Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/b0ZvQ7wAu1bZGBfn8PH4OwARtt4.roa
File: b0ZvQ7wAu1bZGBfn8PH4OwARtt4.roa (raw, json)
Hash identifier: rDNRL8QUi5AlKki8D//pzEMVi+OgBv4sCB9/ZSfgYB4=
Subject key identifier: 6F:46:6F:43:BC:00:BB:56:D9:18:17:E7:F0:F1:F8:3B:00:11:B6:DE
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08DD
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/b0ZvQ7wAu1bZGBfn8PH4OwARtt4.roa
Signing time: Wed 14 Jun 2023 23:24:08 +0000
ROA not before: Wed 14 Jun 2023 23:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269 (0x8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 23:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6F466F43BC00BB56D91817E7F0F1F83B0011B6DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:85:fb:07:0f:84:12:23:d0:eb:e0:25:79:
93:e2:0b:65:4c:da:94:73:e7:1b:bd:a1:63:39:33:
28:12:29:be:0a:fb:a1:db:9c:94:a9:98:d8:2a:f7:
a5:ed:4b:17:74:b2:91:bc:60:0f:ae:c7:88:75:68:
ff:e0:28:d5:9c:00:11:05:89:a2:bd:01:ac:a4:e0:
88:be:d9:df:8c:48:23:aa:a3:5d:f9:27:74:36:20:
b7:71:2a:2d:0d:09:66:a9:ae:6d:88:bf:a6:c4:08:
62:c5:55:b9:47:f8:ef:b1:e1:b7:85:52:44:af:bf:
6a:0f:25:5c:a0:62:b0:7a:70:7f:0a:a5:06:aa:3e:
77:b7:b1:bf:bf:8b:5e:92:82:f1:61:1b:ac:8e:2b:
ed:00:6f:d7:63:44:62:e8:2a:9b:1c:10:f2:b6:8c:
10:d4:55:03:7c:be:b3:d9:dc:3f:93:76:a5:b6:6a:
08:84:41:6f:36:76:bd:9c:7a:b3:a0:58:d9:70:15:
8b:5c:fd:07:81:3a:61:80:52:51:b9:46:b2:2c:30:
9a:f9:6d:8a:60:48:c5:96:38:fb:3a:6e:49:62:e3:
7c:35:14:a9:18:20:4f:58:e5:2b:2e:ee:f5:40:e5:
e4:07:1d:37:c2:c4:4c:98:76:2f:ef:25:21:3c:49:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:46:6F:43:BC:00:BB:56:D9:18:17:E7:F0:F1:F8:3B:00:11:B6:DE
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/b0ZvQ7wAu1bZGBfn8PH4OwARtt4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:18:b9:46:a2:d8:40:b0:cf:54:89:e5:b5:1d:d9:42:3d:02:
f1:6c:22:0b:ec:e3:17:e5:d2:23:54:5b:74:40:82:b6:7b:8b:
1f:c6:d6:d6:da:9e:35:18:14:8b:23:95:dd:48:da:d6:37:e4:
e5:12:da:01:a8:0e:0d:a1:92:55:0d:9c:1f:12:58:61:83:8c:
76:e3:af:0e:56:fe:5f:aa:c1:54:50:41:cf:f2:bd:15:87:ea:
de:32:d4:45:af:2d:d9:4d:08:a4:c8:95:53:ac:d9:68:6f:a2:
0b:48:72:94:09:b9:ad:28:e9:3d:0f:18:0c:1e:1d:36:95:da:
7b:a8:2f:0d:c3:c7:78:10:e8:e9:1c:72:ef:06:06:f3:25:7c:
72:6c:83:d9:f5:ac:fe:fe:7a:9e:1f:49:98:58:38:61:cb:d8:
f8:52:8b:c7:f3:b9:73:ab:c6:f0:38:ab:67:3f:bd:14:11:3b:
02:ea:2b:d8:75:24:5e:a9:f3:d8:ea:a4:a7:d1:4b:13:68:67:
f0:54:b4:66:b3:72:5c:80:b3:6a:7b:df:86:74:9c:a2:05:03:
23:5d:01:d2:60:a4:64:bd:b4:85:e1:07:a4:25:0a:2d:13:ad:
95:5d:87:da:05:82:d0:28:bf:c0:be:0c:d1:c5:e7:65:d2:a0:
a2:d9:cb:d8
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MzI0MDhaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDZGNDY2RjQzQkMwMEJC
NTZEOTE4MTdFN0YwRjFGODNCMDAxMUI2REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCHYX7Bw+EEiPQ6+AleZPiC2VM2pRz5xu9oWM5MygSKb4K+6Hb
nJSpmNgq96XtSxd0spG8YA+ux4h1aP/gKNWcABEFiaK9Aayk4Ii+2d+MSCOqo135
J3Q2ILdxKi0NCWaprm2Iv6bECGLFVblH+O+x4beFUkSvv2oPJVygYrB6cH8KpQaq
Pne3sb+/i16SgvFhG6yOK+0Ab9djRGLoKpscEPK2jBDUVQN8vrPZ3D+TdqW2agiE
QW82dr2cerOgWNlwFYtc/QeBOmGAUlG5RrIsMJr5bYpgSMWWOPs6bkli43w1FKkY
IE9Y5Ssu7vVA5eQHHTfCxEyYdi/vJSE8SRpfAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUb0ZvQ7wAu1bZGBfn8PH4OwARtt4wHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvYjBadlE3d0F1MWJa
R0JmbjhQSDRPd0FSdHQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAbBi5
RqLYQLDPVInltR3ZQj0C8WwiC+zjF+XSI1RbdECCtnuLH8bW1tqeNRgUiyOV3Uja
1jfk5RLaAagODaGSVQ2cHxJYYYOMduOvDlb+X6rBVFBBz/K9FYfq3jLURa8t2U0I
pMiVU6zZaG+iC0hylAm5rSjpPQ8YDB4dNpXae6gvDcPHeBDo6Rxy7wYG8yV8cmyD
2fWs/v56nh9JmFg4YcvY+FKLx/O5c6vG8DirZz+9FBE7Auor2HUkXqnz2Oqkp9FL
E2hn8FS0ZrNyXICzanvfhnScogUDI10B0mCkZL20heEHpCUKLROtlV2H2gWC0Ci/
wL4M0cXnZdKgotnL2A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org