Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/dC8gkdyfwJzPjtu4laGaXC00rA0.roa
File: dC8gkdyfwJzPjtu4laGaXC00rA0.roa (raw, json)
Hash identifier: 3hm5o+7tpGFNlWbHs+uGxFKopH/G2TrHO4JH7MJ3Ra4=
Subject key identifier: 74:2F:20:91:DC:9F:C0:9C:CF:8E:DB:B8:95:A1:9A:5C:2D:34:AC:0D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07D5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/dC8gkdyfwJzPjtu4laGaXC00rA0.roa
Signing time: Tue 13 Jun 2023 14:24:11 +0000
ROA not before: Tue 13 Jun 2023 14:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2005 (0x7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 14:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=742F2091DC9FC09CCF8EDBB895A19A5C2D34AC0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:be:db:cb:7c:14:13:09:b3:f9:03:48:c3:
9d:f5:8b:5d:87:b3:c5:02:ce:c3:96:d0:45:ff:b2:
4a:99:5e:dc:e5:2a:6f:f6:03:86:51:de:88:dc:c8:
9c:88:a2:dc:0e:86:84:86:05:f3:6f:ac:c8:39:f9:
79:09:01:0f:32:34:a2:c4:6f:0c:fa:ef:14:71:9f:
e4:45:17:8f:bb:f9:0e:db:4f:c3:2e:48:30:51:fe:
e9:70:f0:8f:b2:e7:fd:52:d9:13:6b:9c:ee:00:3c:
7c:45:b0:68:a5:7b:3f:43:53:45:07:bd:94:9b:d6:
e3:0e:e4:be:b7:5d:2d:96:05:bc:53:bb:ff:68:33:
b9:5d:f9:29:fc:eb:47:4c:d0:7c:1d:75:a2:86:35:
15:38:c0:23:14:1a:a6:7b:77:d1:f9:a5:f2:0a:ed:
24:af:d1:9e:58:ec:c9:9b:51:11:0e:5f:39:35:61:
9d:92:13:c9:1c:c5:bc:61:f3:56:86:71:64:52:9b:
e4:cf:1c:70:98:de:05:b2:6b:7e:ae:32:b3:ee:54:
e9:cb:b3:53:74:49:6a:31:6d:22:71:f8:78:44:ae:
ee:fc:b5:ef:66:54:87:68:0d:89:f0:21:a4:82:a6:
c1:84:71:e7:8b:42:15:41:02:ff:4b:d8:53:53:66:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:20:91:DC:9F:C0:9C:CF:8E:DB:B8:95:A1:9A:5C:2D:34:AC:0D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/dC8gkdyfwJzPjtu4laGaXC00rA0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
40:17:61:3b:f6:1f:60:7f:50:00:62:7b:d1:de:ee:94:23:c6:
15:e9:99:d0:62:78:90:ed:12:0d:f9:6f:5d:31:fc:31:4f:1c:
2c:77:af:ab:10:f9:f9:d6:73:83:01:1c:57:86:60:55:f5:8b:
a2:2b:e5:3b:43:55:24:1d:b7:18:99:9d:88:da:72:fb:78:0c:
25:64:fd:29:c5:d2:04:44:c1:3c:df:4c:75:21:0b:ba:15:c5:
ee:1a:50:40:98:13:38:63:8c:dc:0f:c8:78:9d:79:7c:92:3f:
d1:c9:2f:a1:3a:13:41:7d:49:30:84:bf:18:28:45:29:19:ae:
1d:fc:76:34:1e:23:57:a9:7d:88:5e:c6:98:33:00:bc:b1:c6:
66:4e:73:1d:53:75:48:85:fc:2a:f5:1d:b7:a7:d6:ca:9d:15:
60:a1:63:bc:78:09:50:e9:3a:8d:bf:93:da:54:18:28:16:15:
e0:fc:eb:7a:93:0c:8a:ac:ea:f4:a2:11:26:fb:21:cf:f8:f0:
51:8d:c9:c8:73:87:b6:0e:f8:dc:2c:5e:cf:05:0b:43:f8:82:
c7:b5:ba:01:a7:67:25:54:df:73:6d:da:dd:79:63:ae:4a:a8:
72:a1:5e:68:04:52:f8:28:b7:ab:a6:49:3d:7f:61:bb:12:5c:
93:3e:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org