Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/kNaI9sFECsohWiaRkVFI4dwktsw.roa
File: kNaI9sFECsohWiaRkVFI4dwktsw.roa (raw, json)
Hash identifier: pKp5BnBQfS9jnj5hRmuycBSkB16cWjvTtgbwnml3Y1o=
Subject key identifier: 90:D6:88:F6:C1:44:0A:CA:21:5A:26:91:91:51:48:E1:DC:24:B6:CC
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08ED
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/kNaI9sFECsohWiaRkVFI4dwktsw.roa
Signing time: Thu 15 Jun 2023 01:24:15 +0000
ROA not before: Thu 15 Jun 2023 01:24:15 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285 (0x8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 01:24:15 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=90D688F6C1440ACA215A2691915148E1DC24B6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:30:b2:91:83:69:ca:70:15:a6:9b:a3:f1:
6d:63:45:93:6f:0f:03:cd:a5:3f:e0:d1:f0:09:4b:
51:19:3c:09:ae:90:eb:ff:38:18:c6:14:7a:c4:84:
a5:3b:ef:5e:1f:56:f0:00:e1:3c:5a:70:0a:34:1d:
ff:83:59:f2:0e:28:27:9e:52:b6:3b:5d:48:29:cc:
46:cd:1a:98:42:5d:b6:ad:b0:74:66:f3:9c:cf:a7:
84:96:1b:3f:15:58:ca:70:24:66:49:ee:42:d4:7e:
c9:d2:59:59:6b:09:25:50:ee:53:65:95:56:29:13:
32:5b:e2:50:6d:70:9e:da:41:5e:7d:d4:33:9c:c6:
c0:2b:20:30:44:38:b7:ca:e6:e8:1f:ef:27:08:61:
f8:9e:90:b6:b0:54:93:74:99:fc:9b:5a:52:d6:16:
45:ce:73:0b:aa:a4:21:cd:79:c9:ea:b7:ae:41:b4:
7e:5f:08:a7:79:ed:58:e8:f4:0d:cf:c7:1b:ac:e2:
7c:f3:5c:0d:18:05:69:a3:88:66:42:bd:c5:fe:91:
bf:ab:6d:e5:5c:e3:3a:f8:a8:ad:cd:c7:36:e9:90:
10:d9:7e:45:1d:9b:14:e1:a2:d3:2e:99:47:03:8b:
67:5a:69:35:38:b0:04:0a:4b:2a:d0:95:e9:a8:e6:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D6:88:F6:C1:44:0A:CA:21:5A:26:91:91:51:48:E1:DC:24:B6:CC
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/kNaI9sFECsohWiaRkVFI4dwktsw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
53:84:08:77:92:58:d7:dd:d4:4e:2f:9f:80:09:dd:92:0f:9f:
6b:01:2e:23:05:04:a5:e2:c3:10:40:a6:eb:22:3f:9a:49:f3:
70:3f:b0:93:42:ce:36:30:0e:53:72:fd:4e:d2:7b:fa:18:27:
eb:f5:80:6f:49:69:d3:eb:d3:20:2c:35:11:c9:d1:8e:11:a2:
f4:91:24:06:43:b5:7a:4f:00:36:09:f8:39:8d:37:ca:03:7b:
02:a7:95:a3:dc:5c:53:5b:93:8e:bc:20:19:de:1d:bb:5c:d9:
57:87:c8:13:6a:5d:75:6e:93:04:ae:94:4d:9a:cd:97:ac:fd:
40:34:12:5d:de:cb:37:ff:8c:bb:50:8f:65:19:d2:d2:a7:c2:
2d:55:94:75:1a:ea:75:c9:5f:88:f1:a7:98:a2:b8:1a:71:63:
90:1b:ec:81:97:95:62:4c:31:f3:b0:57:0b:8f:a2:f7:1d:0f:
12:a3:70:34:30:eb:69:36:a3:f6:36:c3:08:5d:43:21:c4:d3:
3d:7f:e1:0e:53:72:05:e7:fc:04:36:20:fa:b0:19:8d:e6:a8:
c4:b2:73:ce:1b:12:e1:14:71:3f:0d:b0:b8:59:e4:a7:d9:48:
d2:ae:80:93:7b:99:b9:5d:6c:83:f5:9b:e0:98:d9:52:ea:46:
ab:12:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org