Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/aiT7WprN1QUl1QPXBFnGoTRJfzg.roa
File: aiT7WprN1QUl1QPXBFnGoTRJfzg.roa (raw, json)
Hash identifier: JyTimCjf/WOgCUoTXz0kvMKh7jI6z1nWWTQ+TQbWn8k=
Subject key identifier: 6A:24:FB:5A:9A:CD:D5:05:25:D5:03:D7:04:59:C6:A1:34:49:7F:38
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08E9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/aiT7WprN1QUl1QPXBFnGoTRJfzg.roa
Signing time: Thu 15 Jun 2023 00:54:05 +0000
ROA not before: Thu 15 Jun 2023 00:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 00:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6A24FB5A9ACDD50525D503D70459C6A134497F38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:1b:5d:e4:8d:86:06:88:86:d9:b3:e1:70:
e6:ff:6a:08:3b:9a:ec:5f:63:0e:b7:01:d4:d6:56:
13:a4:af:12:3e:8b:e2:6b:53:66:f5:74:6b:ad:f4:
2f:9b:4d:7b:1f:00:ff:a5:f9:43:65:10:6e:da:7b:
b5:d1:0b:ac:49:d1:54:80:6a:51:be:35:eb:38:a8:
a5:7a:b5:b2:10:c4:85:93:2f:8b:1f:a4:d2:4e:28:
56:7f:b9:40:86:4d:b9:b1:d1:2e:30:33:17:78:61:
25:9e:96:e4:14:f4:e6:b4:4d:54:41:2f:79:d1:48:
88:5e:45:5c:8c:50:f1:6b:f8:cb:b6:86:37:63:93:
4c:35:c6:06:f7:3d:6c:55:75:28:c1:e3:df:d7:50:
39:5e:73:61:4b:a8:02:cb:bf:68:f2:8a:97:18:46:
9c:8b:88:d8:4e:d6:32:b8:13:80:61:72:39:1a:5c:
a2:27:81:4f:cc:cd:27:43:19:69:70:87:b9:52:bc:
dd:94:3c:ea:4b:ed:8c:4a:b6:db:c5:4d:99:45:1b:
fb:3d:5a:1f:17:f1:76:70:d4:46:bb:94:07:7d:78:
a0:87:46:87:63:2e:b0:e4:34:36:e5:a9:3d:6e:60:
93:87:c1:d0:66:0a:fa:b0:b9:0f:b6:21:f3:e2:55:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:24:FB:5A:9A:CD:D5:05:25:D5:03:D7:04:59:C6:A1:34:49:7F:38
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/aiT7WprN1QUl1QPXBFnGoTRJfzg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:36:3a:55:37:e3:27:23:b1:35:59:ca:54:91:89:75:e8:c4:
ae:ed:d0:ff:96:0b:ff:53:af:02:48:81:44:4b:7e:c3:4e:9c:
61:29:38:74:77:ea:98:e4:4a:06:ff:f8:67:7c:4c:f4:36:6f:
e4:d4:f2:63:50:67:e4:6f:10:eb:3e:a9:a1:e5:3d:7b:13:9d:
07:9b:bf:74:5a:d6:be:8a:13:3b:ab:6e:d1:64:7b:97:ff:cc:
14:b4:4f:8b:c1:8c:85:1a:55:5c:57:62:89:53:9a:9f:26:ba:
f3:e1:09:f9:d1:b0:88:a6:37:e6:54:6b:27:24:44:af:d0:4a:
85:56:8f:62:69:00:aa:25:69:50:8a:a1:71:78:4f:c9:61:ec:
c7:82:0b:ab:78:e4:82:18:7b:43:13:ef:be:08:d9:84:11:a4:
c4:80:0f:01:f0:db:c8:f9:63:6f:9d:a5:b2:ff:db:ab:81:28:
6c:b0:5f:a4:d2:f3:74:99:c3:34:76:b7:f7:26:64:d0:4a:4c:
65:54:0f:1b:c4:3f:ff:0b:8b:c6:e1:7a:31:8b:23:e0:ca:58:
3a:f5:eb:af:2c:72:bc:4b:f4:31:91:ae:15:9c:9a:fe:3c:13:
ba:f2:0c:53:41:19:42:71:22:54:e4:d4:94:f5:e4:8c:1e:46:
b5:2b:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org