Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/ro1tww7DTIjdmk4PjKGMOocUpKA.roa
File: ro1tww7DTIjdmk4PjKGMOocUpKA.roa (raw, json)
Hash identifier: W8d8BGkpCvkdQ2K0rJVrDRmQqmyPfrg2ZsuUMmBYNW4=
Subject key identifier: AE:8D:6D:C3:0E:C3:4C:88:DD:9A:4E:0F:8C:A1:8C:3A:87:14:A4:A0
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 087D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ro1tww7DTIjdmk4PjKGMOocUpKA.roa
Signing time: Wed 14 Jun 2023 11:24:12 +0000
ROA not before: Wed 14 Jun 2023 11:24:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 11:24:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=AE8D6DC30EC34C88DD9A4E0F8CA18C3A8714A4A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8b:02:f7:6c:be:7e:62:70:4d:c2:21:8f:92:
f6:e6:07:55:d2:7c:3f:06:f5:07:45:a5:c3:ee:9e:
c1:2e:d6:cc:ee:4e:7f:73:dc:fe:26:16:68:cd:6a:
36:a6:d8:35:c6:61:ec:02:e1:0a:db:b4:b1:e0:14:
ef:a5:d3:28:cd:a8:a8:fe:15:c3:7c:de:2f:c8:ee:
f0:cd:dc:24:74:34:15:59:ed:4e:f5:38:45:75:86:
34:b6:85:70:b8:6c:20:8b:91:db:f6:3f:92:52:6e:
5f:f3:28:77:3e:60:e2:bb:36:b5:92:d6:86:31:4c:
3b:da:fd:7c:e7:f8:f8:77:d4:a6:87:94:a3:7b:b4:
87:ee:8c:6c:59:9c:a0:94:7f:ec:f0:9f:8b:a4:ce:
26:cf:cf:c8:33:74:4e:f9:a8:f0:39:60:99:ed:b8:
90:6d:39:85:e0:dd:00:a8:e8:0d:9b:1b:88:ee:2d:
87:9d:79:48:2c:1f:2a:09:cf:1d:20:b9:ed:71:1c:
c3:26:ab:58:78:a5:a6:b3:34:a7:5c:cc:a3:ac:f0:
1e:0b:e7:5a:c1:48:32:76:36:dc:d8:42:de:ad:86:
ae:a2:61:a8:a1:8c:d2:b6:0c:37:73:19:38:8c:b1:
63:c0:0d:7d:47:6d:05:dd:1e:ba:f7:d6:32:a7:db:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8D:6D:C3:0E:C3:4C:88:DD:9A:4E:0F:8C:A1:8C:3A:87:14:A4:A0
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ro1tww7DTIjdmk4PjKGMOocUpKA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
12:48:bc:28:27:7c:5e:9f:fc:cf:c4:47:f0:e3:c3:56:b6:86:
0c:27:5e:da:cb:19:71:e3:19:13:94:9f:d6:18:f8:2b:0e:e7:
a3:03:fc:49:69:a4:e6:83:6a:74:5c:bc:14:bb:14:6f:0e:d7:
08:8e:94:4d:68:6c:5b:5b:27:66:69:d8:dd:74:62:11:24:93:
7e:08:cf:ba:72:e1:7c:3a:05:6e:6c:de:9c:b6:0a:4a:8b:6d:
7d:c6:35:24:a0:92:a6:97:c3:46:ab:96:9f:d0:b5:d3:2a:df:
07:f4:6e:33:33:a3:35:9f:c2:7f:6d:25:31:9d:37:e6:35:7a:
e9:15:08:87:ca:ff:78:0b:32:0b:05:bf:f1:cd:34:c2:b6:7d:
dd:d1:10:72:ff:a8:df:13:19:3f:37:1b:88:0d:59:96:e9:27:
a8:94:39:83:38:4b:0d:9f:13:fa:c2:69:aa:fe:b3:b0:bb:f0:
51:af:5e:e8:76:5f:05:26:2d:e5:48:ab:62:3b:22:41:74:c6:
a0:d8:00:98:ad:8f:df:05:3a:8a:7c:a6:c2:8b:5c:ff:b2:c8:
ad:40:11:7c:2c:61:6c:6d:66:01:2c:6f:b2:6c:6c:02:3c:88:
08:94:2c:38:0a:a7:ef:08:47:4e:b6:c2:f2:3b:83:f7:91:66:
e7:51:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:41:59 2025 by rpki-client