Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/XfPUlsW4YsgD-pDXyj2qN-9S1yw.roa
File: XfPUlsW4YsgD-pDXyj2qN-9S1yw.roa (raw, json)
Hash identifier: p67mAxDhX07Q8qyy4OarGGy11U87dMT0H6y9jpWZzak=
Subject key identifier: 5D:F3:D4:96:C5:B8:62:C8:03:FA:90:D7:CA:3D:AA:37:EF:52:D7:2C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0909
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/XfPUlsW4YsgD-pDXyj2qN-9S1yw.roa
Signing time: Thu 15 Jun 2023 04:54:06 +0000
ROA not before: Thu 15 Jun 2023 04:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2313 (0x909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 04:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=5DF3D496C5B862C803FA90D7CA3DAA37EF52D72C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:69:94:5c:47:60:3a:4c:ab:df:cb:30:13:
d7:13:64:54:a8:1a:ff:ce:c4:98:91:e9:a5:94:89:
e6:4f:ad:fe:ef:43:56:3b:49:84:2c:6b:6d:d2:4c:
35:67:7a:eb:b5:25:29:e6:28:40:f6:6f:8d:cc:23:
cc:8d:c5:b0:12:7e:61:cf:92:b0:25:b6:3b:79:9f:
ed:52:99:f5:d0:52:68:f5:56:78:cf:c5:4b:49:d3:
e5:e7:21:3c:f0:f2:d6:44:cb:9d:ae:c7:91:51:f2:
e2:de:80:fa:d5:76:a2:d6:af:7c:43:ab:67:29:41:
08:76:9a:dd:a0:9b:6f:b2:19:1e:8f:f9:38:b3:d4:
fc:40:2f:53:ac:59:6d:3d:97:04:e9:68:b2:5b:f6:
1f:9f:16:6b:a3:e0:35:f2:08:a2:1f:5e:c7:c3:17:
10:3d:30:ad:ab:6c:26:d2:34:60:a9:c5:3f:22:0d:
64:cb:95:7b:5b:22:b6:31:f6:1e:ad:12:cc:30:1d:
83:cb:6d:ba:9a:c8:a9:f0:41:cf:54:3c:cb:59:dd:
4e:0e:33:8b:6d:ed:e4:19:52:3b:fe:89:3b:1e:98:
ae:7d:3d:5a:d6:e1:d6:10:a1:00:ce:70:42:4d:a4:
71:94:06:5a:0f:c2:eb:01:bf:fe:63:a0:92:cf:cc:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F3:D4:96:C5:B8:62:C8:03:FA:90:D7:CA:3D:AA:37:EF:52:D7:2C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/XfPUlsW4YsgD-pDXyj2qN-9S1yw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:0f:83:e5:a0:a6:a0:4e:78:e6:2d:1d:8e:9c:8e:d8:0d:bf:
f4:30:dd:25:bd:79:f4:eb:dd:85:91:e5:16:1d:86:c9:ac:35:
73:2a:29:c6:61:df:5d:fb:f4:1a:06:c0:33:19:2e:4c:26:3f:
60:c4:76:7d:01:0d:9f:66:58:45:72:09:53:82:b5:db:64:39:
24:0d:dc:b2:c1:da:97:67:55:e9:c9:1f:ae:eb:46:07:7c:9c:
d0:28:f4:f8:cb:4d:83:42:1b:92:87:6a:12:6c:63:ff:99:b4:
84:5f:10:cf:f6:e4:7c:22:a5:1d:58:99:21:ad:f1:17:75:68:
ae:21:12:a8:92:93:e4:03:d0:35:76:d0:f9:09:9b:95:9e:ea:
33:de:ed:2f:51:51:80:b8:44:c3:c4:1c:96:9c:d2:0e:44:94:
38:d2:ec:c9:99:7e:b5:0b:7e:02:5b:d7:a3:6b:a9:ab:ae:85:
8a:0e:00:db:cb:fc:78:f7:e8:cb:5a:d8:48:21:57:2d:a9:94:
df:40:d5:97:10:57:75:60:78:7d:99:26:c7:97:d7:b0:68:ce:
83:ab:e1:fd:6b:8d:d5:11:90:1a:04:ed:7e:63:73:9b:89:2d:
c5:5c:eb:2a:70:bc:3c:8e:99:a6:27:85:02:48:42:f7:d7:6b:
26:c6:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org