77:46:
04:e5:ac:e7:10:0d:44:40:c4:1d:8a:33:3d:ba:d8:
5f:5d:82:a4:5b:d3:c9:1c:b3:02:02:9f:0b:db:72:
a6:32:b2:32:a0:d9:37:80:65:3c:25:8d:49:fd:dd:
fe:ee:4a:7e:d8:c8:46:02:87:f1:f2:40:4b:0e:d3:
51:70:bc:b8:8e:0e:c8:d7:ba:40:cd:45:7d:23:fa:
ac:8f:96:41:4f:63:e1:6a:23:78:32:29:e0:f3:95:
48:74:4b:a2:db:ce:9c:01:9a:43:00:ff:d7:03:ca:
fc:a6:2d:89:4d:86:4d:bf:38:d3:cc:c1:d6:c7:8c:
1c:b4:37:08:1d:de:de:6a:80:3f:15:e2:43:02:9a:
ee:5b:be:35:81:3b:e3:7c:e0:96:a7:98:75:52:93:
2b:1e:57:d8:30:f5:fa:e6:6f:2f:67:1c:aa:74:60:
d0:07:3c:57:dd:a8:aa:32:fd:9e:06:28:02:e1:3e:
fd:28:ae:8b:84:9c:69:7b:fd:c9:6a:c3:33:c3:8a:
f7:30:0a:13:13:90:d1:0a:fd:55:3f:41:db:57:c4:
0f:da:c9:1b:1e:7b:2a:3b:60:63:c0:19:7b:31:33:
28:0c:6a:6d:e9:83:5b:14:42:4f:9d:0e:cf:8c:65:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:43:4E:6A:4D:06:9A:21:BE:D7:F3:60:28:17:5B:93:2C:9D:09:15
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/NkNOak0GmiG-1_NgKBdbkyydCRU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:4a:e8:6a:03:b2:50:8a:cd:35:b4:8d:46:f8:13:92:09:bf:
7d:ed:c4:d1:dc:2f:8e:f9:ad:3c:76:3c:9f:83:a4:70:73:dd:
83:bc:e8:e9:fb:13:a1:64:01:ef:8f:1a:89:9c:91:be:90:e2:
8c:11:c7:02:05:05:ca:20:44:2d:f5:9e:c7:95:c6:8e:04:3f:
eb:7a:31:17:8e:74:1a:f0:87:cf:52:97:27:03:90:80:63:a2:
18:55:19:3f:bb:2d:f0:25:14:e9:b2:a4:15:14:26:8d:d5:ca:
97:a3:9b:f6:79:9e:d9:0e:5b:7d:ca:62:e4:ef:82:79:61:20:
3c:5d:e5:b8:9e:ad:2e:6b:3d:ea:5f:ec:ee:e5:d7:23:9f:f4:
fa:07:89:5c:a7:7f:09:ba:a5:ea:fd:f2:3c:09:4d:81:6f:6c:
ad:29:88:ed:c3:6d:17:b8:bb:47:76:95:39:c2:9a:f9:05:f4:
06:6f:d5:e4:c4:03:18:f2:29:3d:e0:aa:c4:b3:ca:1d:61:2a:
4f:c7:0d:49:c2:f2:62:ae:98:a4:46:f6:eb:99:d1:e5:cc:6f:
58:13:11:ac:1a:86:f4:ff:f4:31:5e:2f:34:f3:74:c2:72:af:
70:3b:b9:29:04:be:85:bb:56:1d:40:cc:bf:b7:1c:b1:ef:3a:
e8:75:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org