Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/bvIcxTvMJDq_DEz4F_1edTjsKwM.roa
File: bvIcxTvMJDq_DEz4F_1edTjsKwM.roa (raw, json)
Hash identifier: vPlnakj66FlzY9IXgsRb2PyDn7GPtAaHPtugTuJHJBg=
Subject key identifier: 6E:F2:1C:C5:3B:CC:24:3A:BF:0C:4C:F8:17:FD:5E:75:38:EC:2B:03
Certificate issuer: /CN=11EF7AFED17B7B1DC7CFD1427288D01E5BEBE947
Certificate serial: 04
Authority key identifier: 11:EF:7A:FE:D1:7B:7B:1D:C7:CF:D1:42:72:88:D0:1E:5B:EB:E9:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bvIcxTvMJDq_DEz4F_1edTjsKwM.roa
Signing time: Thu 27 May 2021 05:05:35 +0000
ROA not before: Thu 27 May 2021 05:05:35 +0000
ROA not after: Fri 27 May 2022 04:59:52 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.41.232.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11EF7AFED17B7B1DC7CFD1427288D01E5BEBE947
Validity
Not Before: May 27 05:05:35 2021 GMT
Not After : May 27 04:59:52 2022 GMT
Subject: CN=6EF21CC53BCC243ABF0C4CF817FD5E7538EC2B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:93:59:32:1f:df:39:4c:d1:3d:bf:d4:c3:
05:64:e0:79:42:ce:0d:87:ad:99:c9:6f:0a:bb:a0:
27:24:2c:8b:4f:85:74:2d:f3:ad:9a:13:8e:cf:5e:
ee:e2:f1:ea:0a:9e:18:06:45:d7:93:1b:ce:b1:aa:
04:8a:79:27:ee:05:f6:c9:92:72:32:de:d2:5e:49:
2f:91:8b:be:c1:23:ca:5a:9f:fa:7a:7e:9c:11:69:
1a:96:c0:f7:20:51:05:e3:9b:52:a1:10:e4:16:0d:
76:0d:2d:20:78:bd:b8:c6:16:60:1f:8c:5e:00:f0:
4e:9d:15:78:be:8c:b6:61:6d:95:b9:6d:16:84:59:
54:d5:8c:c3:a6:3b:98:fb:d9:97:ad:98:73:3a:ae:
50:0b:a9:c5:6d:a2:96:7d:17:f2:29:01:df:56:f9:
86:e3:3b:2d:26:86:7a:e8:44:c7:70:46:7d:bb:3f:
6d:1c:0c:8e:32:06:b6:67:ff:d2:3f:a3:b8:26:5d:
0b:51:1f:b9:0a:59:08:96:67:6e:d7:c4:c9:79:73:
b7:9c:d1:ba:1e:50:70:a2:0d:0f:31:7d:32:19:5a:
0a:de:81:f2:a0:2b:da:d7:d4:75:6e:f9:92:08:2f:
97:a9:e9:83:df:56:e6:f9:d0:f7:67:d5:df:7d:d8:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F2:1C:C5:3B:CC:24:3A:BF:0C:4C:F8:17:FD:5E:75:38:EC:2B:03
X509v3 Authority Key Identifier:
keyid:11:EF:7A:FE:D1:7B:7B:1D:C7:CF:D1:42:72:88:D0:1E:5B:EB:E9:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Ee96_tF7ex3Hz9FCcojQHlvr6Uc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/bvIcxTvMJDq_DEz4F_1edTjsKwM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.41.232.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
92:1f:6e:2e:8f:74:d5:c5:fc:7a:bf:c9:7e:89:0d:16:dd:bd:
28:6e:0b:34:f0:f3:f6:bd:a9:ad:67:c2:78:87:da:3f:34:7a:
28:5e:d4:fa:98:c6:f0:18:5a:f0:a6:70:e0:8d:84:5d:50:4b:
7d:cf:ca:e5:f9:04:f5:14:aa:71:bd:3c:9b:e3:09:96:fa:f4:
5c:1e:7c:f5:5f:af:f6:eb:e2:e3:4a:1b:52:dd:af:34:18:a1:
08:67:19:9a:1e:6c:ed:e8:1a:33:a8:68:83:a4:21:de:22:e7:
a1:de:fd:1f:21:b3:2d:91:6d:22:ab:ac:20:a2:59:ba:ac:ad:
76:93:41:25:45:be:9f:2e:55:36:70:09:01:b3:ba:59:22:e2:
75:1f:74:5c:a3:c0:9c:8d:3b:94:43:88:0c:02:01:e6:59:c4:
8a:32:47:84:8e:db:f3:32:b8:9e:d6:7a:53:4b:0f:b7:b4:8c:
04:8b:d7:6a:29:be:51:50:1f:d9:25:f3:6c:05:2d:26:2e:31:
50:c1:50:3a:87:6c:93:ad:4f:12:a9:06:bf:ee:21:83:42:1a:
53:6d:22:19:b7:fa:6c:2c:d3:97:75:bf:24:88:9d:b2:aa:ed:
84:a6:bb:ba:41:a1:77:ec:36:57:c9:9d:ee:bf:79:76:9d:76:
43:ea:cd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org