Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/YAkVxrMiZ1ymlpr4KbuN5OyglPk.roa
File: YAkVxrMiZ1ymlpr4KbuN5OyglPk.roa (raw, json)
Hash identifier: Uh4UG4Gfkx2sM9lLmwC+ztAkHa9cghyFnbTKd3dcTl0=
Subject key identifier: 60:09:15:C6:B3:22:67:5C:A6:96:9A:F8:29:BB:8D:E4:EC:A0:94:F9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07C9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/YAkVxrMiZ1ymlpr4KbuN5OyglPk.roa
Signing time: Tue 13 Jun 2023 12:54:01 +0000
ROA not before: Tue 13 Jun 2023 12:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993 (0x7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 12:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=600915C6B322675CA6969AF829BB8DE4ECA094F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:39:65:c4:fa:c1:9d:2b:2d:e9:4c:8f:5e:
00:fa:1e:7e:de:96:94:0d:c0:80:59:45:78:f5:e8:
f7:10:d3:01:90:65:cb:8c:0a:2b:61:2f:3d:ff:fc:
2c:86:fd:11:63:5c:32:2e:4a:3f:7f:8c:48:01:5e:
a6:9c:ce:c4:08:ca:3f:70:22:16:28:b2:c3:95:df:
17:73:f5:32:2b:2b:27:41:ac:ca:69:44:27:01:60:
cf:bd:5a:ef:21:0e:9e:5c:27:6f:a5:93:28:2a:b2:
93:bd:2f:ef:00:49:b4:77:2f:9a:ac:3a:1d:3f:70:
5f:85:46:e2:27:6c:8e:ed:b8:13:1f:76:c7:5d:da:
34:79:be:a5:12:c1:c5:a2:a3:cb:be:9e:5d:f0:e3:
7c:3f:63:fb:81:68:ce:ff:ce:cd:66:ab:39:df:1d:
ef:1f:62:7e:85:fa:06:98:73:05:38:1a:1b:75:3a:
cd:d8:b6:47:86:35:3d:3b:cb:7b:3f:21:a8:1c:03:
9c:99:cc:93:b8:7f:31:9e:48:32:f1:f8:06:c2:1f:
86:50:a8:75:29:03:8d:21:43:a3:2c:12:40:5a:89:
35:9e:51:51:7d:96:1f:13:ce:8c:62:21:b3:ec:49:
10:6d:04:1d:61:df:e2:88:b3:44:54:d3:9c:3a:be:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:09:15:C6:B3:22:67:5C:A6:96:9A:F8:29:BB:8D:E4:EC:A0:94:F9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/YAkVxrMiZ1ymlpr4KbuN5OyglPk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:7e:23:cf:55:0a:1a:7e:88:35:3b:39:ec:e5:68:48:e9:0b:
7d:94:f3:31:46:26:59:66:1b:15:78:9b:68:0e:bd:1e:a4:f4:
81:cb:f3:5e:0c:f0:d2:18:b5:0d:82:44:5a:db:c6:ae:81:b5:
50:1c:cb:85:00:e1:80:b3:1a:a4:2b:c7:72:d9:1b:a9:19:13:
71:03:6e:ef:f9:a6:ff:32:bf:79:d4:63:cf:e6:11:bd:81:17:
33:14:be:83:dc:b9:f8:6b:c7:e8:29:c7:83:ec:26:71:84:1b:
7b:c5:a8:3a:23:ca:37:f2:c2:36:20:e7:d2:c8:57:9b:9e:61:
b0:db:ec:28:6e:db:95:3c:64:6e:5b:f8:7a:5e:d6:47:26:29:
61:76:64:21:a4:e0:41:ce:4c:95:fd:82:60:b4:86:f9:47:1e:
ba:38:0e:32:39:71:a5:03:91:56:90:8e:af:24:c7:65:e4:a6:
39:35:f8:ad:b2:7b:98:83:6a:cb:69:64:ee:fd:75:50:db:a6:
df:0e:70:20:bd:31:7b:f3:45:ef:cf:ef:a0:60:4b:0c:a6:bd:
fe:63:35:c2:fe:17:98:9f:61:51:d1:51:08:77:f0:1d:af:42:
7a:45:f6:68:49:a2:b4:4b:87:d0:07:14:68:28:4d:38:59:74:
bf:d6:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org