Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/ZrMyj5T8ane-AJMu9dMOROfBkr8.roa
File: ZrMyj5T8ane-AJMu9dMOROfBkr8.roa (raw, json)
Hash identifier: inV2dhK4k1pNRfdwrKghTu9N+AOQp1zJJ+E9FTPb35A=
Subject key identifier: 66:B3:32:8F:94:FC:6A:77:BE:00:93:2E:F5:D3:0E:44:E7:C1:92:BF
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08BD
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ZrMyj5T8ane-AJMu9dMOROfBkr8.roa
Signing time: Wed 14 Jun 2023 19:24:05 +0000
ROA not before: Wed 14 Jun 2023 19:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 19:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=66B3328F94FC6A77BE00932EF5D30E44E7C192BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:0c:a0:ff:e6:e4:a5:b1:2c:25:4e:fa:ae:
d6:6d:88:8e:11:4a:b1:7e:8f:83:81:f4:cb:fd:d4:
ff:5f:04:f5:c9:15:96:f1:8d:56:b3:3e:16:29:4f:
cf:cc:f8:50:37:85:3b:f6:78:61:97:a6:43:6e:62:
e4:67:68:44:1b:21:86:ee:12:16:7b:f0:93:67:53:
ee:97:ba:a1:ee:03:02:13:11:85:11:52:f2:b9:f1:
f8:5a:b4:3f:d3:75:16:b8:53:de:07:19:e3:0f:94:
1d:07:e3:fa:b1:4b:fd:24:51:e9:a6:55:49:66:af:
0f:b8:bd:66:0a:41:bf:4a:30:d1:1e:61:8b:43:9d:
19:c0:39:41:1d:b8:ef:18:66:21:48:68:8a:ac:84:
fb:b2:d7:97:fb:a9:95:2e:b6:99:5f:3e:73:3e:62:
ac:7b:97:d3:6c:d2:e5:e4:f7:5d:e1:4e:6d:be:9b:
86:48:76:ba:82:87:22:08:1c:69:60:50:49:06:88:
d8:50:66:35:a5:2b:00:f5:e4:ce:e0:55:51:b9:96:
1c:3d:0d:d1:27:70:8d:3f:6b:ad:7f:fe:26:30:85:
7c:bc:f1:92:92:b4:71:0c:ac:ab:ad:2a:38:5f:0b:
f6:2c:16:37:1f:e0:a2:f7:39:9b:48:be:29:5e:7c:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B3:32:8F:94:FC:6A:77:BE:00:93:2E:F5:D3:0E:44:E7:C1:92:BF
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ZrMyj5T8ane-AJMu9dMOROfBkr8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:62:05:79:83:da:de:14:b9:8a:55:e1:9f:66:42:99:21:0f:
10:c5:9e:8f:63:4c:d2:2a:6c:2a:d7:0c:f8:ce:d8:a2:72:cf:
5b:17:25:b4:99:72:35:aa:e2:e8:04:d2:e1:dd:5e:87:65:9b:
5c:c9:b8:f6:96:eb:01:8a:c8:e9:5d:49:a3:b3:3c:64:30:18:
19:de:57:38:03:7f:dd:15:b0:73:c6:71:76:9c:8f:71:a4:28:
ee:60:97:bc:eb:45:0b:44:0f:bf:68:69:71:c8:39:ab:43:b8:
8d:ed:d0:3e:c6:9e:40:de:30:c8:85:bf:4f:66:ff:10:24:af:
1a:d4:f7:0b:7c:76:ed:df:35:8e:2a:c6:39:f3:0f:14:f4:65:
3d:35:70:de:2a:91:e7:d8:5d:04:17:2a:9b:83:34:38:3d:b0:
b5:57:52:cc:2d:b7:24:2d:69:59:45:5a:c0:0f:40:00:9d:d8:
61:24:e7:08:19:85:38:e6:a2:a0:b1:a6:f4:d4:60:27:11:82:
34:27:a3:17:52:be:18:54:c0:5f:a8:8f:34:9d:7d:d4:32:13:
43:03:c2:98:f1:24:d1:21:08:71:0e:28:af:87:00:d1:cd:54:
06:ba:7f:d4:a8:fa:cb:2d:b4:f9:e8:8e:5d:57:4d:17:d5:b8:
bd:b6:87:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org