Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/QgHrAcb6iZhZ0_L26-7MpAvqOsA.roa
File: QgHrAcb6iZhZ0_L26-7MpAvqOsA.roa (raw, json)
Hash identifier: odpsXzLJtL6UpQa6U9ZeWIGqvLSLqsfvCHiRZXuADhU=
Subject key identifier: 42:01:EB:01:C6:FA:89:98:59:D3:F2:F6:EB:EE:CC:A4:0B:EA:3A:C0
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 04
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/QgHrAcb6iZhZ0_L26-7MpAvqOsA.roa
Signing time: Wed 01 Jun 2022 07:09:58 +0000
ROA not before: Wed 01 Jun 2022 07:09:58 +0000
ROA not after: Thu 01 Jun 2023 06:58:54 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.41.232.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 1 07:09:58 2022 GMT
Not After : Jun 1 06:58:54 2023 GMT
Subject: CN=4201EB01C6FA899859D3F2F6EBEECCA40BEA3AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:9f:ef:ed:52:4f:ba:0e:6d:4a:64:90:5e:
a5:eb:82:c0:b9:36:c5:e0:61:8c:e7:b5:34:2d:9d:
23:ef:8c:cc:d0:7f:7a:37:ed:cc:0a:cc:c6:dc:bc:
62:f2:ea:23:19:84:7c:ad:91:31:c5:d5:39:25:3c:
a8:ab:c6:b5:cc:d5:f7:0c:2a:1e:1b:01:1e:30:c6:
20:f6:84:f1:54:1c:c8:8a:a5:53:0d:fd:8e:87:86:
11:3f:14:0d:c0:70:a9:1c:72:8e:42:b1:bb:a5:78:
c5:54:53:d0:3b:e9:48:ef:72:37:c3:ff:49:6e:0d:
ec:fa:31:46:e1:c6:04:27:1f:03:8b:83:b2:d1:9c:
e2:4d:ec:e1:d4:f1:e9:49:ed:30:f9:0b:98:90:52:
8d:a8:52:7d:fd:8a:a8:20:38:a1:00:ba:75:6d:94:
0f:ce:88:ab:e2:c7:ba:e9:ad:76:a5:d8:95:d7:64:
2b:1b:ca:da:75:27:f0:89:d5:ad:b0:73:16:89:2c:
13:a4:bc:71:65:47:a0:f6:fe:5f:df:b2:9d:fb:b2:
97:30:98:74:f6:97:36:81:08:91:a0:87:16:9d:3a:
a7:5a:dd:5f:7f:89:74:67:4c:09:06:53:6f:f6:08:
1e:4d:54:f6:ef:22:91:3a:65:72:21:92:a3:64:bf:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:01:EB:01:C6:FA:89:98:59:D3:F2:F6:EB:EE:CC:A4:0B:EA:3A:C0
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/QgHrAcb6iZhZ0_L26-7MpAvqOsA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.41.232.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:81:e1:95:c4:9d:7e:3c:15:21:bd:ba:c2:5f:bb:ec:c3:10:
5e:21:26:bf:fd:aa:63:4e:e0:db:bc:85:9a:f9:4e:cd:17:77:
e1:8d:a2:28:b0:76:f1:0b:98:72:75:2f:b1:f7:a7:1c:7f:1c:
02:02:92:63:b0:e6:b7:2b:e0:93:25:77:93:14:64:89:4b:03:
87:e2:e4:35:a8:4d:4d:75:29:96:7c:93:12:59:80:1e:12:2e:
b2:e2:1d:90:25:c1:01:03:cc:0b:65:16:e4:f5:7c:e6:01:c1:
a7:8c:8c:6a:03:34:4f:36:85:bc:16:aa:a4:82:8f:90:5f:9f:
81:d3:01:e0:57:c1:dc:be:4d:48:d6:48:5b:de:b3:34:16:5a:
3d:f8:b5:cf:7e:9c:e2:6c:65:6b:73:fa:87:48:28:7b:9c:44:
13:59:14:f7:e2:d3:98:df:6d:cf:81:03:03:73:03:e6:61:39:
97:51:7a:51:ab:86:e9:bc:73:da:39:e6:87:dc:67:93:44:1e:
f8:59:11:3d:2c:67:65:13:ec:66:86:1e:fb:2f:3d:70:2f:f9:
19:8d:9d:27:9d:8e:a1:6c:95:47:c4:23:88:e9:ee:b0:8b:3b:
09:61:57:e5:00:93:ad:9a:44:7e:fd:5b:a0:e2:ff:b7:80:3e:
00:a7:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org