Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/oH4dmXR9uVbPHuAJChn5acZKCM4.roa
File: oH4dmXR9uVbPHuAJChn5acZKCM4.roa (raw, json)
Hash identifier: oAa5evrfApJXR34jdSl+QUwwsoi7XJtvQHbf/vWpw60=
Subject key identifier: A0:7E:1D:99:74:7D:B9:56:CF:1E:E0:09:0A:19:F9:69:C6:4A:08:CE
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0926
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/oH4dmXR9uVbPHuAJChn5acZKCM4.roa
Signing time: Thu 15 Jun 2023 06:02:05 +0000
ROA not before: Thu 15 Jun 2023 06:02:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342 (0x926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 06:02:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=A07E1D99747DB956CF1EE0090A19F969C64A08CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:a3:ff:39:fd:09:7d:5e:77:df:37:aa:eb:
ef:db:d3:2c:3c:26:fa:05:04:41:07:76:d9:e3:2a:
d7:c0:37:fc:83:a8:0a:2b:3b:9c:79:c9:56:b6:18:
b2:66:0c:d5:56:9e:66:2a:53:ba:a2:e8:2d:93:60:
9b:40:34:78:48:92:09:16:8c:89:4b:23:5f:2b:a7:
50:33:71:89:4a:40:44:76:18:19:dc:77:e5:9c:11:
9a:a6:1e:4c:19:c9:c1:09:69:ff:47:3e:a2:31:b4:
95:44:1b:91:00:58:9f:25:c7:05:1d:71:90:b1:49:
e9:56:55:76:16:4e:c7:61:db:62:51:a7:e5:59:1e:
d9:d7:97:1e:b0:ea:2c:11:20:95:40:69:f2:ec:93:
a3:3f:8d:d4:9f:f8:77:a0:a6:7d:95:cd:37:14:d7:
c8:90:69:e3:dd:f6:15:5f:0b:4e:f1:d0:ea:81:89:
83:0f:e0:03:9c:a6:f7:40:9f:47:3a:c6:c8:6e:ae:
24:56:c0:ea:5f:bf:11:6b:48:10:b5:08:eb:74:4e:
58:6e:35:a5:11:e1:ba:13:0a:bc:78:cb:21:af:c7:
8c:70:4f:60:b6:da:7a:20:cf:fb:b6:b2:08:57:11:
12:f5:1b:f5:de:54:41:40:16:d5:93:b5:5b:65:74:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7E:1D:99:74:7D:B9:56:CF:1E:E0:09:0A:19:F9:69:C6:4A:08:CE
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/oH4dmXR9uVbPHuAJChn5acZKCM4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
85:cd:e9:e3:5e:70:69:ad:7e:7f:54:56:9e:4e:f5:bd:fa:aa:
c6:bf:16:c0:da:b9:6a:a3:64:f5:53:6b:03:e1:b2:79:ac:65:
7f:e6:9a:47:67:87:f3:3d:ee:6e:6d:c2:9d:3a:84:26:f1:15:
99:3d:88:f3:fd:f3:07:68:ab:ae:fc:01:d6:a0:f4:8b:52:e9:
73:4d:dd:40:97:61:83:99:64:88:9f:ac:eb:1a:23:72:fc:94:
be:1e:40:d7:32:fa:82:ad:44:8b:18:ce:4a:40:48:cd:4a:f9:
f2:84:70:a7:f9:44:ed:e1:c8:6b:bc:d9:16:3b:54:b7:ca:26:
e4:8a:61:37:32:d7:1a:f6:5a:c9:9d:c4:bc:08:e7:9c:2f:c6:
f1:78:bf:9f:bc:e9:ae:24:30:b0:61:5c:fd:90:24:04:a2:10:
15:f3:f7:0b:f5:40:4a:41:04:94:d7:c7:be:ae:04:54:07:ca:
cf:f9:33:65:4f:72:0b:df:43:2c:20:c1:b9:35:3d:2f:8f:0e:
e2:8d:be:16:3e:3b:23:42:11:5f:49:53:5a:fa:52:6b:95:2f:
f3:c9:ef:15:80:b4:5d:b1:eb:6f:e2:56:18:c4:46:1c:35:d8:
08:1a:7c:87:ed:f3:4e:4b:f7:f6:5d:cf:82:4d:00:ce:70:ae:
09:42:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:00 2025 by rpki-client