Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Z6AXXZIsp0GHj338-DfetwYv_L0.roa
File: Z6AXXZIsp0GHj338-DfetwYv_L0.roa (raw, json)
Hash identifier: Yl6h/l4mCvVu8Y0OmjOsV/kCrNrvg4pDyGtFruJsWTw=
Subject key identifier: 67:A0:17:5D:92:2C:A7:41:87:8F:7D:FC:F8:37:DE:B7:06:2F:FC:BD
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0851
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Z6AXXZIsp0GHj338-DfetwYv_L0.roa
Signing time: Wed 14 Jun 2023 05:54:04 +0000
ROA not before: Wed 14 Jun 2023 05:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129 (0x851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 05:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=67A0175D922CA741878F7DFCF837DEB7062FFCBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:9d:d6:8d:82:61:d1:da:f5:fb:ab:83:c0:
4c:f4:19:47:e8:fe:b4:c2:f6:89:c0:d0:5e:cc:5b:
f3:cd:d7:6a:7c:b0:87:32:08:53:0a:3f:34:2a:8d:
17:18:2e:75:39:d6:32:d6:41:8a:fe:78:45:81:7c:
e3:5b:7f:48:34:2b:7d:b4:0f:a9:c9:c5:06:e9:f1:
3e:58:d2:6d:86:fe:48:89:73:cf:3d:13:a1:9b:9f:
a7:9c:6b:7b:7b:fa:2c:d0:af:b6:26:b5:05:5e:64:
68:21:df:2e:91:28:cb:d7:11:2e:37:25:66:67:c0:
f3:c3:f5:3c:f0:41:c7:b2:b4:98:f5:0d:9e:46:0d:
95:3c:11:e2:3e:a5:c1:52:9a:40:81:15:95:8d:78:
4c:92:f4:4a:69:93:f0:49:fd:eb:2b:24:3c:fd:21:
f1:30:87:51:d5:5f:21:62:83:ef:8c:d4:53:81:cd:
87:29:8d:43:d9:48:f8:b3:b2:67:c7:62:62:3e:2b:
a8:b9:c0:bf:77:1b:cf:bf:28:5a:ca:62:3a:95:5e:
54:f9:d7:b2:e9:f6:cd:a4:aa:96:15:2c:16:89:d3:
5c:cd:29:1f:c2:40:48:96:02:0d:0d:72:ad:a0:ae:
47:79:89:6a:fe:26:65:c2:37:e5:8a:8c:c3:c6:ce:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A0:17:5D:92:2C:A7:41:87:8F:7D:FC:F8:37:DE:B7:06:2F:FC:BD
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Z6AXXZIsp0GHj338-DfetwYv_L0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
59:07:9f:4f:97:8d:0d:53:0b:bb:49:2a:bb:ef:61:3f:fc:63:
23:9b:14:77:80:b3:39:f2:20:48:ac:f7:3d:bb:06:bc:ba:cb:
48:6f:db:f8:da:0a:68:2c:cc:26:e9:ef:46:0c:ad:d8:a9:84:
de:a8:e1:84:80:75:37:56:5f:2e:5a:ca:5d:18:f4:8e:aa:15:
f2:41:45:bd:2c:c4:a0:1e:4f:31:52:cf:15:01:de:a3:cb:d5:
da:26:da:6e:a6:a2:b1:bc:8a:56:34:9d:cc:39:01:81:86:23:
f7:6e:48:96:c7:14:68:93:51:ee:9d:7f:9d:74:a4:b9:0d:13:
ef:f4:87:0c:a1:d8:37:53:c6:ed:f6:40:98:c8:a9:9e:d1:c5:
9e:b0:2f:c5:b2:d4:bd:3a:36:70:76:24:6c:36:19:a7:f3:f4:
d7:7d:7f:a5:11:04:26:d3:14:76:fd:1f:14:c2:8c:0b:d6:44:
7d:b7:24:c5:9c:39:44:56:e7:bb:cb:ae:c6:ff:4a:ec:cc:c6:
23:47:6d:b9:65:f9:0d:fd:48:68:18:4a:fd:30:30:9c:62:90:
f2:56:b4:8c:5e:08:ad:de:4f:f2:07:19:ee:07:e0:f5:b0:1d:
d6:3c:cb:42:58:76:64:1e:a7:85:99:7b:93:75:72:93:d6:b0:
0c:7b:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org