Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/fgWmwk_OfjCbvIc-TMhROTUpRjU.roa
File: fgWmwk_OfjCbvIc-TMhROTUpRjU.roa (raw, json)
Hash identifier: PX+aUbr1ugoiVXEznqO3aehWnYvAD+rL5JyncsX9AXo=
Subject key identifier: 7E:05:A6:C2:4F:CE:7E:30:9B:BC:87:3E:4C:C8:51:39:35:29:46:35
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08F5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/fgWmwk_OfjCbvIc-TMhROTUpRjU.roa
Signing time: Thu 15 Jun 2023 02:24:06 +0000
ROA not before: Thu 15 Jun 2023 02:24:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 02:24:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=7E05A6C24FCE7E309BBC873E4CC8513935294635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:a4:25:55:8c:fd:fc:c5:28:6c:8a:c0:77:
be:5a:d1:7a:15:9c:28:b5:51:49:1a:15:54:2e:f3:
85:36:fc:a6:38:60:f4:14:d5:6b:e3:f1:23:f3:86:
e0:a7:e6:a9:37:e6:33:e9:60:1e:35:71:f6:9f:7e:
94:ba:18:53:dd:a4:8a:72:be:2d:28:55:af:a1:b3:
b7:6c:54:ce:bc:fd:85:2e:75:47:5a:d7:19:26:90:
b5:58:ac:74:0f:56:83:f1:ec:de:7b:3f:c6:5e:21:
44:10:83:d3:f4:91:a0:66:07:8e:8c:7e:97:cd:98:
00:6f:b9:0f:7d:09:61:26:65:b0:05:af:df:d5:ae:
8c:8d:2b:64:fb:57:08:c4:8a:52:5e:a3:b5:0e:7c:
a4:0b:91:fe:ed:e4:4d:4e:00:42:dd:d5:3b:8b:32:
ea:de:b4:1b:44:2a:e2:05:f0:29:99:f5:c1:2c:21:
13:80:09:c4:07:e9:06:28:b1:5b:00:15:9e:e7:7d:
c7:33:24:a4:df:50:54:70:67:27:a3:6b:f0:06:25:
8c:18:2b:68:76:08:69:f3:5f:a4:b6:c4:7d:bc:49:
10:ec:6d:e6:69:20:99:2e:e7:5f:75:47:32:ea:2a:
29:f5:0e:8d:16:f5:74:b0:7e:ef:44:9b:8f:9e:d7:
d9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:05:A6:C2:4F:CE:7E:30:9B:BC:87:3E:4C:C8:51:39:35:29:46:35
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/fgWmwk_OfjCbvIc-TMhROTUpRjU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:3e:29:fd:0f:a8:ab:71:e9:92:58:bc:7d:bb:73:a3:d9:03:
fa:27:ee:d4:fe:f5:81:5d:1d:9b:e4:a5:5e:b2:8d:64:9d:64:
39:08:3a:2c:9b:4b:f2:0e:08:ee:cc:4d:06:30:27:05:70:6e:
fe:a2:f9:7a:21:d0:b2:ff:34:f7:a4:a3:16:4b:39:5e:7c:f0:
d0:f0:8a:eb:2b:dd:9e:5c:38:f5:08:a6:26:6d:dd:a0:ae:2b:
8f:d4:f2:0f:db:bb:48:e0:16:4b:a1:be:69:f0:c9:86:d1:22:
40:6e:c1:40:3c:54:cb:a9:06:1f:03:f1:f7:8d:10:6b:d7:4e:
b5:28:26:75:8d:d7:d1:9d:d2:c8:59:43:7f:03:3f:b5:65:de:
c1:d8:ed:98:38:1c:b3:41:0d:62:a4:9a:a3:b2:5a:3a:1e:ad:
1e:59:52:58:f2:31:7d:48:06:e1:57:71:d1:aa:f9:59:f4:9c:
ab:9b:e8:c1:99:3c:35:ca:be:bd:dd:dd:49:d6:ee:46:31:76:
ec:69:56:36:1f:e8:1c:75:35:7b:7a:80:92:77:b1:96:07:0a:
5c:0f:41:0c:0e:bf:5c:90:db:46:f1:ab:44:1a:ad:d3:47:da:
a3:9a:48:ff:3e:96:fe:c7:ed:99:cc:65:4a:e5:9a:36:ff:a4:
65:f0:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org