Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/lKwpgjW8tDvaPJpD4PH2KLfvVWk.roa
File: lKwpgjW8tDvaPJpD4PH2KLfvVWk.roa (raw, json)
Hash identifier: OE+ytPGxHIqZXBuc3v9oY5VI0SAEEgucH8QLAVz2oqs=
Subject key identifier: 94:AC:29:82:35:BC:B4:3B:DA:3C:9A:43:E0:F1:F6:28:B7:EF:55:69
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0869
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/lKwpgjW8tDvaPJpD4PH2KLfvVWk.roa
Signing time: Wed 14 Jun 2023 08:54:06 +0000
ROA not before: Wed 14 Jun 2023 08:54:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2153 (0x869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 08:54:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=94AC298235BCB43BDA3C9A43E0F1F628B7EF5569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:ad:d0:e4:98:43:b1:0a:4e:7e:a0:d0:6e:
35:19:02:1f:de:60:0c:8f:5d:4f:14:0f:7e:c4:f1:
37:fc:c9:70:4f:e7:4d:8d:4b:30:d6:13:ea:d0:c1:
ff:03:23:b8:fe:b2:e6:2a:56:b9:cf:cf:d0:a6:58:
b7:05:0f:f5:33:a3:06:fb:78:7b:85:83:22:dc:12:
35:cd:a3:3a:eb:b1:af:b0:85:91:e9:55:49:27:74:
e8:63:ae:d5:3a:31:89:69:2b:65:53:0f:59:1a:30:
af:51:01:9e:38:77:e4:b4:39:50:8e:64:8e:68:e4:
a3:0a:c7:4d:02:53:a0:61:37:48:82:ad:da:d8:12:
73:bd:eb:76:84:55:f1:cb:68:f7:99:07:33:e2:8f:
31:55:1c:25:17:47:fe:e2:6c:04:cd:b6:77:64:48:
56:31:17:4e:3d:db:b7:34:02:e7:12:0b:1a:3e:0a:
9a:20:be:c0:8e:30:aa:73:09:82:44:54:7f:b0:ae:
ec:cb:0a:90:10:3b:96:1c:f8:de:b6:65:02:e9:a4:
58:34:83:39:d0:81:ac:56:b5:d1:0c:65:f1:50:04:
52:e8:74:0e:ff:b8:f6:6d:1a:17:f4:96:8c:f1:9a:
86:b6:19:f8:f0:52:53:61:06:cc:a4:ad:dd:9a:9a:
d1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AC:29:82:35:BC:B4:3B:DA:3C:9A:43:E0:F1:F6:28:B7:EF:55:69
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/lKwpgjW8tDvaPJpD4PH2KLfvVWk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
64:bc:9f:05:c0:cd:b2:0c:a3:13:f4:92:ec:42:e7:1b:f8:60:
52:ec:c0:57:fd:02:17:9a:aa:e2:59:76:e6:ae:35:aa:8a:36:
1f:25:f9:35:04:03:5e:a1:6b:fb:77:7e:df:2c:b2:cc:94:b9:
99:51:b0:58:96:d5:65:8f:e9:c2:1f:fc:79:55:69:46:33:79:
35:6a:79:45:cb:1e:14:80:0f:aa:c0:c6:b1:92:cd:0d:b0:bd:
4c:c9:c5:12:36:24:cb:a2:d8:93:fc:e8:83:c8:e6:c7:f0:05:
94:ef:2b:69:12:ec:22:d6:b0:da:24:64:37:bd:dc:78:49:b2:
e7:b6:e8:1c:29:7d:34:3e:f5:c7:d4:ca:90:e8:70:1e:f1:63:
d4:72:9f:53:4f:94:4c:e8:95:85:c3:37:f9:06:bd:af:da:1d:
55:0e:3c:4e:58:65:0b:70:3a:89:a3:dd:ee:32:35:d5:32:be:
0b:83:18:f9:a6:97:77:d3:3e:8e:5d:f6:45:58:bb:c9:a4:20:
a3:a9:d3:54:22:2c:54:ae:16:94:eb:52:f9:8e:27:5b:a9:0b:
01:19:f4:09:f7:b2:cc:7c:88:0e:03:64:06:4d:e7:ca:34:96:
8d:5c:4c:e6:91:bd:22:87:1f:0a:3f:08:2c:a2:2f:b6:43:0d:
c4:c6:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org