Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/lU-n4TuqP_8CuwbnYTfnaoKhBZk.roa
File: lU-n4TuqP_8CuwbnYTfnaoKhBZk.roa (raw, json)
Hash identifier: ExS+oZ92TowynwvEobIten81dtirmfUdxoQqKpL6uHc=
Subject key identifier: 95:4F:A7:E1:3B:AA:3F:FF:02:BB:06:E7:61:37:E7:6A:82:A1:05:99
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08FD
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/lU-n4TuqP_8CuwbnYTfnaoKhBZk.roa
Signing time: Thu 15 Jun 2023 03:24:08 +0000
ROA not before: Thu 15 Jun 2023 03:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301 (0x8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 03:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=954FA7E13BAA3FFF02BB06E76137E76A82A10599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:86:a0:68:e6:3d:20:5e:72:76:6c:92:37:
6d:10:64:4a:6a:be:b8:69:b7:7e:c1:92:6f:cd:7a:
0d:4f:fa:d7:e2:d4:95:6d:d9:da:4c:b5:8b:ed:c5:
3a:b7:78:5f:42:ab:9b:b1:85:34:21:85:ea:2f:fe:
82:77:5b:24:ce:1c:a0:aa:18:7c:0b:b1:68:65:4d:
71:5f:9c:ad:9d:ad:db:8a:be:d1:c6:2d:ec:b8:5c:
01:a5:6b:0b:82:80:81:8f:71:60:e4:97:7e:d5:bc:
c5:ef:46:37:f2:ac:c7:01:6f:c8:96:eb:93:b9:2b:
37:98:aa:2f:48:64:a6:67:a9:c5:93:84:ba:f8:47:
32:6b:b2:45:41:a5:a9:65:74:00:a9:a8:db:b7:c4:
9a:6a:8f:34:4f:d8:7f:e4:be:8d:a7:c7:43:cd:ee:
d7:bb:52:19:e1:ab:5f:69:8d:78:98:e1:0c:5d:58:
6f:a0:d7:4f:82:9d:16:20:24:99:b6:bc:2d:73:03:
5a:9b:03:98:53:24:52:26:f0:a9:f3:15:9e:49:f9:
d1:b6:1a:ca:c3:d3:6e:48:b2:8c:7a:91:46:46:08:
e4:cf:a7:63:93:35:ce:a9:ac:5e:a5:ce:84:eb:f0:
93:fe:d7:48:55:31:0f:b9:68:a9:bc:c3:60:38:5d:
e6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4F:A7:E1:3B:AA:3F:FF:02:BB:06:E7:61:37:E7:6A:82:A1:05:99
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/lU-n4TuqP_8CuwbnYTfnaoKhBZk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
58:0f:92:b7:f7:59:71:fe:0d:4f:84:3e:b2:50:75:68:1f:44:
f2:eb:a4:07:56:90:59:75:49:03:5d:81:76:37:45:bc:9c:61:
ce:28:5d:c5:c9:df:b4:fc:09:23:8d:c2:ad:7b:1d:ef:d5:3a:
d4:a5:75:18:19:ea:ee:02:e0:b3:3f:bf:ef:09:34:6e:a1:11:
67:31:01:b5:e3:41:af:53:e2:08:ba:cd:04:d9:1c:f1:34:e6:
4c:0d:ac:53:46:50:af:2a:d6:b9:a8:c5:8d:6d:14:be:0f:40:
fc:c2:15:93:e3:42:d1:df:9e:45:14:e0:5d:83:24:0d:99:3a:
9b:72:f0:20:10:c2:6e:88:4c:66:74:a8:19:4e:4f:03:2b:18:
2f:69:75:8b:94:30:16:dc:e0:23:91:93:63:62:8e:4e:33:3c:
ae:8f:5b:d4:d0:32:f5:c8:b5:64:6b:6c:b6:b0:7d:6a:d0:b3:
81:d5:a2:aa:c6:5d:f3:12:06:ba:69:4b:9d:f8:44:3b:10:d4:
a3:2d:e9:38:61:53:be:88:a6:b6:ec:1f:df:6c:18:da:43:0b:
45:fa:0a:fb:3a:71:e5:54:68:df:88:e4:6b:e4:8e:ed:c5:0f:
11:1a:d9:84:4e:68:fa:22:43:4b:b3:c3:28:7a:ca:00:b2:67:
24:23:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org