Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/_F9vYgk1fZCV8e3NHPa9Ik0cCMk.roa
File: _F9vYgk1fZCV8e3NHPa9Ik0cCMk.roa (raw, json)
Hash identifier: rp/QJccjt8iK//qW6KUWG75XqH8amCUyYhYs2RsKYoo=
Subject key identifier: FC:5F:6F:62:09:35:7D:90:95:F1:ED:CD:1C:F6:BD:22:4D:1C:08:C9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0861
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/_F9vYgk1fZCV8e3NHPa9Ik0cCMk.roa
Signing time: Wed 14 Jun 2023 07:54:04 +0000
ROA not before: Wed 14 Jun 2023 07:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145 (0x861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 07:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=FC5F6F6209357D9095F1EDCD1CF6BD224D1C08C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:1e:12:cd:c9:7d:3d:0f:26:a5:28:1c:bc:
38:11:11:5d:fb:6c:34:72:44:fc:96:37:9b:9d:ce:
30:52:d9:50:3a:f1:57:1a:43:e7:e8:c1:5c:36:29:
80:3b:02:db:5a:bb:2d:01:6c:ae:45:3d:08:df:41:
01:ea:6d:9b:86:8f:7c:97:de:c0:5e:f9:e1:d0:9c:
e4:7e:b2:ae:7e:ba:c6:72:cd:20:43:c7:92:0c:e4:
67:c3:a2:1c:80:74:59:e6:73:7e:fb:3a:77:ae:f2:
71:ec:31:5f:cb:e2:2e:c2:50:44:1d:b5:f9:c2:b8:
0c:a3:ea:8b:a8:5d:62:cc:2f:3b:4c:5f:2f:43:ac:
ee:f3:70:74:88:c3:36:71:67:4a:69:60:08:68:52:
00:8b:a6:d5:e7:cd:39:49:e6:7f:b8:74:5d:0e:18:
a8:f1:27:f1:70:92:a5:a4:9a:ff:82:b9:30:1a:ce:
d7:eb:ee:62:5f:97:90:f4:42:c4:8d:3c:03:c9:a0:
ca:32:44:be:2c:94:93:0a:07:29:e3:08:cc:93:ed:
fd:7f:54:4d:89:93:fb:2a:63:71:10:99:60:4b:81:
e2:70:fb:03:28:fe:f6:5c:c8:47:e0:59:43:ad:a9:
5c:7b:6d:0a:09:bb:ed:71:dd:35:83:e5:7d:68:88:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:6F:62:09:35:7D:90:95:F1:ED:CD:1C:F6:BD:22:4D:1C:08:C9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/_F9vYgk1fZCV8e3NHPa9Ik0cCMk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
45:bd:48:6f:ef:ac:d3:6d:7f:b4:cb:48:44:fe:dc:70:5c:c1:
f5:68:14:c6:d1:79:7f:e6:05:df:47:35:2b:c3:08:d2:6e:92:
70:55:a3:fe:3c:78:0f:e6:65:47:4e:ed:84:79:62:d6:fd:fc:
22:5c:05:9f:cf:08:7b:e5:57:5f:32:06:a1:9b:34:50:ae:62:
35:fe:28:5d:35:5a:f3:e6:11:4b:19:91:66:17:d2:d2:40:98:
54:4e:f7:2e:22:35:75:13:e4:d8:3a:f0:6e:58:16:d4:39:65:
d4:cc:8a:10:50:2f:22:82:55:35:f4:13:97:ae:85:a7:71:e6:
b8:d7:f7:a0:f6:ee:66:32:ad:5d:de:03:9b:b8:49:65:2a:db:
d0:fa:06:79:9f:41:17:bb:f1:b0:79:c5:ab:b8:95:47:78:56:
71:14:26:25:78:4f:ab:6c:96:27:dc:a6:1e:e1:9a:85:2c:7f:
a5:b7:ce:9b:b8:62:63:70:41:66:62:e4:76:be:a2:45:fe:f7:
e0:12:2d:42:cf:f3:c8:ff:cf:8b:83:31:56:f6:f0:cd:55:1f:
f2:1e:ca:79:7d:7c:39:11:f6:fb:a5:76:d3:47:63:b6:a7:01:
bb:7e:f5:fe:aa:26:dd:87:f5:db:a4:26:83:7e:12:6f:a0:34:
9b:e9:ef:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org