Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Yo8fcbbhPm0WaFe4KBQ9bwUnhmw.roa
File: Yo8fcbbhPm0WaFe4KBQ9bwUnhmw.roa (raw, json)
Hash identifier: wfKGTP4glZaD+L7GcBkDziGCMJU6XeYUx06tXlIFdcw=
Subject key identifier: 62:8F:1F:71:B6:E1:3E:6D:16:68:57:B8:28:14:3D:6F:05:27:86:6C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0891
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Yo8fcbbhPm0WaFe4KBQ9bwUnhmw.roa
Signing time: Wed 14 Jun 2023 13:54:06 +0000
ROA not before: Wed 14 Jun 2023 13:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 13:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=628F1F71B6E13E6D166857B828143D6F0527866C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:3f:c5:a7:37:7c:a3:94:3f:07:11:a4:11:
a7:09:76:97:9e:41:1d:f7:c6:9d:d1:6a:90:67:26:
b8:8a:ec:40:2b:94:5b:74:e0:b3:0b:5a:36:a1:4d:
ca:5c:47:11:9d:4f:b4:79:7d:8f:bc:60:1f:40:d3:
80:ed:f1:38:c2:69:72:67:4c:3d:9d:85:2f:60:cc:
eb:1b:e7:5c:23:e4:79:50:5a:6b:1a:28:53:e6:8b:
ec:2e:9c:cb:cd:4a:90:54:99:d9:4c:29:26:43:c7:
c4:cb:b1:83:8b:d7:6b:14:be:2f:84:1c:ae:a1:e1:
ed:34:08:83:82:7e:f2:7e:83:6e:82:aa:f3:38:a4:
03:79:dd:2f:c8:f2:91:d4:dc:ac:c9:b1:29:0f:96:
40:fb:bf:a7:e4:28:98:57:13:7b:5a:b8:ae:a2:78:
a5:16:fb:55:4e:b2:a2:f9:6d:75:ad:9b:fa:68:f9:
91:b0:e1:9f:e7:f3:57:06:4c:44:1a:c7:9c:1d:b5:
80:93:33:5a:f4:b5:65:29:dd:d1:fc:49:9c:26:09:
3f:cc:53:76:d8:30:03:2f:fa:99:08:55:19:34:0c:
80:19:8c:3d:fc:3c:36:81:5a:ab:65:bd:18:0a:ca:
58:fb:35:cb:08:c3:28:f7:1c:34:24:65:13:f1:0d:
4f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8F:1F:71:B6:E1:3E:6D:16:68:57:B8:28:14:3D:6F:05:27:86:6C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Yo8fcbbhPm0WaFe4KBQ9bwUnhmw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:57:49:bb:af:7b:00:7b:8c:f9:5c:28:31:22:f3:f6:9d:8f:
43:db:4f:a3:1a:0d:19:78:2f:6f:6a:c7:91:4d:1c:58:c1:bd:
03:a5:78:d3:b7:0a:a3:0a:a0:33:50:d6:e4:87:57:23:e9:ad:
62:6d:a5:57:af:37:6c:77:19:2a:56:57:e3:10:ee:c2:3f:cf:
4b:0b:5b:e3:a5:87:92:61:73:3a:bc:77:4a:8c:0f:e9:a2:34:
8f:ce:ca:39:5a:57:91:29:f9:0d:a3:29:e7:1a:a3:a9:04:27:
9c:24:12:6d:88:bd:38:6b:16:ef:ae:5b:ac:9e:ce:17:1d:80:
0e:3c:76:7d:17:dd:61:d8:e3:aa:4f:6c:72:2f:80:33:92:4b:
0b:c5:f3:0a:ff:0f:6f:5d:21:0a:3f:d3:38:d0:d0:7e:11:d9:
b4:1b:78:ca:dc:82:f6:99:1a:86:ee:3a:4e:88:b4:2f:31:e7:
6b:82:aa:17:9a:c6:f0:ee:b2:c9:6b:77:dd:a7:f9:aa:92:4c:
d1:46:aa:08:77:95:cc:07:38:05:3f:1e:6d:e9:28:87:81:51:
4d:29:b2:e8:43:bc:03:46:a7:a1:56:c0:9c:c6:19:6e:bd:60:
59:9b:29:73:98:9d:4a:be:18:42:a3:6a:8a:3f:20:b9:88:67:
40:cb:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org