Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/XTOU05Uu9QKlAJc-Q5rY5UIHNyM.roa
File: XTOU05Uu9QKlAJc-Q5rY5UIHNyM.roa (raw, json)
Hash identifier: 56/igaD+WrIvtC5TB4RifoG3zRlu1NMq3u+TqLmFjQA=
Subject key identifier: 5D:33:94:D3:95:2E:F5:02:A5:00:97:3E:43:9A:D8:E5:42:07:37:23
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0941
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/XTOU05Uu9QKlAJc-Q5rY5UIHNyM.roa
Signing time: Thu 15 Jun 2023 08:09:29 +0000
ROA not before: Thu 15 Jun 2023 08:09:29 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2369 (0x941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 08:09:29 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=5D3394D3952EF502A500973E439AD8E542073723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:fc:d2:dd:91:43:a4:1a:b4:16:84:32:dd:
d3:6f:22:b4:92:37:c0:6e:27:39:9f:ed:13:9f:1f:
79:c4:17:25:e2:c1:5f:aa:48:d0:50:de:8d:11:4d:
0d:da:16:b0:0c:32:44:61:87:12:18:3f:0f:19:da:
13:5b:51:d6:43:5e:7d:61:d3:4e:4d:d8:da:4a:82:
f3:a1:df:0e:e1:8b:9c:f8:5f:0b:94:f1:cc:fe:99:
3d:39:a9:e9:f3:1a:a8:64:21:17:06:97:63:2e:07:
14:a8:d9:84:bf:46:53:23:ed:c4:96:58:8e:c8:12:
b1:9a:39:78:7b:ce:92:4b:61:b7:18:29:34:a5:9b:
aa:a8:3f:ec:b9:77:da:32:b7:ff:86:1f:ae:e3:d1:
1c:5b:7e:62:c3:82:ea:a2:ab:af:8e:23:20:fc:e1:
27:2c:65:b9:0b:e5:7f:1b:51:a4:ea:57:da:dc:03:
65:3c:f6:6f:6e:76:3f:0c:40:0f:66:77:50:22:71:
03:15:d8:87:5a:44:4c:67:e9:cb:84:54:01:9a:df:
ea:84:4c:7b:c4:e0:9d:7f:f4:13:c7:92:75:56:84:
d5:0c:ac:bf:0d:16:38:f5:19:b4:e2:98:a6:23:ea:
25:5d:bc:cd:5f:f3:bf:2c:cf:2b:f9:7c:63:0b:b6:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:33:94:D3:95:2E:F5:02:A5:00:97:3E:43:9A:D8:E5:42:07:37:23
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/XTOU05Uu9QKlAJc-Q5rY5UIHNyM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
82:2b:e1:13:04:ea:2e:49:f2:72:4d:1c:32:38:6b:93:58:8f:
aa:da:a7:9a:a1:4c:7c:de:3b:07:4c:6c:69:93:a1:de:68:61:
31:60:09:07:bf:b3:07:57:e3:a5:2e:d2:4a:16:00:7e:23:d2:
76:f3:7c:ae:3d:7b:89:3a:b3:60:c7:54:08:7d:c6:6b:ec:76:
51:98:fb:1f:e9:f7:0e:fb:20:bc:c7:92:b2:f0:76:d3:00:f4:
6b:50:99:40:78:c9:aa:b9:3f:b7:a9:77:1e:ab:d1:99:47:a6:
b7:f0:70:76:90:ef:12:2a:9c:ef:85:ae:f0:18:35:f2:9f:0a:
0b:99:a8:94:0c:bf:84:ea:45:cf:93:82:7a:66:96:d2:52:a7:
46:08:49:b1:5e:c1:c9:5b:6e:08:3d:2b:13:94:d8:ee:0f:b3:
12:ae:fe:b7:a5:f4:ca:25:0e:10:e7:b5:9f:01:e9:c5:00:f4:
52:b6:73:d4:c9:bf:ce:7a:4c:be:fb:dc:7e:e0:e4:92:c4:20:
ff:c8:df:44:2e:d9:67:ff:7f:3c:b4:a9:28:ee:b0:63:3b:62:
d1:76:4d:d6:3a:52:42:02:aa:6b:26:ec:56:f8:3a:e6:b2:1d:
91:ad:22:2f:ec:eb:96:9f:aa:76:a1:64:7f:2c:5c:58:5b:8a:
e7:f3:fe:11
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTUw
ODA5MjlaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDVEMzM5NEQzOTUyRUY1
MDJBNTAwOTczRTQzOUFEOEU1NDIwNzM3MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEq/zS3ZFDpBq0FoQy3dNvIrSSN8BuJzmf7ROfH3nEFyXiwV+q
SNBQ3o0RTQ3aFrAMMkRhhxIYPw8Z2hNbUdZDXn1h005N2NpKgvOh3w7hi5z4XwuU
8cz+mT05qenzGqhkIRcGl2MuBxSo2YS/RlMj7cSWWI7IErGaOXh7zpJLYbcYKTSl
m6qoP+y5d9oyt/+GH67j0RxbfmLDguqiq6+OIyD84ScsZbkL5X8bUaTqV9rcA2U8
9m9udj8MQA9md1AicQMV2IdaRExn6cuEVAGa3+qETHvE4J1/9BPHknVWhNUMrL8N
Fjj1GbTimKYj6iVdvM1f878szyv5fGMLtgDRAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUXTOU05Uu9QKlAJc+Q5rY5UIHNyMwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvWFRPVTA1VXU5UUts
QUpjLVE1clk1VUlITnlNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAgivh
EwTqLknyck0cMjhrk1iPqtqnmqFMfN47B0xsaZOh3mhhMWAJB7+zB1fjpS7SShYA
fiPSdvN8rj17iTqzYMdUCH3Ga+x2UZj7H+n3DvsgvMeSsvB20wD0a1CZQHjJqrk/
t6l3HqvRmUemt/BwdpDvEiqc74Wu8Bg18p8KC5molAy/hOpFz5OCemaW0lKnRghJ
sV7ByVtuCD0rE5TY7g+zEq7+t6X0yiUOEOe1nwHpxQD0UrZz1Mm/znpMvvvcfuDk
ksQg/8jfRC7ZZ/9/PLSpKO6wYzti0XZN1jpSQgKqaybsVvg65rIdka0iL+zrlp+q
dqFkfyxcWFuK5/P+EQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org