Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/oHpM8vls8fONKi_2jN_1EokCR-o.roa
File: oHpM8vls8fONKi_2jN_1EokCR-o.roa (raw, json)
Hash identifier: yUvu9fZrfmSGF5UN/AaBQ9cz7dfPpaPjxae6ugjvOo4=
Subject key identifier: A0:7A:4C:F2:F9:6C:F1:F3:8D:2A:2F:F6:8C:DF:F5:12:89:02:47:EA
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08F9
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/oHpM8vls8fONKi_2jN_1EokCR-o.roa
Signing time: Thu 15 Jun 2023 02:54:05 +0000
ROA not before: Thu 15 Jun 2023 02:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 02:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=A07A4CF2F96CF1F38D2A2FF68CDFF512890247EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:9f:96:92:73:ac:c1:28:9c:43:e9:db:b9:
88:0a:94:d1:86:a6:ca:e2:7d:88:55:af:82:bc:10:
e4:02:4c:6b:d0:f1:d8:49:06:6d:5f:f8:6a:cd:64:
a9:f9:8c:d5:28:51:fa:0d:f9:24:da:58:49:ec:9c:
88:fd:af:f5:3d:57:e8:79:21:85:32:24:b0:9e:99:
1a:6b:3b:67:83:64:d8:57:7f:51:45:97:bf:76:b4:
78:e2:43:25:a8:0d:62:6e:f3:69:9e:95:82:08:36:
63:07:ee:9f:02:2d:1d:20:f5:aa:ab:a1:2e:06:62:
48:72:28:84:97:d9:c9:f9:3d:11:ea:1a:26:9a:ef:
3d:57:28:1e:c3:0b:1d:e8:ae:80:ba:97:ee:ba:b1:
3a:ce:04:fc:7c:be:f1:e6:a1:91:6c:fc:0d:15:94:
00:8c:00:f1:4c:94:34:29:69:94:20:0c:6b:06:8d:
f5:08:68:b0:a8:72:07:73:57:6a:1b:58:b6:ea:fc:
29:b9:6e:ed:4b:ba:7f:ac:05:f9:57:09:00:f3:94:
5a:7e:a2:aa:d1:30:fc:7e:29:23:78:f0:0f:66:c9:
09:33:22:63:34:b5:16:f7:4c:49:8b:b1:0a:35:ff:
fd:87:ee:3b:14:d2:79:ed:ee:a6:6c:0d:26:8f:0a:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7A:4C:F2:F9:6C:F1:F3:8D:2A:2F:F6:8C:DF:F5:12:89:02:47:EA
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/oHpM8vls8fONKi_2jN_1EokCR-o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:58:f0:20:1d:30:48:d4:fa:fe:74:e5:d6:18:92:7d:87:12:
aa:d4:0f:66:1e:5c:57:23:f7:22:9c:d0:23:9d:3d:80:51:b6:
a3:b8:94:77:17:c5:da:9a:f1:ee:a1:2f:11:fa:65:a9:1e:b2:
ac:7b:3f:2a:5d:d2:5d:e1:64:3a:88:a9:db:c5:f8:c0:72:24:
97:0e:33:e3:05:aa:fd:58:c7:8b:fd:1e:dc:3f:b8:95:cb:24:
7d:06:da:8e:bc:14:d7:e6:7c:2e:c4:05:2f:8a:5e:76:8a:2f:
5d:63:a3:1b:6d:4a:d3:64:50:a1:7d:33:a4:6a:73:07:eb:6a:
c2:ea:81:6f:7d:8e:04:56:1e:5e:00:78:bf:eb:7c:6d:f5:43:
e4:07:05:3e:3b:7d:c8:f2:b9:9d:ec:ce:4b:2c:81:48:a2:af:
02:f1:b0:72:01:48:44:77:91:46:aa:7c:c6:12:a8:9e:73:4a:
1e:43:d7:d5:7f:4c:77:68:26:9f:4b:ef:66:bc:9c:98:56:c0:
8d:c7:e1:84:3d:f7:7c:9d:f6:8b:1e:98:3a:38:9c:95:0d:a2:
92:9b:97:c7:a0:cb:d8:26:94:92:17:db:1a:7e:48:37:af:f1:
5a:d5:e3:40:51:3f:b5:4b:6c:1f:62:02:bf:28:2c:7a:9c:05:
fd:03:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org