Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/_rsSLsLgjvo45Dswo1_4HDilkQU.roa
File: _rsSLsLgjvo45Dswo1_4HDilkQU.roa (raw, json)
Hash identifier: 0kvTMVEAKCkNKtvJ7OC5OaWf/PHfkMb1zakdHQypL1c=
Subject key identifier: FE:BB:12:2E:C2:E0:8E:FA:38:E4:3B:30:A3:5F:F8:1C:38:A5:91:05
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08C5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/_rsSLsLgjvo45Dswo1_4HDilkQU.roa
Signing time: Wed 14 Jun 2023 20:24:13 +0000
ROA not before: Wed 14 Jun 2023 20:24:13 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 20:24:13 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=FEBB122EC2E08EFA38E43B30A35FF81C38A59105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:93:f8:6c:2f:a6:f3:8f:49:7d:9b:76:2a:
f5:69:d2:d5:74:8a:0f:eb:21:9a:78:82:f8:70:13:
17:01:b7:95:02:96:4b:2c:78:55:ec:1e:76:b7:1d:
24:64:1e:60:0c:b4:6a:e7:2f:1d:d8:f8:eb:73:4c:
78:8d:53:2b:79:fa:82:8e:e2:f6:97:72:1e:a2:42:
8f:ed:78:3e:d0:1f:48:bf:4d:c4:96:6a:99:fc:ec:
a0:cf:12:29:a5:5c:df:6f:66:b4:06:fe:1f:d0:0b:
da:73:db:05:b5:80:fe:c2:53:1d:53:78:9e:bb:ac:
a0:ad:d9:b3:ce:6f:e8:ed:a3:d4:33:fe:4d:97:5c:
41:ab:1e:5c:c6:c6:35:07:c1:4e:c5:e8:e1:07:b5:
2c:24:59:af:9f:67:c8:bb:46:09:82:6f:40:ce:f0:
b4:cf:a9:a6:ad:01:5c:6b:f5:81:74:af:c2:6b:51:
3e:5f:36:32:8d:21:54:ed:50:79:1f:44:78:df:d2:
e8:96:51:82:f1:2e:b4:2d:6c:a0:24:e5:11:22:77:
85:0a:17:52:69:da:0f:99:1e:9e:34:5a:bd:1b:19:
37:46:53:09:9f:fa:53:98:82:b5:48:cb:99:d0:56:
2a:a5:11:a9:3e:06:7b:8a:c4:3a:aa:57:d1:f4:0d:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:12:2E:C2:E0:8E:FA:38:E4:3B:30:A3:5F:F8:1C:38:A5:91:05
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/_rsSLsLgjvo45Dswo1_4HDilkQU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
30:00:e9:5f:c4:54:1b:ba:a8:34:cc:33:f0:ec:a9:58:4b:fb:
15:4f:ed:0b:ec:81:c0:ef:fe:b6:20:aa:f5:ca:85:f3:4a:1a:
b2:3c:dc:54:11:b2:a0:98:2f:6d:f3:69:58:64:0f:ce:5f:e5:
9a:bc:7a:15:7b:0d:14:b3:d3:f7:15:9d:aa:0b:70:81:92:c3:
48:3f:cc:3a:25:7f:a1:19:13:f7:2d:d7:ca:51:eb:52:71:f4:
79:76:c4:f3:2c:c3:ea:2c:ea:0b:ca:a2:c3:ab:d8:6c:39:16:
51:8b:65:2c:1e:2f:c7:c9:e3:d3:c9:d8:0e:bf:c5:cc:f6:82:
d9:5f:30:f1:a5:e7:18:b2:2b:f2:4e:a3:0f:f7:2f:1f:2f:bf:
80:ca:86:bb:13:5b:21:c6:ca:e8:2f:ef:50:17:a2:23:fc:e7:
dc:c9:ca:5e:59:13:b6:35:8e:26:64:23:cd:58:6a:d4:7f:c5:
92:2e:45:85:43:e7:1b:50:af:99:e7:56:75:9f:54:cb:c5:8a:
7e:da:70:f2:2a:5d:14:84:2c:ad:92:23:7c:3f:51:de:b8:9c:
e9:97:b8:15:bf:29:e8:68:14:db:21:4c:1d:4f:32:2b:59:39:
10:bb:96:75:4d:6c:6b:78:0a:67:f0:f6:a2:2e:b3:94:cd:07:
4e:81:82:ea
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MDI0MTNaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEZFQkIxMjJFQzJFMDhF
RkEzOEU0M0IzMEEzNUZGODFDMzhBNTkxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxUJP4bC+m849JfZt2KvVp0tV0ig/rIZp4gvhwExcBt5UClkss
eFXsHna3HSRkHmAMtGrnLx3Y+OtzTHiNUyt5+oKO4vaXch6iQo/teD7QH0i/TcSW
apn87KDPEimlXN9vZrQG/h/QC9pz2wW1gP7CUx1TeJ67rKCt2bPOb+jto9Qz/k2X
XEGrHlzGxjUHwU7F6OEHtSwkWa+fZ8i7RgmCb0DO8LTPqaatAVxr9YF0r8JrUT5f
NjKNIVTtUHkfRHjf0uiWUYLxLrQtbKAk5REid4UKF1Jp2g+ZHp40Wr0bGTdGUwmf
+lOYgrVIy5nQViqlEak+BnuKxDqqV9H0Df1jAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU/rsSLsLgjvo45Dswo1/4HDilkQUwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvX3JzU0xzTGdqdm80
NURzd28xXzRIRGlsa1FVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAMADp
X8RUG7qoNMwz8OypWEv7FU/tC+yBwO/+tiCq9cqF80oasjzcVBGyoJgvbfNpWGQP
zl/lmrx6FXsNFLPT9xWdqgtwgZLDSD/MOiV/oRkT9y3XylHrUnH0eXbE8yzD6izq
C8qiw6vYbDkWUYtlLB4vx8nj08nYDr/FzPaC2V8w8aXnGLIr8k6jD/cvHy+/gMqG
uxNbIcbK6C/vUBeiI/zn3MnKXlkTtjWOJmQjzVhq1H/Fki5FhUPnG1CvmedWdZ9U
y8WKftpw8ipdFIQsrZIjfD9R3ric6Ze4Fb8p6GgU2yFMHU8yK1k5ELuWdU1sa3gK
Z/D2oi6zlM0HToGC6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org