Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/wHBHFDZf6uatxzd2x4sbOGzwxhY.roa
File: wHBHFDZf6uatxzd2x4sbOGzwxhY.roa (raw, json)
Hash identifier: bS2it65sjl0GSm6oTaA4RYfsxg38YKYeDDpYpZf3LbQ=
Subject key identifier: C0:70:47:14:36:5F:EA:E6:AD:C7:37:76:C7:8B:1B:38:6C:F0:C6:16
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 080D
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/wHBHFDZf6uatxzd2x4sbOGzwxhY.roa
Signing time: Tue 13 Jun 2023 21:24:01 +0000
ROA not before: Tue 13 Jun 2023 21:24:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 21:24:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C0704714365FEAE6ADC73776C78B1B386CF0C616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:97:bd:25:1d:44:dd:05:02:f0:f9:b7:09:
67:95:b9:f9:94:84:e7:6c:cc:04:e8:c5:aa:db:34:
c5:8d:c3:55:da:c3:4a:48:6c:bd:f9:52:53:92:ec:
41:5a:c9:74:8e:25:69:cb:ac:2d:01:39:da:63:2b:
a8:65:95:a3:c6:8d:d6:6f:66:e3:98:9e:34:7c:dd:
e0:2c:0c:3e:bb:4e:fa:f9:1a:bb:51:b9:8a:68:fd:
fe:c6:82:d2:2b:07:29:8c:10:98:b1:41:d4:b4:f2:
17:3f:33:a2:b6:96:fe:f5:64:cd:b5:1f:fc:1e:64:
75:cd:61:d4:6e:45:7b:b3:5e:87:f2:88:40:7b:47:
3d:d9:58:6b:2f:22:5e:50:09:95:43:a3:39:ba:16:
8c:ff:ce:53:d0:d7:fc:40:c9:37:47:ed:c9:c5:0b:
25:3c:11:8c:2c:f2:8f:ba:a4:d5:b6:85:ea:03:d6:
91:b0:f2:62:b1:1a:9e:e7:a9:06:b2:14:45:27:b6:
9e:72:fd:6f:f8:12:18:4d:fd:93:db:11:02:8c:60:
aa:c1:c7:e8:4a:7d:66:67:02:be:c8:13:55:40:17:
de:0b:2e:35:ce:40:50:71:15:5e:8d:71:cf:02:1b:
e3:49:0e:08:d8:59:50:19:70:9d:97:97:5f:d4:9b:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:47:14:36:5F:EA:E6:AD:C7:37:76:C7:8B:1B:38:6C:F0:C6:16
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/wHBHFDZf6uatxzd2x4sbOGzwxhY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
60:b1:79:d5:ba:69:68:13:a5:4a:5e:30:a8:4c:d5:f6:c0:fd:
75:69:68:86:f7:87:3f:b3:bb:c7:e2:51:88:4d:ba:27:f7:7d:
8e:08:5d:d3:dd:e2:a2:55:6f:e2:b8:8d:c2:5b:8d:74:65:a9:
fa:a6:d5:81:35:f1:5d:26:ac:5b:69:d0:9f:c3:e2:30:a4:fc:
07:44:8c:20:9b:d9:d9:10:02:0a:28:fe:fe:56:43:15:98:c4:
5e:fd:f7:eb:88:ee:dc:c7:72:28:03:d0:c7:48:dd:44:c7:98:
f9:c7:29:47:d1:56:ba:89:74:f9:a3:f5:49:54:36:d7:8b:ee:
bd:7c:6a:21:e7:2e:a2:a0:43:64:8f:70:7e:36:85:83:d5:89:
68:7f:b7:78:ef:f9:33:50:27:39:79:e4:34:4c:f2:f9:aa:37:
28:1d:bc:4c:5e:e3:00:94:0f:ce:23:17:4f:e8:8f:9f:1d:eb:
7d:b1:e6:59:da:97:bd:9c:f0:55:b1:cd:56:da:be:f0:b7:90:
b4:a0:28:06:5f:cc:ff:c7:cc:c5:76:ab:8a:c5:03:a1:81:60:
9f:5f:cd:db:32:35:2a:22:ef:94:24:3f:b1:16:d7:f7:a4:4a:
b9:36:36:40:d3:0c:ba:c1:21:a0:60:86:12:64:0e:7e:03:4a:
07:a8:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org