Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/OU80TbyAsypRLnyVRq_ZqCXksNk.roa
File: OU80TbyAsypRLnyVRq_ZqCXksNk.roa (raw, json)
Hash identifier: NE9Bj9EmwXYrZcHaiwLTUs3YUtjztOcowHnP11dpGR4=
Subject key identifier: 39:4F:34:4D:BC:80:B3:2A:51:2E:7C:95:46:AF:D9:A8:25:E4:B0:D9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0829
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/OU80TbyAsypRLnyVRq_ZqCXksNk.roa
Signing time: Wed 14 Jun 2023 00:54:02 +0000
ROA not before: Wed 14 Jun 2023 00:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2089 (0x829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 00:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=394F344DBC80B32A512E7C9546AFD9A825E4B0D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:b7:5c:d5:60:2b:a1:7a:5c:a3:62:94:fa:
c6:49:e8:e6:b9:b0:5e:56:b9:22:33:58:47:c2:5d:
8a:57:7f:46:dd:94:9a:18:77:7d:73:fe:04:e5:2f:
61:a3:3a:ca:a9:f0:74:db:9f:94:11:d4:9c:9a:d7:
13:9b:71:f8:50:a5:3e:44:00:ef:d6:39:ae:cb:2d:
15:e5:83:3e:5a:37:e1:20:c2:a0:6c:a0:6f:e8:72:
76:3d:89:fb:29:62:22:10:f9:75:2c:6b:fa:30:ef:
c9:d2:42:29:44:97:4c:48:eb:23:d3:a4:6a:e4:c6:
4d:3c:0a:9f:19:d8:2b:18:56:6c:2f:35:67:34:a1:
17:51:d2:c3:96:9a:cb:6a:ec:25:00:40:d3:12:fb:
7f:86:3c:ac:c6:19:ec:dd:e2:7d:9c:9b:c2:37:22:
34:17:73:7a:be:ed:66:ad:98:21:34:25:bc:ee:b3:
db:ef:95:8e:96:68:24:38:4c:90:57:d7:3d:75:1c:
24:34:a3:77:7e:44:7b:9e:56:15:fb:c5:db:20:fd:
61:10:cd:dd:f0:4b:b8:2d:d2:bf:a7:df:a5:fb:d9:
d8:ca:a0:5b:ce:df:6b:e6:51:71:b7:9f:ea:f0:1b:
01:dc:81:df:95:6b:7d:44:2d:fb:a4:2d:51:e5:eb:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4F:34:4D:BC:80:B3:2A:51:2E:7C:95:46:AF:D9:A8:25:E4:B0:D9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/OU80TbyAsypRLnyVRq_ZqCXksNk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
98:7a:7d:90:4c:a6:65:71:31:63:4c:3f:54:ef:ff:a3:8a:9e:
25:a0:d5:89:62:dd:7c:2c:1b:bf:f2:04:79:23:1a:c5:a6:30:
3c:27:70:e0:c5:98:1a:3f:8b:96:6e:3e:d3:0a:19:25:8b:4e:
de:42:5e:90:df:85:5e:a9:cd:48:ab:d7:85:85:d6:bd:a3:ab:
57:30:09:60:05:c1:19:d7:c0:41:4b:a6:ec:3f:bb:1b:1c:83:
2d:b3:64:e8:d7:a8:b5:74:96:39:01:86:09:a9:62:e7:11:a1:
bb:50:aa:95:f5:37:f5:66:79:43:0a:c5:bc:a4:53:65:3b:d0:
62:88:89:c1:26:ad:fe:fa:8b:91:3e:a6:65:70:f2:23:5d:1b:
6a:dd:60:91:17:74:69:99:24:7c:21:72:4f:b1:22:72:a3:64:
e7:6f:f1:9a:19:90:66:7e:2e:3b:a3:02:51:6c:ae:9e:b0:02:
ac:2e:0f:12:9c:4e:38:1f:e2:aa:00:89:27:bf:57:7e:26:8d:
49:2b:66:d5:61:a5:a7:a7:1d:b4:c8:3a:15:57:3f:7a:74:52:
84:75:da:78:2a:68:fc:c8:8b:d6:5e:0b:14:b4:ca:a1:5f:7a:
57:f2:eb:7d:b3:66:c2:88:61:5e:6a:f3:75:0c:5a:17:f8:b7:
de:ea:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org