Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/_c5Twj8sM5HTBgahohrhh6jljsY.roa
File: _c5Twj8sM5HTBgahohrhh6jljsY.roa (raw, json)
Hash identifier: P9ZibcR3ltYaL9nVmrMxMbomc1FdibJUtm1Tda4GuXc=
Subject key identifier: FD:CE:53:C2:3F:2C:33:91:D3:06:06:A1:A2:1A:E1:87:A8:E5:8E:C6
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08AD
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/_c5Twj8sM5HTBgahohrhh6jljsY.roa
Signing time: Wed 14 Jun 2023 17:24:05 +0000
ROA not before: Wed 14 Jun 2023 17:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221 (0x8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 17:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=FDCE53C23F2C3391D30606A1A21AE187A8E58EC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:47:e9:cc:ae:09:57:26:46:21:6a:26:d1:
bc:37:ad:c0:c4:01:00:f8:92:30:ae:1b:85:b3:42:
11:4d:8e:6f:e2:27:1d:7a:9a:cc:3c:9b:9c:ef:ca:
97:60:63:fc:9d:2c:dd:c7:e1:ac:19:15:6d:aa:53:
2f:aa:6a:7e:c4:26:df:af:bb:f3:0a:b2:e9:d1:21:
90:0b:36:4b:be:b7:e2:0e:c6:93:5a:ac:4d:95:ab:
2d:75:05:37:c1:07:a7:84:70:45:63:c2:ea:4c:f5:
84:46:27:38:f0:fa:0b:ff:4d:5b:17:8d:5c:db:0c:
a8:d4:82:c7:b5:0c:3b:7e:d7:d0:00:f3:8a:b7:72:
9b:79:79:03:eb:ef:13:64:9a:27:fd:0e:f8:59:8f:
ca:00:7b:bc:c9:b6:d4:5e:4e:6c:b9:64:59:82:a9:
67:ee:f5:13:35:33:7f:10:95:17:9f:e3:3c:b7:06:
41:f5:2a:96:ba:6f:0f:d1:ba:c9:a4:84:fd:29:e0:
d2:58:ce:32:f4:a1:a3:f0:43:76:ef:ba:55:16:5c:
8c:73:00:98:50:ab:00:fe:a7:01:f0:e8:b8:32:b4:
51:61:0a:54:ed:72:92:36:a0:d6:a8:fa:de:c8:91:
6f:14:4b:3e:a0:22:04:2f:7a:b1:36:c6:96:db:8b:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:53:C2:3F:2C:33:91:D3:06:06:A1:A2:1A:E1:87:A8:E5:8E:C6
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/_c5Twj8sM5HTBgahohrhh6jljsY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:12:3b:03:0b:ce:3e:f3:32:a9:9a:6a:08:d7:ed:f2:14:93:
60:2a:80:9f:0c:6e:5e:d0:76:39:fe:13:bc:be:1a:0a:80:2f:
58:ef:42:7e:6e:99:49:2f:9c:a9:26:f1:7c:7a:19:f8:75:48:
4b:f7:dd:f8:41:6f:f0:00:be:58:37:39:12:5f:4e:c7:97:af:
18:f6:fa:c3:8a:6a:58:b2:fd:7d:72:52:ef:ac:25:59:55:d4:
82:58:72:f5:39:eb:5b:59:69:5b:f2:13:75:94:92:f1:13:35:
17:8c:f4:97:4c:34:5f:ba:b5:e0:22:f8:4d:b5:05:18:bc:98:
ce:00:12:44:18:68:ac:c6:ae:96:73:6e:65:ad:b2:84:5e:70:
01:4d:67:ec:c6:db:fb:65:fe:41:fd:c3:4b:7a:cf:30:ed:36:
94:bc:9c:de:6f:62:7a:bd:29:66:b9:0e:38:a9:05:86:50:b7:
db:7b:f3:5f:f0:a2:fc:38:6b:9c:99:d6:1d:fa:dd:d2:e7:7b:
21:04:c7:25:4a:a4:27:5e:7c:bc:56:17:d1:39:07:7e:72:e4:
6b:3d:c9:78:d2:d3:cb:6e:be:c5:06:f0:9b:a2:39:3c:61:01:
b3:e6:63:dd:ec:6f:03:7e:20:87:0f:09:cb:1d:0a:b6:66:b6:
8c:d7:98:4f
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQx
NzI0MDVaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEZEQ0U1M0MyM0YyQzMz
OTFEMzA2MDZBMUEyMUFFMTg3QThFNThFQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFf0fpzK4JVyZGIWom0bw3rcDEAQD4kjCuG4WzQhFNjm/iJx16
msw8m5zvypdgY/ydLN3H4awZFW2qUy+qan7EJt+vu/MKsunRIZALNku+t+IOxpNa
rE2Vqy11BTfBB6eEcEVjwupM9YRGJzjw+gv/TVsXjVzbDKjUgse1DDt+19AA84q3
cpt5eQPr7xNkmif9DvhZj8oAe7zJttReTmy5ZFmCqWfu9RM1M38QlRef4zy3BkH1
Kpa6bw/RusmkhP0p4NJYzjL0oaPwQ3bvulUWXIxzAJhQqwD+pwHw6LgytFFhClTt
cpI2oNao+t7IkW8USz6gIgQverE2xpbbiyo9AgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU/c5Twj8sM5HTBgahohrhh6jljsYwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvX2M1VHdqOHNNNUhU
QmdhaG9ocmhoNmpsanNZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEATRI7
AwvOPvMyqZpqCNft8hSTYCqAnwxuXtB2Of4TvL4aCoAvWO9Cfm6ZSS+cqSbxfHoZ
+HVIS/fd+EFv8AC+WDc5El9Ox5evGPb6w4pqWLL9fXJS76wlWVXUglhy9TnrW1lp
W/ITdZSS8RM1F4z0l0w0X7q14CL4TbUFGLyYzgASRBhorMaulnNuZa2yhF5wAU1n
7Mbb+2X+Qf3DS3rPMO02lLyc3m9ier0pZrkOOKkFhlC323vzX/Ci/DhrnJnWHfrd
0ud7IQTHJUqkJ158vFYX0TkHfnLkaz3JeNLTy26+xQbwm6I5PGEBs+Zj3exvA34g
hw8Jyx0Ktma2jNeYTw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org