Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/jQOnymC6E5CzMeEMn-GuZTQQGJ0.roa
File: jQOnymC6E5CzMeEMn-GuZTQQGJ0.roa (raw, json)
Hash identifier: IPlOGb5XkIrTxsVhLgRUwhZnN+5+m82JBe/I9KEHPc8=
Subject key identifier: 8D:03:A7:CA:60:BA:13:90:B3:31:E1:0C:9F:E1:AE:65:34:10:18:9D
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0865
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/jQOnymC6E5CzMeEMn-GuZTQQGJ0.roa
Signing time: Wed 14 Jun 2023 08:24:03 +0000
ROA not before: Wed 14 Jun 2023 08:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149 (0x865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 08:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=8D03A7CA60BA1390B331E10C9FE1AE653410189D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:d1:9b:8b:25:38:a2:13:a1:d0:65:2d:ad:
97:c7:62:d4:5e:8f:6e:87:1f:9e:ef:a7:7e:c0:c8:
b6:16:12:07:dc:db:82:61:53:1f:87:b5:a1:15:6c:
a7:b9:26:9c:56:f9:a5:c3:32:ed:7a:6c:13:25:40:
c9:cf:08:d1:dd:1b:c9:be:a3:8d:68:cd:ae:21:25:
fd:d8:75:32:ce:6c:df:a0:7a:2b:25:1f:06:0a:cf:
92:ca:82:f0:cb:e2:5f:52:77:c6:f5:38:39:cd:f5:
bd:4f:63:c3:aa:c0:ee:d1:fb:22:62:64:fd:63:80:
b7:ec:83:7b:07:22:aa:cd:96:56:2a:43:8b:c8:26:
92:4d:fc:00:83:04:07:6e:9a:96:34:11:d0:ac:87:
8f:9b:59:61:eb:93:d5:ac:73:d8:61:14:af:49:93:
18:8d:48:f6:39:76:56:04:07:2c:45:3f:c9:09:62:
7c:b0:bf:1f:f2:20:3e:4d:51:e5:ae:9b:c8:86:5c:
8c:e5:9b:d1:58:94:17:9f:64:e3:d2:d8:2e:52:2e:
be:82:fa:c4:11:60:9a:95:7b:0b:16:ee:e5:52:38:
06:88:3a:9a:dc:e6:db:80:fe:68:e4:54:fb:6e:f4:
b9:47:27:08:ed:66:2c:7f:61:a8:5f:84:56:9d:73:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:A7:CA:60:BA:13:90:B3:31:E1:0C:9F:E1:AE:65:34:10:18:9D
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/jQOnymC6E5CzMeEMn-GuZTQQGJ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:9a:b7:5f:4c:89:93:72:2d:58:9a:2c:ad:4c:65:36:63:4b:
d6:8d:dd:50:87:e1:6e:41:62:b9:82:11:f4:68:1c:a1:d0:ec:
bb:00:ca:05:fa:80:5d:92:7a:a4:34:f9:34:ec:af:63:e6:8a:
84:66:ff:d7:f2:f2:04:1a:53:77:c9:c9:84:da:d6:fe:2e:40:
9d:73:07:f8:03:36:9b:60:f9:cd:5a:d3:e7:40:03:78:2f:ed:
8c:2c:26:b5:5f:a3:cc:e4:77:1f:9f:f0:b5:04:f7:1c:76:9a:
27:88:c4:1c:6f:8b:40:a6:de:b9:b3:b3:25:f4:b9:07:9f:62:
cb:ac:87:a7:dd:aa:4c:a3:5d:ab:71:71:55:0b:34:f2:25:00:
60:44:6f:bf:fd:a0:c9:4d:2f:80:10:c2:5c:84:f5:e5:60:98:
9a:05:04:3b:59:ef:df:80:ba:a2:7b:d2:8f:73:25:3d:95:dd:
b6:62:a8:33:58:bd:2a:8d:18:ed:f3:6c:f6:74:03:04:c3:ea:
d2:69:76:34:61:a3:5a:ca:63:a8:e3:f3:9b:8f:e9:21:b3:aa:
99:66:fd:98:30:7d:45:80:93:56:ef:44:38:41:2d:a3:e1:b3:
44:51:3b:78:19:24:dd:19:3d:51:0d:49:5d:76:c5:0a:82:b1:
36:45:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org