Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/hYqDdhEExI-_hrdy1X8PdlQ5qjw.roa
File: hYqDdhEExI-_hrdy1X8PdlQ5qjw.roa (raw, json)
Hash identifier: eVZzK3JZxeEy7Yy3gUnH+His5dgbvm2/KazYoCmPubA=
Subject key identifier: 85:8A:83:76:11:04:C4:8F:BF:86:B7:72:D5:7F:0F:76:54:39:AA:3C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07BD
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/hYqDdhEExI-_hrdy1X8PdlQ5qjw.roa
Signing time: Tue 13 Jun 2023 11:24:11 +0000
ROA not before: Tue 13 Jun 2023 11:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1981 (0x7bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 11:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=858A83761104C48FBF86B772D57F0F765439AA3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:39:1a:30:56:35:5a:eb:14:80:7c:c2:cd:
6e:24:18:fc:e1:86:00:4c:6c:49:7c:a2:86:61:c6:
c6:b1:f9:65:98:7e:77:74:a2:3f:2d:2d:be:12:58:
87:69:84:1a:3a:a4:34:45:2d:ed:8c:43:c5:18:50:
ec:bd:ed:63:65:27:6a:1a:73:a1:3f:7e:91:90:db:
a1:ac:22:77:71:19:00:c8:14:d4:2b:f5:4a:b4:96:
7d:62:11:ff:44:9c:ce:0c:d0:c1:76:0a:95:cd:e0:
9e:3f:33:25:53:8c:77:f1:4c:73:4d:25:54:98:9e:
71:b7:c4:19:48:d9:d0:3c:d9:b4:68:94:39:cc:2c:
60:6a:5d:5d:bf:2d:5f:47:33:41:47:f3:8d:7b:4d:
23:5a:6c:23:44:5a:7a:5a:9c:8b:14:82:e2:66:6e:
9f:67:04:b9:15:91:b5:11:82:31:f2:49:2c:df:c3:
42:63:4b:c5:ba:d1:13:bc:1a:16:88:32:4a:cc:07:
e3:c2:6f:f1:c6:8b:b8:b4:63:99:8e:34:88:bd:e7:
6a:f1:71:23:db:ef:94:f7:c6:7f:25:1e:ad:b9:6b:
fe:ef:e8:ef:bc:42:49:c5:7d:a3:f7:29:5b:5a:ad:
82:90:c3:44:57:3e:20:26:53:f8:c3:5f:e5:74:b5:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8A:83:76:11:04:C4:8F:BF:86:B7:72:D5:7F:0F:76:54:39:AA:3C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/hYqDdhEExI-_hrdy1X8PdlQ5qjw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
94:a6:34:bc:2a:39:67:db:e4:b4:7d:e4:35:db:20:48:5a:af:
bc:9e:74:61:4a:bd:68:aa:64:ca:9b:a5:09:d1:d7:3d:0e:20:
cc:f4:f0:43:bd:41:2a:ae:8b:43:43:c7:63:a3:91:2b:c9:9b:
45:c0:98:ab:93:d5:fe:ef:27:83:05:2d:5a:11:85:af:f3:ff:
20:43:48:3f:73:56:47:26:7c:1a:6a:c9:a5:c0:5f:c3:f7:fb:
02:fa:c0:30:57:ec:d2:50:be:11:5f:db:ef:10:28:67:dc:a1:
5d:8c:d4:18:5d:dc:2d:47:6f:a9:ea:c4:d8:6e:70:19:97:7c:
88:54:bb:32:e8:2a:06:b0:4e:a7:84:2f:35:c3:bc:8d:b5:29:
a5:36:4b:ca:b1:6a:ab:3c:66:d7:41:8f:1b:13:d0:a5:42:58:
ab:7c:e8:1b:ca:3f:07:cf:ce:6e:45:d6:aa:c5:50:59:b9:17:
eb:0c:b1:55:0e:76:60:6e:35:d6:dd:90:09:ca:8d:30:cc:de:
2c:57:46:9e:18:ed:3e:a4:f2:e6:2c:ca:e3:14:c5:84:a7:39:
93:41:1d:c1:75:56:bc:76:54:5c:c6:7c:00:84:73:6b:1c:9d:
8a:ef:8d:3f:21:88:da:68:47:a4:30:6e:f7:6a:d8:28:96:86:
da:29:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org