Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Wx5Rc3JZ2Lld5skjSHFMoCvoHDw.roa
File: Wx5Rc3JZ2Lld5skjSHFMoCvoHDw.roa (raw, json)
Hash identifier: 3AKQOZjcoUzUFc7eI78KpIZzRZ+MXzD3gZJv/0LMrE0=
Subject key identifier: 5B:1E:51:73:72:59:D8:B9:5D:E6:C9:23:48:71:4C:A0:2B:E8:1C:3C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 092E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Wx5Rc3JZ2Lld5skjSHFMoCvoHDw.roa
Signing time: Thu 15 Jun 2023 06:54:05 +0000
ROA not before: Thu 15 Jun 2023 06:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2350 (0x92e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 06:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=5B1E51737259D8B95DE6C92348714CA02BE81C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:d3:8c:37:f2:89:6c:47:56:a4:04:4b:32:
36:39:0d:7f:8b:70:0e:d5:24:68:71:b6:59:59:45:
27:4a:c4:15:55:fd:cc:b3:e1:ef:19:1a:b9:2f:d4:
d0:1f:a3:a2:bb:7e:68:c3:82:c6:1a:77:83:83:00:
39:b2:cd:93:53:9d:02:5f:82:46:b9:ca:c8:99:60:
74:7c:16:81:10:2f:d2:ce:db:f4:29:ad:c7:8e:1c:
f8:07:b8:5e:1a:7c:01:4b:5f:ad:46:8a:1f:b3:e9:
ae:40:74:75:81:63:93:a5:27:13:26:38:81:c2:54:
73:aa:d6:0f:5e:03:b4:88:2d:09:d2:cd:23:e1:79:
44:09:fa:14:99:cf:a1:d3:0b:f3:eb:d0:64:01:c2:
dc:c2:72:63:cc:61:39:e2:cb:e2:31:d1:6c:cc:2a:
09:c5:b0:cd:04:d1:60:28:64:12:fd:2d:5c:78:bc:
ba:21:b5:c3:26:3b:b3:c1:79:7e:0c:48:9f:a4:2d:
7e:1b:01:6a:c9:49:50:f0:ca:e3:c4:19:33:17:01:
2f:75:50:98:ee:c3:d1:06:72:20:2c:e8:e1:df:c4:
6e:fb:91:b1:d4:69:3f:5f:df:8e:db:44:44:3c:7a:
11:77:f0:e1:4b:33:1f:82:92:e9:79:74:92:6c:06:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:51:73:72:59:D8:B9:5D:E6:C9:23:48:71:4C:A0:2B:E8:1C:3C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Wx5Rc3JZ2Lld5skjSHFMoCvoHDw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:f2:24:61:fe:1d:46:30:e2:a4:49:62:85:c4:28:bd:6c:e4:
7e:b9:53:8e:03:e5:20:13:a2:31:44:a6:5b:0b:e1:2c:3b:29:
31:78:35:29:3e:e0:08:70:eb:d5:bc:4e:d6:17:76:32:b8:a8:
f7:6f:68:bb:62:1a:13:d3:55:85:d0:de:28:73:6a:c0:b0:d9:
3c:51:6a:4c:c8:39:4c:12:73:52:69:64:85:50:e0:d5:ef:8b:
b9:04:40:95:94:42:d7:c7:98:bc:37:bc:0a:b1:f5:94:07:19:
00:c1:0e:ab:29:a3:ae:6a:db:83:15:d1:e7:3f:2e:d6:87:b3:
d6:4c:75:81:7c:2f:62:78:90:59:51:b5:63:97:27:3e:a6:94:
05:b6:e1:ec:97:d3:8c:18:6d:12:fc:3c:f7:3a:89:07:15:10:
ed:d9:c3:30:76:5d:33:f7:1a:09:d0:f7:41:e5:e5:a3:16:7d:
ef:50:d3:75:b0:89:ee:13:b5:b5:01:1a:70:ae:74:14:5f:09:
8a:ec:46:ea:9d:32:7c:55:20:4f:45:f3:f9:71:7d:0a:2a:48:
8f:35:b5:af:98:f4:5e:9c:1c:6a:c7:f5:67:3e:5e:51:87:f8:
14:b2:a1:94:a3:92:e9:01:f5:b4:96:5f:9f:2e:a1:89:1a:e2:
bd:9e:d4:4e
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTUw
NjU0MDVaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDVCMUU1MTczNzI1OUQ4
Qjk1REU2QzkyMzQ4NzE0Q0EwMkJFODFDM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeu9OMN/KJbEdWpARLMjY5DX+LcA7VJGhxtllZRSdKxBVV/cyz
4e8ZGrkv1NAfo6K7fmjDgsYad4ODADmyzZNTnQJfgka5ysiZYHR8FoEQL9LO2/Qp
rceOHPgHuF4afAFLX61Gih+z6a5AdHWBY5OlJxMmOIHCVHOq1g9eA7SILQnSzSPh
eUQJ+hSZz6HTC/Pr0GQBwtzCcmPMYTniy+Ix0WzMKgnFsM0E0WAoZBL9LVx4vLoh
tcMmO7PBeX4MSJ+kLX4bAWrJSVDwyuPEGTMXAS91UJjuw9EGciAs6OHfxG77kbHU
aT9f347bREQ8ehF38OFLMx+Ckul5dJJsBi8RAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUWx5Rc3JZ2Lld5skjSHFMoCvoHDwwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvV3g1UmMzSloyTGxk
NXNralNIRk1vQ3ZvSER3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAffIk
Yf4dRjDipElihcQovWzkfrlTjgPlIBOiMUSmWwvhLDspMXg1KT7gCHDr1bxO1hd2
Mrio929ou2IaE9NVhdDeKHNqwLDZPFFqTMg5TBJzUmlkhVDg1e+LuQRAlZRC18eY
vDe8CrH1lAcZAMEOqymjrmrbgxXR5z8u1oez1kx1gXwvYniQWVG1Y5cnPqaUBbbh
7JfTjBhtEvw89zqJBxUQ7dnDMHZdM/caCdD3QeXloxZ971DTdbCJ7hO1tQEacK50
FF8JiuxG6p0yfFUgT0Xz+XF9CipIjzW1r5j0Xpwcasf1Zz5eUYf4FLKhlKOS6QH1
tJZfny6hiRrivZ7UTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org