Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/ShLqZFwuOgwfCHaU6KIxuFWUqqk.roa
File: ShLqZFwuOgwfCHaU6KIxuFWUqqk.roa (raw, json)
Hash identifier: KypEE9LUfE8G3hlabIxMJe4TvEsPrmJWCY4ub8w1lY4=
Subject key identifier: 4A:12:EA:64:5C:2E:3A:0C:1F:08:76:94:E8:A2:31:B8:55:94:AA:A9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08E5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ShLqZFwuOgwfCHaU6KIxuFWUqqk.roa
Signing time: Thu 15 Jun 2023 00:24:08 +0000
ROA not before: Thu 15 Jun 2023 00:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2277 (0x8e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 00:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=4A12EA645C2E3A0C1F087694E8A231B85594AAA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:b0:59:54:d0:26:9c:85:7c:df:77:ab:d1:
f5:13:c5:59:e2:cc:2d:19:11:15:48:25:7e:04:c3:
04:90:e8:93:7b:49:32:a9:0e:06:cb:43:a6:1e:41:
13:a1:6e:78:3a:d6:9c:d1:d0:20:df:98:b7:6d:f7:
40:2f:dd:d8:4d:54:3a:79:5e:41:b4:a7:ed:33:81:
2e:f6:d0:de:20:a2:5f:6d:56:af:f6:3f:56:09:3d:
a8:08:f5:1f:bf:6e:52:19:d0:c3:9d:f5:73:3d:eb:
af:ae:fd:a0:d0:15:02:3c:cc:02:8f:23:ac:f2:5c:
f5:24:c0:5e:b0:82:2a:fc:cf:c0:9a:3b:e1:4b:dd:
13:ce:22:7e:2e:00:15:73:75:b7:81:ee:2a:4e:32:
3f:08:b6:28:f4:fd:bc:69:69:c7:e4:37:73:9f:70:
59:2c:7f:7e:65:f8:58:a8:a3:a7:f8:17:1c:c0:7b:
93:87:16:f5:ac:66:17:6c:5f:74:06:e8:56:0e:f5:
2f:89:35:ed:de:3a:0f:bf:e4:88:92:b0:50:aa:c2:
7e:4b:90:25:a0:68:1b:6f:66:4c:5d:e1:e4:f5:86:
11:14:6e:47:84:fd:03:90:27:2f:74:cb:ab:f1:df:
ec:6a:02:e6:ff:63:e1:88:97:3d:ae:3b:1a:c0:af:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:12:EA:64:5C:2E:3A:0C:1F:08:76:94:E8:A2:31:B8:55:94:AA:A9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ShLqZFwuOgwfCHaU6KIxuFWUqqk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
09:79:b6:ae:a6:64:26:2d:d4:fd:06:ee:9b:12:e4:11:2f:d3:
b2:01:65:b1:b9:3a:d3:e6:38:0c:6a:15:bf:47:90:11:6e:71:
29:97:65:ea:8a:1a:d2:49:95:65:83:2c:d2:a1:e5:61:3c:82:
3b:40:96:70:12:54:61:dd:f3:fa:fe:cd:91:d5:21:fe:86:1c:
e1:b7:51:61:98:9e:7d:9c:72:64:07:ab:6c:70:f4:f2:ab:14:
38:ca:63:96:6d:39:76:02:b6:51:cd:50:1f:ed:68:e0:77:5b:
0d:4a:30:5a:ce:10:82:cc:98:6c:f5:75:aa:32:ab:99:45:05:
a0:d1:d0:24:a4:58:6d:b9:fb:ee:1b:ee:07:5c:1a:9f:22:ee:
c3:98:04:28:6f:3a:46:a5:c9:76:4e:fe:61:85:bb:0d:5d:a8:
db:39:b9:81:21:96:12:87:a4:d5:66:2e:78:6a:06:f0:7e:b2:
1d:db:54:3b:3e:95:21:8e:d5:1c:6a:bf:f8:c2:91:33:e1:a6:
bf:4c:d8:60:c7:33:d5:ac:25:b4:2b:b8:e5:e1:7b:03:42:18:
a6:03:b1:4e:a9:91:fc:f6:3d:aa:0b:1f:8c:52:f6:a4:b7:49:
9e:89:99:9c:3c:1f:46:fb:36:3f:ec:59:1b:50:e4:1e:48:16:
cf:ed:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org