Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/geu1HDBKqLESXUaH5RK6JlFwJCA.roa
File: geu1HDBKqLESXUaH5RK6JlFwJCA.roa (raw, json)
Hash identifier: 0uGxfjNBTmVU1HFUgqY6TPYTA5/uSTg6Q3KYwgP08Zs=
Subject key identifier: 81:EB:B5:1C:30:4A:A8:B1:12:5D:46:87:E5:12:BA:26:51:70:24:20
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0811
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/geu1HDBKqLESXUaH5RK6JlFwJCA.roa
Signing time: Tue 13 Jun 2023 21:54:03 +0000
ROA not before: Tue 13 Jun 2023 21:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065 (0x811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 21:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=81EBB51C304AA8B1125D4687E512BA2651702420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:e3:27:80:a6:74:cf:cf:77:7b:08:ca:0e:
e2:e6:42:fb:c1:e3:71:24:7c:a1:e4:cb:7e:a1:f5:
c2:98:67:04:da:f6:f1:2e:81:2b:75:49:66:95:69:
c9:4f:ac:58:fb:48:da:aa:46:99:86:0d:2c:2d:f8:
ae:5a:3d:53:a7:db:dc:28:f6:06:9e:0e:07:7c:03:
6a:30:69:97:9e:14:13:2d:36:84:f5:f6:87:ea:d2:
af:5b:1e:13:fe:a2:f5:fd:7d:92:76:14:8d:19:b4:
3d:ab:9d:80:45:ed:9a:1e:90:03:a3:1d:dd:8b:b1:
2f:05:27:82:52:3d:70:c5:39:64:e6:3c:74:2d:99:
ce:58:db:3a:28:46:c2:3f:31:12:0b:b9:30:ad:36:
bb:b9:c7:0c:c3:70:b2:40:7d:5e:39:5a:e0:f0:05:
8d:9d:dd:02:96:20:d6:f9:a6:02:07:44:3d:fb:87:
3f:ac:b6:4f:27:63:76:e7:ae:a4:9a:15:03:ac:86:
4d:77:a0:94:71:5e:f1:16:39:4f:a4:00:8f:4d:49:
3d:05:a4:be:3f:dc:d4:3d:4c:10:f2:64:54:79:a5:
ed:9a:bc:65:ab:8a:15:f6:c4:8f:0a:fa:c6:d1:c8:
94:c2:32:ca:3a:df:42:7f:28:fe:33:0b:89:f4:06:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EB:B5:1C:30:4A:A8:B1:12:5D:46:87:E5:12:BA:26:51:70:24:20
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/geu1HDBKqLESXUaH5RK6JlFwJCA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:66:94:22:ee:75:f5:3d:dd:cc:34:32:18:46:1b:8b:1e:67:
84:f0:4a:72:10:7b:75:32:7c:8b:47:72:2a:36:f9:b1:ac:48:
bd:a4:e2:02:d9:c8:08:cc:18:11:26:05:c9:ea:76:c9:24:32:
fc:be:26:ca:c1:92:08:6a:57:44:80:19:0a:5f:10:88:6c:df:
4e:de:3b:f7:f7:f2:54:af:50:af:af:50:22:ab:72:d5:12:e9:
c0:19:d3:a2:a4:a5:ac:ba:a6:fa:ad:1d:44:17:e2:fd:38:42:
a2:c3:a2:73:77:aa:41:b2:db:fb:80:1c:44:01:c1:42:a2:e9:
36:88:85:21:dd:6e:ae:44:33:36:cb:fa:29:b7:97:2c:de:9d:
6c:7b:81:2f:cc:14:1c:54:a2:55:77:90:49:5f:f2:19:a4:12:
1d:c3:53:50:8a:a7:d6:6e:b8:6b:9f:86:4c:e7:f0:4d:8a:ff:
fc:86:15:35:26:04:0d:43:14:ed:2b:d7:61:36:06:f7:d1:16:
58:8f:57:89:17:d9:6d:ca:9b:47:5e:8b:5c:f3:8e:c9:5d:41:
51:86:3a:1c:50:bb:8c:4b:ac:3c:20:fe:a0:d2:cc:a9:d0:62:
a5:9c:b7:e9:1f:7c:f5:1c:c5:49:34:d3:b6:36:c1:6d:f1:22:
a8:7a:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org