Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/UP4-FFcl1AALajnAACiundtjF7Y.roa
File: UP4-FFcl1AALajnAACiundtjF7Y.roa (raw, json)
Hash identifier: zqV1ZpMK6GWkNNpTMjF7BInDprMcvslQ5lj2j+9+UVA=
Subject key identifier: 50:FE:3E:14:57:25:D4:00:0B:6A:39:C0:00:28:AE:9D:DB:63:17:B6
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0801
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/UP4-FFcl1AALajnAACiundtjF7Y.roa
Signing time: Tue 13 Jun 2023 19:54:02 +0000
ROA not before: Tue 13 Jun 2023 19:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049 (0x801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 19:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=50FE3E145725D4000B6A39C00028AE9DDB6317B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:c2:80:74:85:ed:94:2d:53:b4:49:05:40:
2e:23:d0:6c:06:89:bd:61:df:24:ca:7e:a6:c2:ae:
3f:e5:3a:5a:3e:b1:09:11:3d:b8:bf:ad:33:4a:ea:
91:fc:0d:27:95:d4:20:0b:f6:7f:32:c1:3a:d1:e5:
3a:f4:2b:31:6b:bf:3c:94:1a:2e:66:a2:ea:33:1c:
38:f6:8e:3e:34:a8:ad:76:b9:ad:10:19:8f:b4:53:
d7:24:e9:8e:f9:f0:0a:27:ae:3a:d3:08:61:4e:1d:
77:10:50:59:fb:01:2c:d1:c2:d6:93:9a:19:b0:3f:
f9:62:67:ac:60:da:7f:d4:fc:50:93:35:11:56:81:
f9:2a:9d:15:10:3e:d7:c2:40:f0:3f:b4:50:ff:d8:
de:c5:ec:45:d4:99:09:d6:7c:b4:ef:dc:86:07:ac:
27:25:b7:6c:19:69:1e:be:33:1f:ee:c8:d1:d3:6b:
3c:86:65:83:76:aa:b5:ad:d8:a8:5d:ae:94:60:86:
f3:85:d6:52:b7:aa:44:e2:0c:1c:b1:5a:86:7e:0b:
76:52:c8:6f:b8:a6:47:f5:a9:bc:88:5a:c9:63:58:
2f:75:2b:b7:88:8b:3f:c0:c0:25:d6:08:a6:89:09:
24:11:29:8d:61:67:ac:b1:63:99:ca:e8:37:d6:49:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FE:3E:14:57:25:D4:00:0B:6A:39:C0:00:28:AE:9D:DB:63:17:B6
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/UP4-FFcl1AALajnAACiundtjF7Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
37:02:45:4b:71:b3:29:d4:dd:13:f1:7b:84:4d:56:c8:62:cf:
78:ec:5c:b2:90:38:ab:29:8a:53:7b:96:85:cf:d9:49:cc:b6:
44:8c:9d:38:80:07:10:4a:72:2f:33:86:44:aa:e9:fb:a5:9c:
2d:04:dd:35:91:dc:2b:90:a5:34:78:1d:f1:bf:57:b6:a8:84:
c2:d3:f6:af:39:10:9f:35:3e:ea:81:15:21:ab:83:20:2a:90:
78:a1:35:f8:1c:fc:6a:05:8e:57:67:3f:7d:cc:92:2c:6b:f5:
7f:74:85:ac:49:1f:a9:6f:9c:71:fc:19:82:c0:1c:a8:2a:28:
70:65:e1:a7:3a:d8:e7:67:18:53:5b:0d:10:f5:8e:01:8f:76:
8d:3f:bf:da:88:ea:3b:c1:05:0a:a5:8d:04:0d:ea:df:fc:f9:
70:54:be:c4:65:01:01:a8:d4:22:be:fa:a1:2b:68:58:2a:fc:
54:c3:38:06:e3:30:83:a6:f0:9c:c0:f7:57:f0:b6:6b:3c:6a:
e7:37:86:33:e7:ca:8e:4e:d0:9c:34:4b:6b:a9:90:80:3d:2d:
ed:05:28:8b:32:db:68:7d:16:28:88:ab:ea:5e:86:5c:83:b6:
c0:42:eb:75:a0:cd:e0:35:df:8d:22:5a:d1:5c:85:2c:6b:3c:
c6:32:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org