Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/bcEBiOjgpHYWDTqraa8oF0CmPJA.roa
File: bcEBiOjgpHYWDTqraa8oF0CmPJA.roa (raw, json)
Hash identifier: RDM/lywFJRdIu/TkKghweMR0kENtYOsE4y78oTUJiIs=
Subject key identifier: 6D:C1:01:88:E8:E0:A4:76:16:0D:3A:AB:69:AF:28:17:40:A6:3C:90
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0805
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bcEBiOjgpHYWDTqraa8oF0CmPJA.roa
Signing time: Tue 13 Jun 2023 20:24:02 +0000
ROA not before: Tue 13 Jun 2023 20:24:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 20:24:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=6DC10188E8E0A476160D3AAB69AF281740A63C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:83:9a:8e:0e:50:43:73:9b:6a:0e:9d:c9:
f9:79:73:20:3c:56:8e:40:39:32:01:60:f4:89:4b:
c2:a5:e7:4e:40:41:56:56:21:b0:a5:ec:ef:f6:55:
59:6e:9c:35:9c:1d:8f:da:46:6c:14:df:7f:3a:87:
55:aa:56:49:d6:d0:41:1d:6a:3e:29:99:a2:4f:63:
c4:8a:1e:e3:61:ee:93:3a:a2:04:3b:c9:50:90:19:
54:96:89:e8:1e:57:ac:93:27:4b:e5:3c:fe:e3:15:
7a:c5:d2:3e:f2:b7:fc:7a:d6:42:86:bf:d1:5f:42:
0d:8e:e5:5e:13:4e:6e:46:52:e7:0f:a6:f7:53:1d:
fe:8a:26:fe:77:20:6b:52:5a:ab:e1:b4:25:34:15:
11:d6:7f:e7:07:11:4a:48:d6:d7:cb:f8:84:52:7f:
0c:1f:c7:1e:33:ff:71:fb:68:04:65:31:61:4b:98:
d7:e8:ed:e2:64:ef:24:00:7b:89:bb:c6:77:29:93:
08:94:79:89:ee:de:b3:20:0a:f1:bf:5b:e0:92:92:
77:66:0e:b2:c7:3c:d8:e7:36:d2:3d:f9:c9:54:8d:
6d:39:2c:f5:3b:81:cd:80:a2:e4:2c:d2:9f:3c:11:
39:ae:2e:bd:6c:c4:be:ef:d3:e5:0c:85:cc:c3:fb:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C1:01:88:E8:E0:A4:76:16:0D:3A:AB:69:AF:28:17:40:A6:3C:90
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bcEBiOjgpHYWDTqraa8oF0CmPJA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:b2:f6:98:3c:61:b3:ab:fe:26:35:ac:85:32:85:62:3a:44:
53:ea:fe:73:df:e1:c0:39:66:88:06:1e:d6:e0:49:e4:a8:29:
ee:55:79:07:78:e7:b9:e8:c0:7b:fd:76:16:fb:0b:27:21:75:
d4:12:e0:43:c3:7c:84:5b:36:5f:c6:f9:6b:ea:bf:8d:fc:d6:
5d:3b:21:3f:cd:7f:15:59:2d:29:7d:68:a2:8e:24:62:d8:cd:
07:c9:56:a8:0c:a8:0a:1a:9a:8a:7a:50:d6:6b:52:c4:f0:b4:
0c:e2:68:2a:23:53:0b:cb:eb:12:f7:e2:f2:ab:61:5f:7b:d2:
93:1f:a9:f1:45:b1:10:f9:47:db:82:c8:1f:96:27:72:6f:4f:
79:5e:9b:d8:77:e7:fa:b0:92:78:96:9a:fd:40:3f:82:eb:38:
d9:9a:c1:0f:37:29:05:80:8a:15:9c:8e:6b:0d:bd:78:29:ce:
7d:85:3f:a2:d9:86:6e:a9:1c:9a:df:fe:60:60:9c:8e:31:3e:
ab:ff:f8:dc:b0:4a:d9:a2:24:28:da:cf:d2:ab:03:3b:61:f7:
a4:9d:51:ed:a3:9f:25:b9:88:4d:6b:f5:63:13:0e:41:f2:da:
6b:52:c6:49:dd:cc:dd:b2:9b:d0:d2:cf:3a:d3:a7:97:b3:01:
97:43:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org