Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/skm_XKg_AF2xaGYu29afUfHzCgg.roa
File: skm_XKg_AF2xaGYu29afUfHzCgg.roa (raw, json)
Hash identifier: RKA42p5Un9zfkm4YnF+/h/H//0r5nBOmPfK3kvNL3HQ=
Subject key identifier: B2:49:BF:5C:A8:3F:00:5D:B1:68:66:2E:DB:D6:9F:51:F1:F3:0A:08
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 086D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/skm_XKg_AF2xaGYu29afUfHzCgg.roa
Signing time: Wed 14 Jun 2023 09:24:03 +0000
ROA not before: Wed 14 Jun 2023 09:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 09:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=B249BF5CA83F005DB168662EDBD69F51F1F30A08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:f3:be:b6:f2:78:dd:9b:e4:7e:47:b8:1a:
1e:9f:27:08:75:ef:78:7d:46:03:59:b7:a9:41:a8:
e6:0a:bb:71:9b:f3:60:1c:65:d5:98:c7:88:85:7a:
e5:44:57:58:80:97:8a:81:26:10:aa:05:e4:ab:b4:
cf:da:3b:99:b0:52:24:ca:8d:55:a5:4e:93:25:74:
9c:98:92:11:be:85:4c:19:77:b6:26:ec:ac:39:56:
ce:5e:6a:f5:de:d5:1d:57:54:a8:c6:ea:bf:dd:16:
36:fb:9f:52:45:40:29:04:97:4b:46:ba:7e:07:9f:
b4:e3:e3:97:da:da:be:f2:56:78:d9:da:e9:e7:a4:
22:29:a6:82:b0:a5:f3:33:60:3e:f4:25:f3:38:81:
f2:5e:b7:74:5f:92:51:32:b2:82:fd:6c:97:f5:1c:
b3:dc:e7:58:da:90:5a:15:e3:8b:f8:c5:79:66:32:
5e:e2:eb:b2:58:17:d3:48:26:71:bc:76:e5:72:a7:
f9:f7:24:a1:dd:c0:91:53:2d:19:c4:28:87:09:d3:
65:1d:51:81:f6:40:23:12:4b:25:81:28:ed:6b:ca:
9e:fc:4d:30:8b:3a:93:50:25:fd:e6:80:24:b2:f1:
a3:71:9a:21:91:d8:56:7c:c7:9f:47:cc:a7:b1:f7:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:49:BF:5C:A8:3F:00:5D:B1:68:66:2E:DB:D6:9F:51:F1:F3:0A:08
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/skm_XKg_AF2xaGYu29afUfHzCgg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:56:af:8e:03:22:52:87:a1:e4:2c:d8:45:10:7c:fc:4c:cd:
50:d5:2d:8c:7f:e5:3e:2b:23:ed:c8:23:51:4f:6d:69:c8:ef:
73:0a:dc:3f:e3:ee:2e:95:ce:ed:57:b8:0a:cc:4e:97:5a:81:
63:e0:5f:55:3d:7d:d4:b2:72:6d:8b:d0:0c:75:60:a8:92:ea:
98:6b:89:19:3a:b9:03:1e:ef:af:a0:57:d3:29:53:25:5a:21:
1e:2f:11:8e:e0:ee:99:87:c3:c3:9c:1d:f9:3e:72:4a:a5:ea:
00:28:56:cf:a4:b2:a8:f6:0e:9d:da:90:34:79:25:b3:d2:12:
15:ec:73:1c:95:58:b9:96:be:21:71:06:c9:dc:6f:e2:fc:32:
75:18:7d:ea:e3:6b:c1:98:f2:8d:9a:f8:67:bf:c2:2e:8b:2b:
c4:1e:2d:ee:e0:b6:74:3e:f2:9d:c1:d9:ff:a6:0d:24:e5:dd:
f0:e8:c1:f4:10:1e:ec:fb:14:cd:c7:4b:db:d5:c4:1a:6e:35:
4b:42:9b:4c:7a:fa:18:15:a7:c6:19:b2:dd:de:b8:1d:ab:5e:
c7:55:fb:81:41:0d:a6:d3:98:b9:1a:52:52:80:6c:95:22:de:
4f:28:40:b3:c7:4d:10:49:46:bc:19:65:ab:6f:05:6f:20:18:
71:96:51:6d
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQw
OTI0MDNaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEIyNDlCRjVDQTgzRjAw
NURCMTY4NjYyRURCRDY5RjUxRjFGMzBBMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChI/O+tvJ43Zvkfke4Gh6fJwh173h9RgNZt6lBqOYKu3Gb82Ac
ZdWYx4iFeuVEV1iAl4qBJhCqBeSrtM/aO5mwUiTKjVWlTpMldJyYkhG+hUwZd7Ym
7Kw5Vs5eavXe1R1XVKjG6r/dFjb7n1JFQCkEl0tGun4Hn7Tj45fa2r7yVnjZ2unn
pCIppoKwpfMzYD70JfM4gfJet3RfklEysoL9bJf1HLPc51jakFoV44v4xXlmMl7i
67JYF9NIJnG8duVyp/n3JKHdwJFTLRnEKIcJ02UdUYH2QCMSSyWBKO1ryp78TTCL
OpNQJf3mgCSy8aNxmiGR2FZ8x59HzKex95JlAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUskm/XKg/AF2xaGYu29afUfHzCggwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvc2ttX1hLZ19BRjJ4
YUdZdTI5YWZVZkh6Q2dnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAelav
jgMiUoeh5CzYRRB8/EzNUNUtjH/lPisj7cgjUU9tacjvcwrcP+PuLpXO7Ve4CsxO
l1qBY+BfVT191LJybYvQDHVgqJLqmGuJGTq5Ax7vr6BX0ylTJVohHi8RjuDumYfD
w5wd+T5ySqXqAChWz6SyqPYOndqQNHkls9ISFexzHJVYuZa+IXEGydxv4vwydRh9
6uNrwZjyjZr4Z7/CLosrxB4t7uC2dD7yncHZ/6YNJOXd8OjB9BAe7PsUzcdL29XE
Gm41S0KbTHr6GBWnxhmy3d64Hatex1X7gUENptOYuRpSUoBslSLeTyhAs8dNEElG
vBllq28FbyAYcZZRbQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org