Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/QwFaOHTM0ZLJsRlmVuDcZTsLp2o.roa
File: QwFaOHTM0ZLJsRlmVuDcZTsLp2o.roa (raw, json)
Hash identifier: WRpgUPOTQ3HxchTGIhOlVIh4+cYZvmywxc2c/0ZjjEU=
Subject key identifier: 43:01:5A:38:74:CC:D1:92:C9:B1:19:66:56:E0:DC:65:3B:0B:A7:6A
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08CD
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/QwFaOHTM0ZLJsRlmVuDcZTsLp2o.roa
Signing time: Wed 14 Jun 2023 21:24:11 +0000
ROA not before: Wed 14 Jun 2023 21:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2253 (0x8cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 21:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=43015A3874CCD192C9B1196656E0DC653B0BA76A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:4d:49:63:80:9c:02:2c:fb:d7:52:f0:81:
24:b3:73:e6:ef:dc:21:c8:63:e1:b2:a8:ab:ff:2b:
72:3a:11:2c:2c:3e:1d:b6:c9:76:66:19:4e:a0:4c:
19:e7:ea:e9:9b:e3:91:4c:c3:8a:b6:aa:e7:60:37:
50:23:43:a5:c7:e9:11:10:52:c5:bb:d6:4a:81:67:
7d:78:56:d6:42:6c:79:6d:a2:39:cb:03:c7:34:f7:
95:76:b1:46:c3:c4:1b:42:de:32:57:9d:dd:22:d3:
fd:fc:f8:80:cc:83:29:fb:d2:5d:85:3a:90:32:da:
51:62:f4:f3:a8:a6:c3:1f:b2:84:d9:55:13:f6:e6:
b7:2f:18:56:79:cc:be:58:b3:b4:be:72:c1:e4:5f:
d1:d2:27:03:52:a4:c3:d8:7a:9f:c1:7c:24:93:9c:
46:c6:c5:1b:33:23:b3:69:e2:18:7e:e0:b1:4b:9f:
3d:a5:05:af:47:61:2e:db:8e:75:45:00:22:6e:0e:
4d:4f:b8:f2:c0:8f:24:a6:45:79:98:e3:92:9e:8a:
57:fa:bd:7f:71:2b:58:b3:96:84:9f:6b:7a:73:da:
95:b8:11:e8:59:dc:ff:5a:d0:eb:46:4e:91:d6:c5:
b7:bc:22:59:d0:4d:83:13:ca:95:96:8f:c2:96:e4:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:01:5A:38:74:CC:D1:92:C9:B1:19:66:56:E0:DC:65:3B:0B:A7:6A
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/QwFaOHTM0ZLJsRlmVuDcZTsLp2o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:04:a5:05:5e:60:1c:fe:aa:76:9c:be:6c:c1:80:f7:f7:fc:
4c:d0:39:84:a1:cc:df:1d:57:e6:dd:40:9c:8e:a0:9d:83:0c:
8b:a3:e9:9e:f5:25:f9:a2:fa:65:f6:01:df:80:5f:25:55:a0:
c4:cc:26:ed:00:a7:75:0a:b1:c8:06:53:6b:54:e6:3d:3c:47:
17:76:73:bf:be:17:24:3f:a0:56:d1:a5:91:c0:66:1f:ca:a1:
ab:6c:f0:70:49:99:29:40:14:a7:40:20:b9:c3:0d:77:b0:c2:
4d:5b:c8:79:a8:fc:76:3a:e2:0c:fb:1f:96:bf:62:04:bb:1f:
67:41:ec:ce:61:12:21:84:65:f5:27:2f:87:3d:72:57:f5:3d:
85:b1:a1:b9:ef:09:33:77:5c:39:67:fe:85:d2:82:c6:fe:df:
42:21:1f:a5:20:f6:17:22:b8:f2:97:de:33:da:cf:4d:d6:ac:
ee:6b:16:f7:a1:0b:f3:0a:0a:40:ab:a8:52:d4:fb:92:be:66:
a9:81:f9:a2:91:f2:7b:e3:42:df:ed:ce:09:11:6b:f1:aa:7a:
40:bb:9e:a4:b7:9e:8a:5e:f7:1e:a5:b6:bf:36:6d:d5:92:9f:
0c:e2:49:23:88:45:7d:10:02:45:f0:e0:84:2e:53:87:d4:41:
79:ea:4d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org