Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/n7dUg9Exjh3tFc_6BTW0GXVr6gE.roa
File: n7dUg9Exjh3tFc_6BTW0GXVr6gE.roa (raw, json)
Hash identifier: Dzchv9/03Inl9qep+Ubvsje/Z4b3K98vsCtSV95SU34=
Subject key identifier: 9F:B7:54:83:D1:31:8E:1D:ED:15:CF:FA:05:35:B4:19:75:6B:EA:01
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0831
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/n7dUg9Exjh3tFc_6BTW0GXVr6gE.roa
Signing time: Wed 14 Jun 2023 01:54:10 +0000
ROA not before: Wed 14 Jun 2023 01:54:10 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2097 (0x831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 01:54:10 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=9FB75483D1318E1DED15CFFA0535B419756BEA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:01:f7:a7:ec:bf:da:4b:3f:7f:ec:66:6f:
49:10:b9:36:5d:96:7a:71:f0:6f:d6:6d:7d:c8:17:
b0:cc:24:97:0e:2d:c9:f1:d7:41:3c:49:65:0a:32:
41:c7:19:7d:2d:60:bf:8f:82:81:d7:a5:39:ac:bc:
0e:36:77:b2:9f:6f:34:ac:ed:6b:d1:56:94:09:d9:
b6:f7:fc:d8:d1:73:b5:24:c6:f7:9c:ce:85:0a:d2:
9f:0f:76:b0:bd:fd:99:d5:c2:74:ef:8b:c8:64:13:
c0:ac:65:0e:b8:fb:39:42:b4:c4:ae:70:58:d5:d3:
63:08:51:35:9b:91:60:6d:7a:5d:1c:99:b0:9c:9d:
ff:16:5a:e2:cd:97:cb:71:c4:12:7a:dc:10:b3:fe:
11:7a:8f:14:53:07:52:65:0c:f0:5d:96:2a:74:41:
07:d8:57:39:29:b8:83:04:a6:9c:7d:41:87:e6:48:
07:40:dc:ca:1a:32:d5:6c:89:5f:67:05:d2:29:ee:
78:7b:a1:aa:bb:b4:9d:f4:20:ab:23:aa:b8:21:b0:
fb:27:62:ec:c0:a8:b0:75:2c:c9:07:2f:a6:cb:5a:
a1:1a:a0:da:e3:4d:f5:fe:10:b3:b8:a7:94:45:75:
d9:14:da:97:15:c9:c3:cf:70:3c:b3:27:9b:45:db:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B7:54:83:D1:31:8E:1D:ED:15:CF:FA:05:35:B4:19:75:6B:EA:01
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/n7dUg9Exjh3tFc_6BTW0GXVr6gE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:da:af:e7:97:20:08:34:1f:ba:83:62:85:80:c3:dd:15:06:
ac:2b:fa:11:ec:fd:50:04:b7:09:17:82:5b:8d:09:df:ea:1f:
d3:22:fc:97:b2:30:74:b6:ca:f7:9e:f1:4c:1e:b1:e0:5d:8a:
5f:f3:29:b4:f0:36:51:3f:8e:91:b6:80:9c:b8:2e:0b:c9:bd:
f4:db:cf:bc:ee:39:0f:a7:26:4a:b3:92:62:4c:23:0d:5b:24:
a8:d8:97:8a:e2:67:71:c9:33:f2:f5:9b:06:ed:90:25:2e:34:
00:b5:92:ce:78:3b:73:02:af:7f:8f:02:01:d2:17:4c:24:06:
74:6a:55:8b:12:75:de:a1:b0:ae:27:6e:34:b1:80:f4:e4:3e:
3f:f7:ba:11:5e:26:8c:c7:d2:3b:e0:16:46:2f:0d:6b:eb:87:
0e:5e:46:84:56:40:f7:d6:59:cf:c0:c5:78:bf:dd:20:03:52:
b1:1d:a3:61:a6:5f:4e:10:eb:82:5b:7e:24:09:48:88:b2:21:
db:ec:9e:fd:96:59:6e:29:bc:48:fd:cb:2d:67:58:91:91:d2:
3a:6d:a1:e5:0e:f5:97:34:18:53:cd:64:66:98:2f:a4:fa:2f:
5f:88:da:90:93:15:f8:b9:e8:71:d3:94:8d:d5:24:bb:9b:b6:
55:18:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org