Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/XZZ5YPRTp3blGCj3JnPtNewuSOQ.roa
File: XZZ5YPRTp3blGCj3JnPtNewuSOQ.roa (raw, json)
Hash identifier: YGYyOf7aqwR68pHuiINoXYiPOgKkalT9ek47SrO8CyM=
Subject key identifier: 5D:96:79:60:F4:53:A7:76:E5:18:28:F7:26:73:ED:35:EC:2E:48:E4
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07F5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/XZZ5YPRTp3blGCj3JnPtNewuSOQ.roa
Signing time: Tue 13 Jun 2023 18:24:03 +0000
ROA not before: Tue 13 Jun 2023 18:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037 (0x7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 18:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=5D967960F453A776E51828F72673ED35EC2E48E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:68:ce:7e:27:2c:f8:d8:c5:ab:4e:8a:bf:
62:c6:6b:6d:7e:fd:e8:3b:22:4c:b3:bf:67:1f:35:
f7:66:e5:51:88:a6:59:08:ce:6b:94:fd:5d:47:32:
f8:4a:61:34:ca:d0:c1:34:09:fe:e3:01:ec:c2:cd:
8d:ee:b3:7e:dd:b6:f4:8c:98:a5:c3:07:e9:31:48:
6b:ca:da:37:6a:58:fa:01:9b:fd:57:d6:68:bb:ee:
77:77:85:e2:89:24:8d:fd:40:fb:59:f1:07:f6:2f:
59:67:f2:e2:4e:8b:4c:ea:e4:86:1b:58:23:ce:6a:
dd:4b:26:bb:a0:95:93:13:b9:e3:ec:ab:f4:fd:d1:
a9:6d:53:0d:fb:80:91:3a:59:f6:bf:02:0d:cf:3b:
e7:46:d4:7b:aa:f3:2a:99:3f:bb:ab:00:72:82:dd:
08:ba:11:94:67:20:e7:f7:2e:01:db:ac:9f:f7:c2:
08:81:60:4d:87:a6:e1:12:1c:b8:77:a5:6d:a8:75:
81:dc:56:1e:43:bc:5a:3c:3b:02:89:b9:9a:78:88:
67:e5:fe:01:0b:04:34:fc:86:d9:e2:5f:a5:96:83:
df:60:25:f3:ac:ba:5e:10:39:6a:f8:e6:ec:a1:fd:
62:6d:91:17:23:df:2c:b2:3e:4e:5b:20:0c:d5:bc:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:96:79:60:F4:53:A7:76:E5:18:28:F7:26:73:ED:35:EC:2E:48:E4
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/XZZ5YPRTp3blGCj3JnPtNewuSOQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:f6:62:57:bd:98:77:30:5a:89:70:fd:ed:7c:6f:8c:04:89:
ad:e4:15:6f:1f:e0:9b:19:c1:e4:07:bf:90:ff:a1:d7:85:f4:
ce:a5:b0:ad:5e:f9:0f:f8:b7:f3:c0:d5:25:4d:e5:7e:cb:44:
85:d9:b0:81:2f:c5:7d:b8:e1:e1:ef:33:2f:96:ba:75:8a:7b:
6b:ba:7e:3f:bb:97:12:56:48:0c:46:5e:fc:34:35:20:40:8c:
27:8d:20:4b:dd:bc:a5:9b:74:fc:52:68:c5:e6:7c:b9:4b:cf:
d3:cf:e2:57:82:40:f5:5f:42:5b:8c:b7:be:d9:bf:a9:db:ea:
12:cf:f8:b9:1c:ef:f8:75:86:5a:8e:fc:31:af:85:3f:70:92:
d4:c3:bd:ef:f0:96:cd:03:0e:d7:bd:14:95:63:46:03:be:02:
d8:3e:f8:9b:db:e2:75:4f:65:92:d5:94:9a:b9:aa:cb:63:87:
51:7a:09:81:8c:56:07:80:69:92:b5:91:9d:eb:84:a8:e9:f9:
96:de:a1:4b:99:f5:80:f0:23:40:e8:2b:7b:74:5d:91:58:d4:
35:fa:86:7f:2d:7d:9c:e3:d0:3e:d1:21:ae:3b:13:38:56:c4:
a3:a9:50:7d:05:7e:c6:5f:2f:55:ab:05:c5:a0:c7:97:c2:ba:
bd:da:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org