Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/bVMHpLG1d8ncGXg9BMeaSS2NVw0.roa
File: bVMHpLG1d8ncGXg9BMeaSS2NVw0.roa (raw, json)
Hash identifier: gEN6Ss1RVbF4R1dMLxaaYHCqTWG0Kn4h8u4Oxx5M9hc=
Subject key identifier: 6D:53:07:A4:B1:B5:77:C9:DC:19:78:3D:04:C7:9A:49:2D:8D:57:0D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0871
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bVMHpLG1d8ncGXg9BMeaSS2NVw0.roa
Signing time: Wed 14 Jun 2023 09:54:04 +0000
ROA not before: Wed 14 Jun 2023 09:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 09:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6D5307A4B1B577C9DC19783D04C79A492D8D570D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:95:72:f9:de:dc:35:1e:b5:d1:9d:e8:51:
2a:a9:b9:87:dd:7a:bc:e8:d9:4f:b4:a9:2d:51:39:
bb:73:ee:d8:6a:32:35:8f:35:a3:fe:d2:28:73:81:
f9:74:74:90:19:7d:50:ca:93:c3:7a:63:a9:1c:86:
cc:9e:37:fa:13:c5:9f:6e:e1:34:58:a7:b6:69:3d:
66:8c:2a:06:93:16:d1:95:79:24:cd:16:0f:ac:45:
66:f1:ff:4b:e0:77:1e:44:03:af:bc:92:64:ce:ee:
0e:5c:82:a4:ef:d2:6f:7c:26:d8:dd:98:5d:16:2f:
fe:dd:35:23:a2:0d:c9:a8:8d:99:f6:fb:2e:3d:a4:
90:0d:a8:cb:9d:da:c9:38:76:30:5a:40:8d:7f:f3:
35:33:d1:6d:3c:af:92:34:4c:45:ab:f9:eb:77:49:
a3:92:f6:3a:4a:17:67:1a:b6:ca:64:81:92:03:1c:
d7:95:7a:aa:ad:98:25:03:4b:37:e2:83:0f:3c:0a:
cc:4f:ad:72:b6:11:88:06:b9:c8:57:d0:21:91:98:
8f:b1:7e:88:83:6f:24:5c:26:2f:22:06:1d:5c:e7:
55:2e:c3:6f:de:12:63:7c:71:48:9a:3e:f9:48:03:
61:15:09:72:f6:66:4b:e3:e1:8f:9e:9f:63:95:a5:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:07:A4:B1:B5:77:C9:DC:19:78:3D:04:C7:9A:49:2D:8D:57:0D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bVMHpLG1d8ncGXg9BMeaSS2NVw0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
51:f8:17:3e:bd:c6:13:9c:e4:8a:da:ce:40:43:bc:2c:99:bc:
39:ca:a6:55:a6:81:ce:a2:fe:79:c6:cb:c3:46:e6:85:a8:5c:
89:1c:fd:e2:8b:68:20:b2:20:26:d4:4e:fc:95:65:6e:6d:9d:
96:9d:08:94:ad:47:c1:bf:e4:6b:85:cf:73:22:04:86:80:95:
eb:2d:e8:e4:2f:e1:2c:c9:0c:c1:a0:30:42:00:0e:54:4f:45:
b6:35:3e:d0:96:ab:fa:7a:ad:29:5c:f1:66:73:61:3c:6e:49:
4e:46:99:c0:27:27:33:03:47:14:d3:3d:63:fc:85:58:59:15:
b4:65:1f:d5:62:78:4b:16:3a:19:eb:96:f5:7b:13:b9:7c:c1:
63:0b:ea:80:a4:59:c7:15:04:26:b9:d9:13:cb:1e:64:3f:11:
5b:30:68:53:30:84:be:8e:42:42:68:27:3d:9e:9e:b5:dc:b5:
66:3f:af:79:36:a3:5d:1f:0f:7f:b8:1b:da:b1:d5:6e:82:7e:
a4:a0:e2:1e:78:41:74:e2:8f:95:c6:e4:53:ff:aa:71:68:90:
1f:34:9d:a4:8d:00:50:ae:c6:3e:9c:c5:81:c2:66:48:5d:3d:
d0:18:0b:3a:99:2a:e5:bd:a4:c5:3d:1c:fd:8e:e5:90:40:99:
7c:40:e3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:01 2024 by rpki-client on console-fra.rpki-client.org