Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/m3Gtdt_9y_0bVJVM0pV2_DNc9oQ.roa
File: m3Gtdt_9y_0bVJVM0pV2_DNc9oQ.roa (raw, json)
Hash identifier: Dl7OgPT+JfNz87FH2oOEiyHrqP8yiU6GJQEVTFvpli4=
Subject key identifier: 9B:71:AD:76:DF:FD:CB:FD:1B:54:95:4C:D2:95:76:FC:33:5C:F6:84
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07DD
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/m3Gtdt_9y_0bVJVM0pV2_DNc9oQ.roa
Signing time: Tue 13 Jun 2023 15:24:03 +0000
ROA not before: Tue 13 Jun 2023 15:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2013 (0x7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 15:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=9B71AD76DFFDCBFD1B54954CD29576FC335CF684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:62:94:c4:48:bb:f4:b8:e8:95:1a:d8:50:
44:44:6e:b9:07:7f:a0:46:0d:e2:c0:64:d8:26:ec:
6a:4f:32:92:7a:37:0f:cd:0b:58:0f:54:4e:bf:8a:
12:0d:44:bc:02:5c:5e:55:12:bd:63:67:c5:51:be:
a7:d6:20:b2:1a:4f:9d:de:38:ea:a6:d0:30:30:4c:
d8:44:56:91:9f:94:37:04:89:4b:da:a6:17:02:a6:
3b:e3:cb:ec:78:58:25:34:48:ef:7b:fe:39:c1:00:
f6:62:8a:cc:ef:c5:85:5a:64:62:53:64:a8:72:1a:
f4:27:fe:f9:41:bf:68:69:95:3c:a8:1a:c4:0f:c8:
74:0a:26:23:ab:3f:f5:25:e4:6f:bb:a1:61:88:cb:
ad:e4:fc:1c:0d:e2:28:48:95:f0:ef:85:61:fa:1b:
a6:2d:37:27:57:cf:ee:0f:b7:36:54:12:95:25:7b:
e8:31:9b:c3:66:1f:95:24:0c:d6:5d:6f:13:1d:90:
d1:35:f3:5d:f5:6e:a6:72:b5:33:ec:70:8d:6a:22:
61:43:97:46:08:32:01:34:0e:d4:eb:d5:f0:24:1f:
11:5c:cf:7d:4f:13:2b:1f:e1:75:d5:94:2f:dd:dd:
9a:c0:0d:53:43:f4:e7:b8:a8:ae:b4:28:58:9f:5b:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:AD:76:DF:FD:CB:FD:1B:54:95:4C:D2:95:76:FC:33:5C:F6:84
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/m3Gtdt_9y_0bVJVM0pV2_DNc9oQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:d4:0e:77:56:3e:df:bb:fd:c4:3e:b5:85:25:cc:fc:e6:ae:
40:18:06:06:92:52:af:15:76:5d:dd:ef:99:ab:25:90:df:fc:
af:c0:18:f2:e6:f5:7b:30:87:56:13:20:9b:d2:90:b2:7f:25:
21:de:96:bd:b7:cd:80:ed:82:01:45:ae:26:e8:b9:7d:a2:12:
43:dc:35:18:a7:b8:46:00:df:1d:4d:b7:ed:2a:b2:97:df:93:
ce:1f:a5:41:74:95:3f:55:62:90:58:29:60:f3:ad:db:a6:7d:
6e:a9:8d:21:f1:5f:5b:df:53:0f:58:14:38:fa:a8:f4:07:16:
89:f2:e8:83:d2:80:39:c7:87:b7:94:3e:5d:cb:45:6a:61:c7:
df:9d:86:7d:dd:67:0f:2f:12:c7:1c:50:5e:58:41:4e:53:a3:
bc:b1:cb:b5:1e:36:ed:82:9e:f9:ee:e9:75:e6:65:47:ed:43:
fd:fd:32:a6:0d:68:ef:70:dd:bf:4c:b4:5b:eb:17:6f:f9:12:
1b:7f:2a:9c:d3:fa:87:dd:fc:fa:fe:fe:43:18:38:4d:e0:84:
3f:af:80:e0:94:0c:e4:3f:bf:83:4c:62:8f:f2:9b:a1:58:14:
83:b2:96:19:f7:1e:c9:b2:17:75:14:6a:40:d7:a1:a8:c5:60:
7c:be:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org