Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/pARhHJOqwQhbT5JUni1fY2EZ6VU.roa
File: pARhHJOqwQhbT5JUni1fY2EZ6VU.roa (raw, json)
Hash identifier: ZspAJ6l3VKNbKBc/tpfQzWIdcM9GjVW3dl6+MMKlfT0=
Subject key identifier: A4:04:61:1C:93:AA:C1:08:5B:4F:92:54:9E:2D:5F:63:61:19:E9:55
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07AD
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/pARhHJOqwQhbT5JUni1fY2EZ6VU.roa
Signing time: Tue 13 Jun 2023 09:24:11 +0000
ROA not before: Tue 13 Jun 2023 09:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 09:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=A404611C93AAC1085B4F92549E2D5F636119E955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:2d:df:75:c3:3b:97:c4:fd:b7:cc:e2:4a:
13:f2:63:69:b6:0d:ad:3a:2c:f6:32:82:28:fe:41:
7a:a2:f2:51:92:26:9d:7f:05:6a:8e:6f:61:9a:26:
35:96:9d:27:ce:1c:f3:d6:c4:ab:b1:fb:1d:a8:42:
07:ee:d0:f2:90:c2:69:d8:49:18:00:46:a4:68:fc:
c4:1c:16:47:87:be:5e:a6:0d:0f:76:f8:64:29:59:
18:a0:9c:fd:a7:5f:d6:fe:7b:0c:50:55:2d:cd:52:
2c:f4:b5:c9:31:5c:f9:8a:ce:39:bf:93:76:01:c4:
e1:fe:65:e4:a5:dc:25:2a:14:42:fc:7f:38:5e:20:
35:c7:ad:11:af:74:c5:06:99:ca:2f:03:f0:ea:2e:
b7:ec:b9:5c:a2:d0:4f:33:17:d1:3f:20:02:ae:fe:
f6:5b:73:3b:33:9f:a0:e4:fc:d7:ea:c8:c2:53:2c:
82:d7:6c:69:80:24:85:f2:89:55:8d:4c:44:ad:ef:
3a:1a:fa:14:78:89:c7:ff:e1:23:2a:09:13:52:ee:
9a:47:97:c7:3d:7b:d2:d3:f8:7c:f8:cb:39:e5:2e:
ff:4c:9e:2e:e3:db:9e:de:57:5a:47:73:26:c1:93:
8f:3e:75:ae:97:c9:a1:d2:2e:ae:64:20:3d:90:7e:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:04:61:1C:93:AA:C1:08:5B:4F:92:54:9E:2D:5F:63:61:19:E9:55
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/pARhHJOqwQhbT5JUni1fY2EZ6VU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
31:6c:2c:db:2a:b9:2c:68:ef:0e:e9:a0:86:f2:89:3f:a5:cf:
10:2c:51:70:54:63:06:e5:91:b2:fb:ef:a6:75:8f:5e:9f:74:
a0:5e:54:cb:b1:81:dd:12:b9:6a:a4:2e:e9:95:f5:e0:70:02:
e9:1d:1d:bb:8f:94:d8:2d:10:34:18:16:00:86:10:a6:c0:7a:
54:27:10:84:e6:fe:a8:a9:41:34:59:38:61:4c:bf:0a:5a:72:
12:7b:26:87:a3:7a:64:78:b6:f1:a7:b6:8f:b9:7c:09:56:f6:
86:c5:aa:ab:66:97:ce:e8:c3:5e:0b:3d:42:4e:34:8f:b1:a1:
a2:df:64:8c:46:5e:0a:64:87:03:f9:43:8a:ae:80:c2:24:23:
46:aa:1a:14:4d:50:77:cb:82:a4:c0:7c:08:f8:44:64:32:10:
ad:23:d1:4d:ee:69:02:87:cb:8e:cf:11:8a:3a:5a:38:d4:90:
24:1e:29:cf:57:e6:50:01:bc:1c:70:a7:2d:82:23:e0:15:03:
2c:73:b2:03:ca:55:fb:0d:8a:0a:f8:da:72:08:c8:71:22:b5:
f6:8b:52:6b:90:8d:8e:e4:03:a4:cb:22:fb:4e:cc:7a:cf:b4:
9b:15:af:2f:bf:69:17:32:64:b6:c6:d6:8e:42:cc:65:81:31:
f5:39:30:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org