Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/YjPXiCVp9BN50HwRA7FPJ0Plu4c.roa
File: YjPXiCVp9BN50HwRA7FPJ0Plu4c.roa (raw, json)
Hash identifier: jvq8DsSEHfami75MGhBVxErQId3/7fMFGm9h6JlQ+xA=
Subject key identifier: 62:33:D7:88:25:69:F4:13:79:D0:7C:11:03:B1:4F:27:43:E5:BB:87
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07A9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/YjPXiCVp9BN50HwRA7FPJ0Plu4c.roa
Signing time: Tue 13 Jun 2023 08:54:00 +0000
ROA not before: Tue 13 Jun 2023 08:54:00 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 08:54:00 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6233D7882569F41379D07C1103B14F2743E5BB87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:70:fb:b0:1b:51:eb:06:a2:3d:7a:15:c9:6a:
b4:0a:d9:18:f1:9b:a3:fe:1b:d2:3b:c0:6b:58:86:
3e:27:c7:a1:eb:46:7f:a7:9f:13:30:8b:30:39:88:
94:ce:93:b0:b1:d8:8e:a7:af:72:d9:e2:c2:47:25:
66:e5:e4:6d:a0:4c:8d:06:37:ef:7c:9b:7b:cd:01:
07:4d:90:d4:c9:43:86:ef:a7:97:66:2f:7f:46:53:
53:64:16:b0:78:dc:f8:60:14:b2:f6:35:69:9f:b3:
a3:6a:98:6b:18:6d:db:04:84:51:06:7f:92:a4:f8:
8f:00:27:f5:c0:ed:6e:62:d2:36:2c:d1:54:ed:d1:
59:ab:fe:2c:92:7f:d4:73:78:6c:b8:2c:eb:b9:4e:
fd:cb:40:ad:6e:4f:74:07:37:57:a1:39:71:1a:94:
a5:fc:47:5d:42:45:1a:a6:d5:57:8b:bd:98:68:57:
17:7f:ac:bb:8f:24:33:12:35:d8:af:33:17:ec:5a:
4b:93:8c:c5:18:29:dc:9d:88:b8:5e:9b:66:22:00:
3b:87:5c:a3:40:ea:1e:eb:2b:82:fd:01:80:b2:e7:
cd:b9:ce:e6:86:a6:35:92:4b:30:f1:34:8c:c8:88:
a7:bb:61:cd:fb:16:48:81:54:79:82:81:e1:b2:46:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:33:D7:88:25:69:F4:13:79:D0:7C:11:03:B1:4F:27:43:E5:BB:87
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/YjPXiCVp9BN50HwRA7FPJ0Plu4c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
31:e6:34:e8:dc:9f:39:cd:f6:3d:80:65:c1:87:8b:fd:e4:b6:
b8:8b:d3:29:f0:2a:47:5f:68:40:66:7c:6a:85:b4:60:00:f8:
c2:93:1a:3f:cb:33:c9:eb:20:b7:e9:d1:7c:ef:7f:74:ac:1a:
b5:61:07:c1:2d:8e:a9:39:c0:fb:60:ae:9a:01:3a:99:05:39:
a9:66:fb:6f:82:2a:bb:1f:4f:4c:53:58:ee:4c:0f:ce:92:4a:
97:cf:25:7f:09:32:b3:ca:07:6a:e7:6c:64:ad:df:41:e3:11:
b3:ad:9b:55:1b:ba:68:a0:9c:44:0c:40:c3:9f:59:21:aa:fb:
01:7d:41:f3:5e:a1:32:40:04:2e:61:f5:8c:0b:0c:1c:49:f5:
a8:53:19:9d:67:8c:73:82:8d:c4:c6:6b:7a:02:41:d4:e8:71:
ef:e0:2d:32:2d:27:d3:9a:61:75:e1:dc:8e:f2:52:1c:84:37:
ac:6b:4c:ea:18:d7:91:33:b9:50:ba:07:5b:9d:cd:86:38:42:
90:27:01:8a:a1:ce:75:d4:c5:14:5c:24:ad:01:ac:b1:f5:d7:
a5:dc:e0:dd:3c:11:72:a4:fd:55:7c:4f:94:01:cf:5a:1f:41:
a2:a5:33:d6:f0:fd:6b:06:23:f5:eb:82:f7:5d:dd:0a:97:e1:
93:2a:e9:f8
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMw
ODU0MDBaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDYyMzNENzg4MjU2OUY0
MTM3OUQwN0MxMTAzQjE0RjI3NDNFNUJCODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhcPuwG1HrBqI9ehXJarQK2Rjxm6P+G9I7wGtYhj4nx6HrRn+n
nxMwizA5iJTOk7Cx2I6nr3LZ4sJHJWbl5G2gTI0GN+98m3vNAQdNkNTJQ4bvp5dm
L39GU1NkFrB43PhgFLL2NWmfs6NqmGsYbdsEhFEGf5Kk+I8AJ/XA7W5i0jYs0VTt
0Vmr/iySf9RzeGy4LOu5Tv3LQK1uT3QHN1ehOXEalKX8R11CRRqm1VeLvZhoVxd/
rLuPJDMSNdivMxfsWkuTjMUYKdydiLhem2YiADuHXKNA6h7rK4L9AYCy5825zuaG
pjWSSzDxNIzIiKe7Yc37FkiBVHmCgeGyRn3fAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUYjPXiCVp9BN50HwRA7FPJ0Plu4cwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvWWpQWGlDVnA5Qk41
MEh3UkE3RlBKMFBsdTRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAMeY0
6NyfOc32PYBlwYeL/eS2uIvTKfAqR19oQGZ8aoW0YAD4wpMaP8szyesgt+nRfO9/
dKwatWEHwS2OqTnA+2CumgE6mQU5qWb7b4Iqux9PTFNY7kwPzpJKl88lfwkys8oH
audsZK3fQeMRs62bVRu6aKCcRAxAw59ZIar7AX1B816hMkAELmH1jAsMHEn1qFMZ
nWeMc4KNxMZregJB1Ohx7+AtMi0n05phdeHcjvJSHIQ3rGtM6hjXkTO5ULoHW53N
hjhCkCcBiqHOddTFFFwkrQGssfXXpdzg3TwRcqT9VXxPlAHPWh9BoqUz1vD9awYj
9euC913dCpfhkyrp+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org