Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/gbZShafRaKTjt7ie-vATIs1A0s4.roa
File: gbZShafRaKTjt7ie-vATIs1A0s4.roa (raw, json)
Hash identifier: uzfbKHgs8I/mcj1EKEYpfhqJ47SF7CQnmRgEnPyMbM8=
Subject key identifier: 81:B6:52:85:A7:D1:68:A4:E3:B7:B8:9E:FA:F0:13:22:CD:40:D2:CE
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0849
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/gbZShafRaKTjt7ie-vATIs1A0s4.roa
Signing time: Wed 14 Jun 2023 04:54:03 +0000
ROA not before: Wed 14 Jun 2023 04:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 04:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=81B65285A7D168A4E3B7B89EFAF01322CD40D2CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:f4:a7:a7:55:f0:4e:ea:93:8d:2f:8f:37:
78:26:a7:a8:ca:bc:63:9b:b4:f0:a9:20:39:d8:8e:
7d:2d:4c:1c:10:fe:f0:e6:d0:9a:a8:ac:39:0e:74:
33:52:08:d9:26:c0:7e:b2:43:97:86:9c:72:22:48:
fd:96:14:b6:93:46:53:93:97:19:3b:75:4a:33:fb:
1e:29:15:00:09:2a:89:3c:f1:e2:0e:27:84:92:c6:
57:0f:fd:30:ea:2f:26:3e:99:6c:0a:de:c9:3f:8d:
1d:1f:22:dc:3a:07:03:e1:83:b7:76:c1:ef:00:11:
37:b4:37:1e:b4:a1:9e:d9:8d:39:9a:80:f1:e6:72:
74:18:d0:ad:0d:8c:13:f5:cf:08:b4:17:38:ef:7b:
bd:18:a9:66:66:75:de:38:83:fd:cc:0a:f3:5b:4c:
3b:fa:18:d7:61:55:82:a6:4b:bd:a0:1c:a2:2b:98:
ee:dc:80:2e:15:f8:c7:74:36:b8:ba:9c:80:e8:05:
48:0a:11:dc:9b:14:84:f8:4c:88:8f:6b:ce:08:e8:
30:e0:60:c5:bc:48:ab:21:6c:40:8d:55:9e:2f:35:
b4:0b:2a:19:f5:3c:71:6e:d9:05:0e:eb:1b:e9:99:
3a:54:55:ce:73:e2:73:60:1d:5f:ff:4e:4d:9b:b5:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B6:52:85:A7:D1:68:A4:E3:B7:B8:9E:FA:F0:13:22:CD:40:D2:CE
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/gbZShafRaKTjt7ie-vATIs1A0s4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
19:78:47:4e:02:c6:f5:92:e1:cf:6e:91:cc:d6:61:56:f6:ab:
2f:99:ab:ef:a0:46:5f:a7:ff:16:cb:83:0e:84:04:11:d8:b7:
82:04:32:fb:65:00:2b:b3:f8:39:b9:00:e0:46:87:8a:eb:27:
24:ba:54:5d:2f:5c:08:e1:e5:4e:74:73:7f:47:4e:9c:10:48:
70:f6:55:52:5e:5c:ad:c7:77:05:d1:82:f1:cf:ce:43:6b:52:
ce:e4:be:53:cc:d2:04:ae:af:98:36:28:85:33:9f:0c:78:e6:
20:39:53:a1:71:d2:81:2d:cc:bf:17:1f:5a:d6:09:4d:50:da:
ea:cb:97:66:2f:5a:73:74:73:9c:27:79:4d:69:0d:22:5b:b7:
fe:6a:3e:e7:09:31:1b:c3:00:b3:a5:a8:e4:8a:00:12:81:c7:
f6:66:10:9b:b9:8b:cd:17:a6:40:d3:10:50:3c:54:a5:f6:8e:
b7:71:ff:b3:ee:39:9d:c1:25:11:71:73:1e:ba:62:e5:7d:34:
30:63:19:05:ab:bf:28:4a:c2:d6:88:ba:7d:38:9b:76:7e:db:
78:08:3f:14:08:12:a0:c7:ca:96:c8:ac:1a:8f:3d:29:2a:29:
87:77:51:33:8e:9c:91:80:f8:fd:6c:5a:75:f1:2b:8a:bb:50:
73:06:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org