Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/PlM2PO9bTFxjBR4lqXpkan0mepU.roa
File: PlM2PO9bTFxjBR4lqXpkan0mepU.roa (raw, json)
Hash identifier: UcznVrpUliU5ykE4THfvJdzzXqys9M6hOk4EVv5ebjc=
Subject key identifier: 3E:53:36:3C:EF:5B:4C:5C:63:05:1E:25:A9:7A:64:6A:7D:26:7A:95
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 089D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/PlM2PO9bTFxjBR4lqXpkan0mepU.roa
Signing time: Wed 14 Jun 2023 15:24:15 +0000
ROA not before: Wed 14 Jun 2023 15:24:15 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205 (0x89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 15:24:15 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3E53363CEF5B4C5C63051E25A97A646A7D267A95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:9a:d9:fb:c4:4a:ef:6f:a9:b0:7c:98:eb:
8d:33:8f:2a:56:62:be:6e:68:49:33:dd:23:58:ec:
d1:bc:d0:ac:d2:e3:ef:2f:0f:a6:8d:e5:c6:ea:64:
11:80:fd:e0:4c:3b:eb:ff:2b:fc:df:99:fa:94:8e:
20:1c:7d:f5:4b:67:80:37:49:97:37:69:bc:2b:7b:
a3:7d:21:a3:1e:e3:cb:e7:9d:21:47:0c:c2:8f:3d:
7e:63:38:1a:4b:99:93:bf:19:59:08:63:63:6c:34:
5a:1f:9b:91:aa:22:93:37:d8:25:ba:75:b7:5f:14:
72:97:1b:78:80:83:2e:02:a5:39:0e:2c:ec:5d:3a:
0f:97:91:8d:76:f2:a1:dc:60:ec:c4:01:61:75:25:
de:20:35:f5:a8:1e:83:81:d9:b1:34:ca:48:08:1a:
29:fc:61:9d:ca:3d:01:b0:10:44:45:f7:36:6f:fe:
09:9b:21:9d:2d:08:27:43:7f:5a:d9:d6:21:bb:aa:
95:cb:3e:90:96:83:84:5a:3f:6c:79:15:4b:73:c5:
8a:0c:9e:df:87:48:da:bc:63:a9:9c:f1:ba:a1:c7:
fe:23:4f:e1:c2:76:18:08:d7:d4:09:17:fd:e2:db:
34:d5:b6:2f:d1:81:2a:52:69:09:35:6a:a7:2d:15:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:53:36:3C:EF:5B:4C:5C:63:05:1E:25:A9:7A:64:6A:7D:26:7A:95
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/PlM2PO9bTFxjBR4lqXpkan0mepU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
55:1b:95:34:75:fd:6f:b1:87:f0:9d:ea:35:65:dc:5c:b1:c9:
ca:78:19:77:31:8d:1e:00:60:25:e5:35:dd:bf:b2:7e:26:ec:
7a:09:ce:2a:91:8c:f6:ae:87:b6:60:26:74:20:0c:db:fe:1d:
cd:f5:b8:f3:13:e3:16:cf:6e:c3:3d:1a:e4:03:2b:b8:29:cb:
22:74:fc:3c:9a:a0:dd:6c:fa:72:99:6c:f6:d6:97:3b:e9:50:
b3:20:f3:29:c3:88:08:96:7d:10:3e:be:a6:b8:18:1e:37:b4:
74:ad:4f:11:e5:d2:e8:e0:fa:16:3d:33:c0:ed:98:ea:9d:df:
73:df:12:1b:b8:24:53:73:53:76:47:33:49:ac:68:a7:fe:8a:
b9:4e:bb:91:1a:7b:c0:cf:d4:fe:99:03:a6:57:f5:48:e6:d1:
e4:92:e2:4e:eb:4d:36:9d:19:9e:05:16:67:ae:46:58:52:c3:
39:fd:6f:f8:08:c1:b0:10:e6:0b:99:e7:08:fd:64:cb:a8:bf:
2d:a4:b2:59:fe:62:94:6e:e4:7b:13:d9:92:93:d2:ec:4d:1a:
4c:cb:79:c3:5b:5b:b9:58:f3:df:fa:0a:8b:46:55:bf:f0:56:
d6:4c:ce:65:18:a4:a5:4b:16:7e:73:af:ad:3f:7b:3e:1d:d7:
fc:32:9e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org