Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/RqCPyFY0mbHdVa6yAyIDUgpGa5Y.roa
File: RqCPyFY0mbHdVa6yAyIDUgpGa5Y.roa (raw, json)
Hash identifier: ilewqqteTGcgT12u1gmx5YC4dFY4NTGXzj14Ag64Q4s=
Subject key identifier: 46:A0:8F:C8:56:34:99:B1:DD:55:AE:B2:03:22:03:52:0A:46:6B:96
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07B9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/RqCPyFY0mbHdVa6yAyIDUgpGa5Y.roa
Signing time: Tue 13 Jun 2023 10:54:01 +0000
ROA not before: Tue 13 Jun 2023 10:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1977 (0x7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 10:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=46A08FC8563499B1DD55AEB2032203520A466B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:a3:6a:3a:01:ee:ba:c8:aa:96:92:7c:f8:
bc:b9:6c:5c:60:34:51:b3:9b:09:47:a8:d8:fe:78:
d0:a5:db:90:ac:d4:4a:1a:fe:6b:64:48:fa:51:a8:
bd:07:fb:bd:84:fd:5e:e9:33:ad:04:78:cc:9c:e1:
24:9c:a3:a2:89:1f:39:05:b2:2d:e3:26:bf:0e:48:
06:44:f5:75:71:dd:d5:b8:2b:d0:54:60:b2:8c:f5:
24:03:65:ef:84:52:0e:c8:f5:b6:de:71:2a:ab:17:
16:0e:21:3f:aa:db:07:7f:47:98:58:f0:b5:bb:93:
44:d9:0a:83:ce:1b:80:99:88:71:13:f2:ee:32:86:
19:fa:81:93:12:11:db:fe:46:15:83:00:fc:1d:f2:
9a:15:aa:1e:41:53:07:0a:d1:c6:f0:f1:9e:b4:9d:
07:bf:33:8c:23:d7:55:bc:b8:3a:fd:ae:21:68:6d:
48:62:cb:2c:e1:56:7f:42:c1:19:90:81:b1:13:fe:
88:2c:6b:d4:35:4a:f9:71:e6:98:17:12:6c:2c:a9:
cd:50:82:fe:d3:c6:93:f9:c3:4a:29:99:ac:a6:df:
25:7f:b5:06:bc:a0:a0:8b:95:dd:bd:0b:68:7d:28:
4f:ed:a1:97:6b:97:80:98:d2:31:50:30:76:56:0d:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:8F:C8:56:34:99:B1:DD:55:AE:B2:03:22:03:52:0A:46:6B:96
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/RqCPyFY0mbHdVa6yAyIDUgpGa5Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:2d:d5:4b:56:85:a2:c6:75:4b:a7:74:b2:75:02:8c:3f:ec:
26:fe:df:c8:10:3f:20:4b:f9:e5:d0:ac:42:3d:90:86:f6:fd:
8e:33:09:54:9a:bd:32:98:c5:0c:5a:ca:12:23:91:e3:29:e4:
25:52:20:d1:b9:23:87:68:f6:e7:2a:23:1a:42:c0:eb:ee:d7:
3a:b4:ee:39:b3:4a:71:4c:16:4c:95:6d:1b:fe:63:93:66:f4:
46:b2:d5:3c:e8:09:b1:9b:83:2c:c2:3c:b5:1d:dc:13:4e:ea:
45:21:c5:bc:9e:de:40:51:8d:7f:49:e1:43:b2:6f:f1:5c:9b:
6c:83:62:7d:51:60:a0:46:8a:54:e3:ac:35:93:06:18:c3:6a:
b6:eb:83:71:97:23:04:12:83:da:cb:1d:69:4a:7f:52:2b:54:
3c:03:38:ab:fa:64:9f:04:b3:61:e8:57:8d:bc:18:7f:63:4e:
47:14:f5:64:58:ce:17:d6:17:11:21:35:70:f0:08:78:f5:38:
3f:c7:8d:90:72:b5:0b:4e:30:9a:4b:34:43:65:64:d2:8f:f2:
4b:b1:f5:16:2d:95:bb:1a:0e:3f:ae:4c:51:af:cf:a1:74:ef:
ce:42:2d:f9:36:99:a9:bc:10:62:ed:1f:ca:6a:07:49:c9:90:
2c:13:47:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org