Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/kTvB6g1Ca3Zf5ZGVV7iaFQe3raU.roa
File: kTvB6g1Ca3Zf5ZGVV7iaFQe3raU.roa (raw, json)
Hash identifier: LVIGnbaIL17mb2ZeOHS1dHsR5tFhC20Qr3zltL11rls=
Subject key identifier: 91:3B:C1:EA:0D:42:6B:76:5F:E5:91:95:57:B8:9A:15:07:B7:AD:A5
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0885
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/kTvB6g1Ca3Zf5ZGVV7iaFQe3raU.roa
Signing time: Wed 14 Jun 2023 12:24:05 +0000
ROA not before: Wed 14 Jun 2023 12:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 12:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=913BC1EA0D426B765FE5919557B89A1507B7ADA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:ed:6a:74:dd:60:8b:e3:d3:3c:b2:98:a4:
0c:67:7b:65:d2:71:4f:bf:7d:8e:36:d6:e4:f1:b8:
2e:b0:ac:e1:a0:48:96:13:67:23:fe:b9:a2:d2:6e:
e5:9e:62:bf:65:87:e4:72:45:b0:93:0a:ed:7a:78:
8d:16:72:16:f1:fa:97:87:cc:06:b3:a1:00:41:d5:
3c:27:f8:44:2f:2f:07:32:0c:37:23:6d:a3:a7:0f:
2f:d8:6e:ec:e2:de:e2:f6:9a:dd:24:4c:14:8b:da:
17:ff:41:91:05:a2:c4:92:bd:94:b4:d4:39:67:da:
20:36:cf:91:3e:f2:6c:c1:4d:b4:8d:58:bf:66:17:
6d:46:d8:a6:b4:59:58:90:8e:4b:42:ee:87:91:ae:
bb:2b:2d:fe:40:99:14:10:dd:6a:5d:29:ce:ba:30:
96:f9:47:11:f0:1e:9f:2c:b6:9d:29:11:c2:e9:22:
f1:ae:79:48:b7:fd:89:94:d9:9e:4f:e4:fe:01:7a:
ea:ed:f5:c0:4e:3b:64:cc:09:e9:bb:23:48:24:36:
d9:14:fe:59:69:7a:42:37:aa:57:fd:ea:8b:57:83:
18:56:1e:b6:6b:d8:53:7b:61:bf:39:03:25:82:de:
3a:44:b6:8d:a0:63:80:c2:a8:5e:c6:86:79:a2:d2:
95:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3B:C1:EA:0D:42:6B:76:5F:E5:91:95:57:B8:9A:15:07:B7:AD:A5
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/kTvB6g1Ca3Zf5ZGVV7iaFQe3raU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:29:88:18:8d:4e:7a:55:73:09:82:eb:f0:e7:13:27:c9:f9:
74:53:20:b1:9e:c0:4a:74:14:d9:38:6a:db:2c:b7:22:b3:c8:
ac:90:95:30:80:b3:36:53:d0:a1:21:e5:7d:90:19:63:fc:3f:
3f:47:83:84:a7:a1:eb:06:6f:4d:bc:65:fb:b6:15:e9:ec:4c:
d4:88:fb:fa:f8:f4:9f:cc:a2:b0:b1:f9:3f:4e:61:1e:ed:a6:
20:0a:13:2f:1c:79:a7:6b:b3:3e:4a:ac:66:29:25:79:79:71:
ec:af:1b:d0:52:eb:20:77:42:cb:db:61:61:4f:08:af:aa:ca:
82:ae:9e:be:ce:0d:8a:27:c4:f1:96:d4:6d:6d:57:d6:02:e1:
5e:12:fb:24:65:ed:b4:15:a0:9d:68:ad:d1:47:3c:60:8f:89:
db:9e:f7:9c:2a:5b:c9:0b:1e:8e:8f:e8:ca:f5:81:9e:5a:cb:
22:e2:b1:15:d2:18:01:5b:9f:df:6f:9f:05:bf:37:e9:75:cd:
49:7c:b9:c9:1e:68:b8:d0:90:39:a8:e1:8d:d3:02:0b:6c:44:
b4:d6:f6:47:e7:7a:77:f4:fe:12:54:c5:65:96:22:db:8a:ab:
31:55:31:ec:21:1d:97:1d:c6:82:c6:63:e5:e5:d8:9a:5a:50:
2e:b2:fe:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org