Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/idKs_bfXGcEQPzlCmAla0gVK8HY.roa
File: idKs_bfXGcEQPzlCmAla0gVK8HY.roa (raw, json)
Hash identifier: 3mqZR7TyX75hExUWDS1l3oDeqX1YG/Y4sPQ47LHrVAQ=
Subject key identifier: 89:D2:AC:FD:B7:D7:19:C1:10:3F:39:42:98:09:5A:D2:05:4A:F0:76
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08B9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/idKs_bfXGcEQPzlCmAla0gVK8HY.roa
Signing time: Wed 14 Jun 2023 18:54:05 +0000
ROA not before: Wed 14 Jun 2023 18:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 18:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=89D2ACFDB7D719C1103F394298095AD2054AF076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:7b:10:13:eb:58:63:10:6a:1a:0e:11:c4:
89:01:9b:57:52:aa:ac:df:d7:a6:35:29:ff:cc:60:
7f:56:05:ba:d9:49:87:f9:e5:2a:72:73:e7:90:95:
48:be:5f:52:26:76:d8:34:45:69:19:9f:85:9d:c3:
31:ce:ac:64:9b:7a:d1:e4:41:25:d0:e8:0a:49:8c:
81:3a:49:76:8c:d4:6b:3e:1b:2e:02:5f:df:ac:2f:
0e:43:77:46:8a:ce:e0:61:8a:48:ab:3f:fd:9d:40:
ab:db:6c:b8:3a:52:50:99:a4:9e:16:e0:ed:84:3b:
b0:25:7b:ed:cf:69:08:70:b1:dc:c9:5a:4c:da:24:
2b:73:88:b8:fb:6e:ed:93:90:88:df:4d:24:c9:f9:
ab:cb:33:e4:6f:1c:ac:88:4f:ea:f1:17:91:84:ec:
03:df:ae:c5:ff:4f:47:49:e4:29:e2:ba:97:80:f9:
af:d6:13:21:61:cf:d2:c0:15:f2:fe:36:c3:60:33:
d7:b8:8d:53:42:60:57:a0:9e:09:bb:91:2e:77:e3:
a2:11:49:6f:96:73:99:15:db:66:df:fc:8e:d7:66:
06:4e:f1:da:15:e8:43:1c:24:52:bc:99:3d:ef:86:
ff:6a:71:25:fc:01:61:25:06:c2:99:54:7e:b9:f1:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D2:AC:FD:B7:D7:19:C1:10:3F:39:42:98:09:5A:D2:05:4A:F0:76
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/idKs_bfXGcEQPzlCmAla0gVK8HY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:d0:87:d5:80:a7:3b:21:43:f6:33:88:e7:6f:59:09:3b:f8:
ae:c7:4e:bc:f2:9a:b7:86:9c:70:30:32:e7:6a:7a:aa:2b:ce:
47:69:b1:a3:65:6c:96:04:fd:3c:e7:c4:ae:de:4f:98:66:91:
40:bd:34:d1:81:9e:41:c1:f5:b1:8c:83:cb:d5:4e:c8:3f:25:
88:ff:9e:bd:3a:13:bb:e7:af:bf:0b:83:fe:79:cb:f2:1f:3f:
98:47:ca:3c:15:b6:aa:ce:11:37:e7:44:0b:4d:bc:a4:b8:38:
fc:ee:84:56:9a:82:43:3b:17:ba:7c:7d:e2:e8:11:40:23:2b:
ec:30:87:48:a7:46:f1:d1:47:44:00:57:81:38:67:c1:a0:5d:
61:42:02:f7:a1:97:96:ad:4e:da:98:b3:d2:36:6c:0c:3b:2d:
c1:87:50:6d:47:1a:6f:8f:4f:2c:c5:1a:b4:d0:3f:50:b1:96:
e8:68:7d:77:2f:e5:ab:c1:d3:2b:d5:e9:be:eb:c9:d1:51:d6:
e2:f4:5b:3f:e3:7c:ab:94:21:e2:87:78:50:a2:68:c9:ca:9a:
35:c5:07:55:52:2d:07:cc:5a:70:04:61:cc:40:ec:27:c4:f0:
a5:e0:3f:14:e9:16:76:aa:c8:f4:77:48:d8:c2:f0:4b:68:58:
6e:ce:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org