Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Wv91ysh4Z7wUnCw0_jCudBzUqh0.roa
File: Wv91ysh4Z7wUnCw0_jCudBzUqh0.roa (raw, json)
Hash identifier: MKLbaOHQ0uEP7hSwUPP0KdGk67Pl5Ehlq36ohT3h4IQ=
Subject key identifier: 5A:FF:75:CA:C8:78:67:BC:14:9C:2C:34:FE:30:AE:74:1C:D4:AA:1D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 06F7
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Wv91ysh4Z7wUnCw0_jCudBzUqh0.roa
Signing time: Mon 22 May 2023 02:39:04 +0000
ROA not before: Mon 22 May 2023 02:39:04 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: May 22 02:39:04 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=5AFF75CAC87867BC149C2C34FE30AE741CD4AA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:2d:10:0c:ac:51:7a:4f:fa:7a:07:f1:ea:
0e:1e:8c:c5:81:ab:ee:82:30:80:7b:59:a9:b2:93:
03:ab:ce:13:8e:04:e1:56:01:b4:10:39:0d:1b:23:
ed:77:48:26:d6:7e:c7:21:e6:ab:a9:b3:8f:e3:33:
c5:64:46:a9:0c:56:3c:0d:45:ff:94:e0:0c:ff:8e:
c0:8e:6d:f0:01:b7:e7:fa:db:43:72:ba:9b:af:bb:
32:b7:da:1a:dd:4d:2a:ef:57:9e:60:92:6e:5f:14:
63:83:87:0b:0a:7c:0c:90:cd:7c:fb:ca:67:20:f5:
df:9d:6d:df:ca:28:9a:68:9a:e4:1d:58:16:d9:05:
e3:d3:ca:47:12:d4:39:e5:67:17:ec:5e:8d:ec:b5:
d4:1d:d6:8c:43:f1:ea:55:89:24:1d:13:10:ba:9c:
5a:9d:09:16:bf:2f:9e:10:45:73:6e:d7:fb:5a:5c:
cd:59:b9:4c:c6:58:2b:6a:2a:a2:97:3f:55:4e:ee:
5f:49:9f:23:66:c6:45:22:04:0e:ce:84:9b:9e:47:
e2:52:ec:5d:a5:5f:3e:63:a4:06:55:b5:ad:9e:57:
6d:07:9b:60:59:9f:9e:07:2f:aa:54:b3:10:d2:dd:
4e:65:12:89:d1:0e:78:a0:0a:04:b8:01:8b:77:c2:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:75:CA:C8:78:67:BC:14:9C:2C:34:FE:30:AE:74:1C:D4:AA:1D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Wv91ysh4Z7wUnCw0_jCudBzUqh0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
61:6a:cd:ff:d2:8e:1e:d1:34:de:bd:4c:f9:3c:3d:59:6f:84:
43:ed:17:0f:10:7e:8e:31:3a:d3:24:8e:74:61:77:25:b7:07:
27:ea:91:e2:c6:b6:23:f9:b2:b5:86:37:7b:8b:78:77:dd:da:
52:a5:c8:e2:df:f0:e9:7a:92:0f:a3:4b:e3:8b:a6:35:31:f9:
83:ef:46:00:0c:98:1c:2a:2f:c2:7e:da:4c:15:6e:e6:55:41:
68:1f:43:0d:53:2d:1d:b6:1d:c3:ff:83:1e:bc:1f:cf:61:86:
21:3b:40:e3:65:21:f4:95:f1:3c:53:74:85:3a:c5:e6:af:22:
b7:40:77:e7:85:0f:52:ad:c8:e7:cb:2d:e5:f7:8c:a1:de:28:
e9:b7:bc:cd:32:b9:d3:29:49:c7:5d:5b:98:ab:35:3a:04:4a:
0b:75:b1:26:44:4e:8e:4f:56:18:3f:3c:d3:e1:77:ad:e0:2a:
23:b5:ad:68:d1:d3:81:95:b2:ef:a0:41:97:f5:63:e8:81:e6:
62:b8:5e:3c:ec:be:61:ad:2a:a9:e7:18:fd:39:d0:61:ef:8e:
76:97:a1:08:2d:ea:aa:66:65:07:c5:f7:dc:13:7f:58:38:cd:
93:cc:ab:52:1d:81:92:9e:b4:75:56:f2:01:3e:1e:d7:b5:5f:
c4:7b:c6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org