Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/RyyZvQg3Gg-acy1pWDFB0dpo5mk.roa
File: RyyZvQg3Gg-acy1pWDFB0dpo5mk.roa (raw, json)
Hash identifier: PbRYNr1HW4ustWlmYD4sqt8oyIhN75KZrPLvFhdRzM8=
Subject key identifier: 47:2C:99:BD:08:37:1A:0F:9A:73:2D:69:58:31:41:D1:DA:68:E6:69
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0899
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/RyyZvQg3Gg-acy1pWDFB0dpo5mk.roa
Signing time: Wed 14 Jun 2023 14:54:05 +0000
ROA not before: Wed 14 Jun 2023 14:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2201 (0x899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 14:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=472C99BD08371A0F9A732D69583141D1DA68E669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:43:89:4f:26:a2:87:29:6a:ec:57:c2:25:
b2:7b:bd:eb:8f:fc:18:a7:af:d1:9f:e9:77:60:f4:
8c:18:59:f8:4c:8b:70:72:06:3f:2f:69:d2:2b:89:
06:c1:a9:93:23:a1:aa:34:a0:68:d7:0e:6b:84:e5:
bb:46:71:97:3e:85:c1:92:5c:81:df:47:1f:c8:10:
5f:94:d0:3b:fd:9b:26:44:ec:e8:ee:86:af:70:ae:
47:22:67:66:50:4a:5b:31:ba:08:7c:1e:11:03:5b:
79:ae:ac:07:d5:e4:f1:fa:b6:8b:6a:11:3d:4c:b0:
fc:26:4d:7c:24:50:9a:de:40:4e:55:b0:78:0b:7e:
f6:a5:a4:9a:78:1a:27:32:42:0d:b5:94:ba:65:19:
ed:69:20:b9:09:33:f1:e5:42:81:42:9b:25:73:f8:
f0:84:fa:60:6d:a1:2e:3d:ca:f8:43:1a:08:d1:00:
85:45:7d:51:f8:ec:4a:39:ba:f8:2e:70:cf:f3:fc:
3f:38:ca:ff:69:7d:fa:99:94:64:a1:cc:6b:b5:86:
60:8e:21:bb:5f:29:49:7f:e9:75:e6:b7:81:83:74:
41:8e:da:d9:9e:95:de:76:a0:4e:59:05:22:c1:96:
ac:f2:91:f2:8e:22:ed:2e:46:06:9e:a1:6d:76:84:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2C:99:BD:08:37:1A:0F:9A:73:2D:69:58:31:41:D1:DA:68:E6:69
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/RyyZvQg3Gg-acy1pWDFB0dpo5mk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
71:7c:42:1c:07:7b:40:93:aa:3f:0e:39:7e:7b:97:b0:20:a6:
fd:16:3f:eb:f2:67:c1:d8:81:42:1a:92:d0:1b:71:a4:2c:5a:
30:98:02:d4:dc:cd:ed:d0:ed:36:1a:40:83:0c:07:70:c0:d4:
f1:9b:06:99:af:ae:d9:32:fb:2b:01:b4:07:2f:c7:84:56:6a:
30:07:cf:93:b8:aa:44:98:06:19:3a:e3:00:41:e1:40:a5:85:
91:89:92:78:86:3b:40:27:cc:cd:4a:60:9e:8a:7c:c9:6c:90:
c3:74:6c:f8:d2:a8:78:45:a9:2d:22:9d:57:be:b6:99:86:38:
0e:59:8e:06:fe:8a:5b:ee:a6:19:9a:b8:67:99:06:6b:90:c6:
f2:9b:4e:99:e7:fc:15:59:d9:ae:2b:61:6c:fc:e7:5f:ea:b3:
7d:17:67:06:e3:85:2c:04:f7:d6:35:84:7a:d1:3b:f2:0a:07:
0c:db:ca:73:3c:23:ec:cf:6b:e8:00:00:d6:ef:8d:9e:9c:f3:
a7:ff:24:69:01:b9:06:08:60:a5:be:91:de:11:a3:e1:ad:80:
21:4c:c6:59:92:cd:a5:22:3f:96:45:de:53:26:fc:9d:2e:c8:
f8:f3:4b:30:10:38:51:99:8e:ba:22:82:0b:49:52:bb:7e:b7:
f8:b1:34:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org