Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/T1vhYB2OoJVElUVR63ULKXQCazg.roa
File: T1vhYB2OoJVElUVR63ULKXQCazg.roa (raw, json)
Hash identifier: HmCQcHisW83piRWQOamIJniOy/Hibq+0qkIyF0EatuU=
Subject key identifier: 4F:5B:E1:60:1D:8E:A0:95:44:95:45:51:EB:75:0B:29:74:02:6B:38
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0819
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/T1vhYB2OoJVElUVR63ULKXQCazg.roa
Signing time: Tue 13 Jun 2023 22:54:02 +0000
ROA not before: Tue 13 Jun 2023 22:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073 (0x819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 22:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=4F5BE1601D8EA09544954551EB750B2974026B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:d3:cf:0a:9d:6b:4f:f8:57:ea:0c:54:e4:
e9:b9:64:82:ca:ac:65:c9:f3:28:77:f9:0e:06:0f:
08:2f:ab:01:68:c0:ec:52:35:2d:83:ff:b5:cd:f0:
25:92:28:bf:e2:2a:de:5a:37:b0:e6:e9:54:76:ea:
e5:2f:8f:a6:d2:e9:99:dd:7a:ed:3a:9c:af:a3:c3:
d5:b2:4c:87:52:ec:c9:16:e4:de:81:b4:00:5a:d0:
55:b0:1b:f2:c1:21:aa:fb:8e:c9:11:11:ea:f5:07:
af:0e:04:4c:5d:2e:9f:00:ec:a9:5b:57:de:44:f9:
c7:f3:7a:ba:3a:0b:35:b4:62:f2:b6:8f:28:84:46:
04:0c:59:c0:44:3f:bc:fe:cf:43:4a:07:47:58:f6:
c4:2a:57:05:23:0e:50:c0:c0:81:ed:bc:80:56:79:
ea:e1:8f:b4:d8:68:b2:b9:9e:cb:d3:77:be:2d:1f:
a7:12:e4:40:af:d5:e6:d9:72:2f:79:25:17:6a:77:
5a:16:cc:1e:52:c6:2e:76:df:21:65:cc:46:0a:94:
2c:89:41:7e:95:c9:74:cc:d1:2c:ae:e9:a7:56:0b:
ce:5b:e3:c1:2f:b8:c0:9b:d8:17:e3:6f:fa:89:b3:
5a:fb:03:66:c1:5d:2d:1f:1b:8e:7e:61:45:7a:15:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5B:E1:60:1D:8E:A0:95:44:95:45:51:EB:75:0B:29:74:02:6B:38
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/T1vhYB2OoJVElUVR63ULKXQCazg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:10:94:bc:2b:2a:9e:60:69:a9:0a:ec:00:2b:ff:42:b5:81:
47:c4:90:0c:84:45:90:75:8d:5b:31:bc:f3:97:08:c7:7b:52:
8e:ef:56:a2:45:e7:c3:bf:5c:7d:23:39:9c:47:c8:65:8f:78:
b5:88:bb:b3:48:4b:c8:ab:94:16:0f:fd:6a:6f:c0:20:3c:70:
a3:c5:61:3b:94:f5:2d:43:3e:72:94:b4:2f:22:0c:ba:a7:04:
de:49:3d:8d:3d:2d:6a:64:3f:ce:be:03:92:72:5f:c1:38:bf:
94:01:4e:08:fa:96:01:3f:ee:46:ae:55:e3:bc:a0:22:2c:41:
e8:49:1c:67:5c:3c:3a:5a:72:ff:42:76:12:a3:fe:bc:a9:09:
39:6a:29:8b:fc:0f:c2:62:1e:6b:a2:40:88:94:0a:66:0c:6a:
af:6b:ea:20:68:e9:ea:95:56:a5:47:0d:55:3b:3e:ce:e3:99:
9d:04:6c:91:36:88:a2:53:39:4c:57:43:fc:c3:a1:19:4d:9f:
f9:71:93:2a:e7:b9:ff:45:bd:21:55:d2:79:fb:a2:93:b7:17:
51:e7:a9:6f:49:6c:54:1a:af:db:74:ba:93:c0:b2:6c:6c:6d:
2e:6a:d4:d6:8d:e6:86:69:b9:4e:ea:3a:eb:81:6c:8d:05:34:
40:09:96:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org