Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/hFDyxud-GLEkzDhClgTd0Rsa_1M.roa
File: hFDyxud-GLEkzDhClgTd0Rsa_1M.roa (raw, json)
Hash identifier: TyuaMH8l1nuGgExLru4ygjW2h03x5otexBhkuZXjTKQ=
Subject key identifier: 84:50:F2:C6:E7:7E:18:B1:24:CC:38:42:96:04:DD:D1:1B:1A:FF:53
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08A9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/hFDyxud-GLEkzDhClgTd0Rsa_1M.roa
Signing time: Wed 14 Jun 2023 16:54:04 +0000
ROA not before: Wed 14 Jun 2023 16:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2217 (0x8a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 16:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=8450F2C6E77E18B124CC38429604DDD11B1AFF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:57:9d:cd:91:cf:bf:ea:36:34:a3:37:82:7c:
d0:42:df:f4:d6:3e:f9:51:23:45:b3:8f:b1:74:ab:
8c:98:bf:50:b6:0a:81:bb:50:9e:e3:fd:19:af:95:
ee:f7:a5:fc:60:2e:0a:1f:eb:72:7c:4a:ea:ab:73:
6e:e9:8d:31:2a:f1:f9:72:15:77:42:d0:54:66:3d:
1e:3d:c7:19:0c:0a:34:75:dd:54:68:07:aa:58:1d:
eb:f8:70:7c:04:7c:c9:f5:80:ad:48:4a:e4:54:40:
cd:64:96:c4:78:c6:1c:85:e5:19:ce:88:9b:3a:a4:
c1:48:e2:6d:11:2a:9f:0e:e2:9f:a1:3e:aa:b0:5b:
5a:28:63:5a:04:39:1a:ee:c1:7a:96:fa:08:b7:6c:
29:ba:0a:86:55:84:bb:58:88:b7:b2:40:f4:35:a0:
4f:2e:50:b3:6f:38:1c:0d:d2:95:5d:ba:d0:f4:6b:
3d:ca:1b:8b:b1:9d:16:33:c5:35:24:19:8c:f5:38:
f6:cb:76:43:7d:03:65:c0:01:ce:40:dd:46:37:96:
9d:79:9e:bc:6a:b7:f0:7b:27:33:6b:d8:9d:e2:31:
65:82:1b:85:49:40:6d:67:3d:8a:48:f3:d8:22:3e:
58:ae:f7:bd:5f:b8:67:01:6f:17:fd:01:52:ce:e8:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:F2:C6:E7:7E:18:B1:24:CC:38:42:96:04:DD:D1:1B:1A:FF:53
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/hFDyxud-GLEkzDhClgTd0Rsa_1M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:2b:0e:f3:1e:c3:45:a2:df:78:87:8e:98:b6:b2:66:04:9c:
00:fc:6a:65:9c:74:16:59:5b:72:a7:c4:dc:f2:fe:81:de:b1:
f0:85:fb:f9:4f:aa:99:ae:0e:79:8b:05:25:aa:c6:08:fb:70:
e2:bb:d3:be:25:d9:5e:6c:14:29:1d:2d:57:c0:f8:69:d2:8e:
e2:55:52:9d:5e:c9:3a:18:f9:0b:91:49:bf:77:aa:e6:48:6c:
10:0a:79:1e:16:44:0f:b6:07:69:de:9b:43:12:cf:b9:11:25:
4d:17:36:91:e8:5b:89:3a:1a:3c:b8:cd:ad:da:fa:71:c3:06:
e6:62:a2:e8:aa:ec:e3:ea:6e:0c:cf:f7:5a:94:05:3b:1f:4e:
3a:60:88:98:ae:05:84:47:28:62:aa:a4:b3:79:08:19:bf:8f:
12:57:f4:fc:38:5f:a9:6b:a5:4c:bb:02:b8:ea:4a:c6:0b:3c:
2b:e0:9c:e3:41:02:1f:cc:0d:ea:fb:b6:fb:f4:53:97:18:b4:
b8:3c:a9:c9:a5:ac:d8:5e:e9:6b:c8:93:24:55:04:fb:b1:03:
31:0a:af:92:3e:63:35:ec:8e:52:9a:0b:da:60:4e:6b:fe:2d:
f3:03:60:8e:95:85:af:3c:b8:3e:33:7f:65:55:bb:3d:6d:cf:
a4:dc:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org