Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/jmsxoNF3cetvdlW77cFfZVh0tUI.roa
File: jmsxoNF3cetvdlW77cFfZVh0tUI.roa (raw, json)
Hash identifier: 3HfC6BUozOM5GivKlELetTf/aEMiF5ygXCixGtoOqwQ=
Subject key identifier: 8E:6B:31:A0:D1:77:71:EB:6F:76:55:BB:ED:C1:5F:65:58:74:B5:42
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 085D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/jmsxoNF3cetvdlW77cFfZVh0tUI.roa
Signing time: Wed 14 Jun 2023 07:24:02 +0000
ROA not before: Wed 14 Jun 2023 07:24:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 07:24:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=8E6B31A0D17771EB6F7655BBEDC15F655874B542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:d8:9a:63:1c:50:65:0c:4e:59:e0:fa:1e:
ad:b3:dd:66:ad:fe:27:d9:9e:b2:00:3c:7c:94:3a:
fd:67:96:cd:cf:d0:ef:21:b0:58:3a:62:33:ae:7c:
41:31:ba:2c:0c:bb:b7:30:9c:b1:a6:00:ef:a1:05:
d3:15:6e:21:63:ff:d1:4f:ad:5d:a5:c4:23:20:92:
73:65:dc:d3:fa:b4:71:68:d8:79:2d:37:55:ee:f0:
8d:69:95:76:24:f7:61:fd:ed:4f:86:43:5d:0d:7c:
78:9a:90:c1:53:36:a3:a5:01:f8:64:e6:41:6d:6e:
16:14:63:fb:fd:de:43:30:00:95:37:f3:ed:46:b3:
a4:75:a5:c5:dc:a8:f2:dc:98:96:54:71:da:cc:fc:
ef:6e:97:46:7f:c6:73:4b:8a:6b:46:c8:cc:5e:72:
bd:1e:9e:d3:28:a4:e7:65:ce:c5:3e:b0:c6:ee:14:
eb:3d:af:69:75:a2:f4:3f:a3:53:92:34:e2:e9:27:
68:a8:6b:06:32:76:7f:08:80:aa:84:cf:be:62:8f:
e2:c2:57:3f:13:9b:be:cc:d0:5e:4b:a8:c8:de:fb:
02:76:94:20:09:54:8d:d9:f6:66:8d:24:45:3f:9f:
92:db:cd:83:cf:1b:8b:cc:c2:28:f6:ab:8d:be:70:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6B:31:A0:D1:77:71:EB:6F:76:55:BB:ED:C1:5F:65:58:74:B5:42
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/jmsxoNF3cetvdlW77cFfZVh0tUI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
65:5a:52:6a:04:da:5a:b5:0b:d6:fa:cf:ea:6d:70:e1:62:c1:
d3:1e:e9:cd:5e:1e:c2:f4:fe:1e:fb:24:22:7f:9b:cd:05:ea:
8d:51:99:c5:d9:d7:17:ec:58:37:fc:54:cb:35:cd:6a:d1:6e:
1f:7e:15:5d:63:f5:f7:30:db:f0:ec:ff:30:58:0c:10:51:de:
5f:67:98:f2:33:84:32:17:29:96:18:72:79:25:08:69:a6:b8:
98:0c:23:fc:75:d1:17:6d:82:53:a0:c7:d9:3f:ec:a6:44:68:
18:c3:14:ca:c3:6f:b6:fd:bc:86:77:c4:7c:53:e9:93:fe:01:
37:4f:9e:4e:d4:3f:fd:3f:d0:9f:89:b0:f0:91:88:25:3c:82:
76:aa:61:22:b2:d2:22:53:f3:27:74:4a:4a:c2:09:4e:27:bd:
0c:36:40:b7:fb:07:c0:f5:55:63:2e:b9:6e:41:1d:66:f5:bd:
94:52:44:f9:aa:fc:4d:75:34:5d:b3:66:a1:c4:04:10:e0:6b:
09:03:1b:84:31:d7:66:c7:59:38:b1:24:fc:9d:23:e2:ee:c6:
d8:be:40:2a:e6:f2:ca:b7:9e:f1:ba:8f:8b:6a:9c:f1:41:38:
3e:6b:22:ea:f6:91:6f:88:ce:d6:bd:59:0e:54:bc:6b:80:0e:
68:2f:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org