Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/eU-zyHYHEOnNKI_KPs9HR8WR2io.roa
File: eU-zyHYHEOnNKI_KPs9HR8WR2io.roa (raw, json)
Hash identifier: n0RAMs+fGlwAmWz+I+WcA0puIbyKG0yLIzmKo86RVj0=
Subject key identifier: 79:4F:B3:C8:76:07:10:E9:CD:28:8F:CA:3E:CF:47:47:C5:91:DA:2A
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07F9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/eU-zyHYHEOnNKI_KPs9HR8WR2io.roa
Signing time: Tue 13 Jun 2023 18:54:02 +0000
ROA not before: Tue 13 Jun 2023 18:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041 (0x7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 18:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=794FB3C8760710E9CD288FCA3ECF4747C591DA2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bf:3e:f0:3d:4d:e3:ab:1f:24:1e:54:d0:46:
ac:9c:32:73:39:24:39:c2:c8:53:79:b7:22:ca:d1:
4e:e0:84:a4:74:56:ed:f1:97:ef:0d:0a:26:89:ad:
af:35:9d:45:d7:15:74:06:a6:47:de:09:50:c5:6d:
f7:d5:31:ec:11:68:ce:76:e9:02:47:b5:91:8b:54:
d1:b1:82:a4:03:8c:37:32:c5:96:9c:87:55:47:e5:
59:6b:d6:b6:ca:75:30:8f:18:38:a1:ee:3c:e8:2c:
d4:0c:a0:6e:61:cb:3a:1a:ed:ac:ea:64:8d:46:84:
e6:65:b1:69:a0:05:c1:dc:b9:ec:27:2e:67:6a:f6:
8d:c1:cc:d6:e2:fa:b5:d5:9c:31:42:18:c5:6f:e9:
6a:be:cf:c3:ba:94:e9:58:8b:57:5e:f6:19:60:0e:
a2:1a:6b:6c:2b:03:cd:ee:a2:01:65:b7:9d:60:2a:
ba:a3:1c:0c:61:f3:fe:47:96:45:27:65:fe:ac:f1:
d1:ee:a7:5b:66:f1:c2:53:ab:a1:02:32:d6:d5:b3:
ad:d1:e9:46:c3:8d:30:f8:30:3a:7c:a7:d4:5c:92:
e8:8e:8e:f5:01:74:24:32:8b:c2:8d:e4:5d:f8:84:
7b:29:d1:17:ec:69:4e:ad:12:e9:81:0b:28:85:d3:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:B3:C8:76:07:10:E9:CD:28:8F:CA:3E:CF:47:47:C5:91:DA:2A
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/eU-zyHYHEOnNKI_KPs9HR8WR2io.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
80:4f:60:8b:ca:7b:4f:0d:bc:71:2a:73:37:c0:7d:ea:4d:dd:
de:65:07:69:3f:aa:67:1b:0c:e4:94:36:92:b7:10:4f:4f:bd:
46:ad:d8:71:98:6c:24:88:59:dc:85:52:93:bc:35:e7:6f:16:
21:68:d4:56:c1:aa:89:15:28:75:bb:41:a0:df:b8:83:c1:37:
cb:2f:83:3a:9d:45:4a:b8:c8:01:7b:f6:3a:81:12:28:aa:8e:
f8:29:15:bb:ca:73:3d:a3:3e:2e:90:c5:12:c4:06:39:c1:fd:
6f:78:fc:5b:42:b9:54:7d:1e:ad:ff:2f:31:18:59:04:c5:1f:
2c:59:fa:e0:2e:46:27:e7:1c:20:1c:ac:8c:e5:11:f6:ab:67:
88:81:82:6f:a4:0a:dc:5d:40:3a:c1:90:73:02:e0:16:b5:c2:
ca:4f:b5:e9:c9:25:28:4d:85:6b:22:9a:43:64:28:69:6d:1f:
5b:07:5b:ba:6e:7f:3c:07:9b:85:91:00:4c:8c:1d:06:43:a5:
eb:eb:48:a6:ac:f3:52:31:79:be:03:3b:87:d6:d2:40:ed:72:
39:87:b2:b0:a4:8b:0e:35:fe:57:0b:31:3d:cc:c5:bd:f2:7c:
a2:2c:68:b5:ca:69:81:1e:9e:07:d1:b5:93:13:1d:35:a5:21:
0c:6b:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org