Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/wV1TVN35c1PZqVNJDB6cPjdRLrI.roa
File: wV1TVN35c1PZqVNJDB6cPjdRLrI.roa (raw, json)
Hash identifier: 3WK5Er8rP3M6jFHg3STZg7pmGVP+4UyUaGQPe7hwrBo=
Subject key identifier: C1:5D:53:54:DD:F9:73:53:D9:A9:53:49:0C:1E:9C:3E:37:51:2E:B2
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08D5
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/wV1TVN35c1PZqVNJDB6cPjdRLrI.roa
Signing time: Wed 14 Jun 2023 22:24:06 +0000
ROA not before: Wed 14 Jun 2023 22:24:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 22:24:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C15D5354DDF97353D9A953490C1E9C3E37512EB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:dd:ad:dd:87:2d:a8:47:72:cc:f8:26:83:
09:68:3a:03:f0:5b:2e:e1:81:03:62:74:1e:86:4a:
1f:83:35:95:d3:94:62:65:c2:54:f1:c2:33:2c:13:
c9:a9:be:f4:9b:0d:63:47:81:23:8b:e0:ce:6b:f1:
00:02:90:1a:0a:91:a5:38:95:45:fb:99:80:fb:8e:
f6:e1:ce:4a:19:d5:31:79:5e:61:45:69:bd:41:a7:
2a:99:f2:da:ce:3c:92:58:41:14:3d:21:b3:87:01:
96:85:43:e4:f7:10:e5:c1:5c:84:bd:6c:6c:68:9f:
0b:33:d3:4d:59:8e:96:ca:eb:fe:94:5e:3f:cc:23:
05:1c:c4:03:96:44:03:45:60:f2:58:af:82:63:5f:
c7:4f:c4:59:28:8d:33:52:56:19:e3:03:3e:93:da:
71:17:d9:fd:f4:25:dd:c9:a6:5e:65:0f:13:9e:48:
dd:e2:fd:79:18:72:7c:c9:2b:b9:9c:3a:2e:8c:11:
6b:8e:c8:66:9c:75:55:fa:24:8b:a8:31:5d:16:11:
3e:2b:6e:a6:6f:9b:7c:d0:12:66:b8:2d:49:19:c2:
f3:5d:92:58:53:f0:26:77:6e:9f:bc:d0:27:86:fa:
4c:85:4d:11:aa:7a:d5:b7:5c:21:92:e1:28:31:9f:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5D:53:54:DD:F9:73:53:D9:A9:53:49:0C:1E:9C:3E:37:51:2E:B2
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/wV1TVN35c1PZqVNJDB6cPjdRLrI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
70:0b:51:aa:5d:bf:b7:a3:fe:bf:45:12:f1:8f:c0:ed:d4:75:
70:0a:d8:d4:dd:6c:12:39:a8:ce:89:f6:18:6a:92:33:ea:04:
83:97:47:a6:16:d0:48:c2:11:35:fe:6a:e9:a2:57:ca:f8:e7:
4e:b9:3c:ea:08:c1:1c:59:58:85:6f:14:10:a9:52:c6:a5:ec:
ec:87:bd:55:7b:f1:43:ed:a1:bc:1a:61:6f:06:00:40:9c:a8:
1b:8f:1b:d1:9c:7b:6c:76:33:82:69:30:81:72:f8:ef:4e:42:
6d:0a:04:52:21:64:7d:59:e4:ae:b7:6c:cd:68:73:27:59:df:
7d:1c:16:b4:00:58:87:6b:44:21:4d:d4:50:65:68:80:2e:a3:
70:7e:18:8b:d2:65:7e:4b:87:75:04:15:8b:17:64:73:9c:f1:
e6:68:38:a5:30:4c:7a:dc:f3:3b:eb:c0:97:7f:c6:7f:33:17:
0b:d6:5e:83:a0:11:66:3b:09:22:6a:62:a2:7d:ef:fa:43:8d:
0a:d0:81:15:43:0a:5e:45:cb:45:f2:55:e2:2a:a3:d5:34:a2:
53:85:0b:5b:d0:4f:6f:9c:1f:34:d8:78:57:64:c1:c4:2f:d7:
cc:04:af:a5:ae:48:13:6f:f9:5f:7d:68:5d:d3:9c:a1:de:f0:
8f:20:ae:86
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MjI0MDZaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEMxNUQ1MzU0RERGOTcz
NTNEOUE5NTM0OTBDMUU5QzNFMzc1MTJFQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8Wd2t3YctqEdyzPgmgwloOgPwWy7hgQNidB6GSh+DNZXTlGJl
wlTxwjMsE8mpvvSbDWNHgSOL4M5r8QACkBoKkaU4lUX7mYD7jvbhzkoZ1TF5XmFF
ab1BpyqZ8trOPJJYQRQ9IbOHAZaFQ+T3EOXBXIS9bGxonwsz001ZjpbK6/6UXj/M
IwUcxAOWRANFYPJYr4JjX8dPxFkojTNSVhnjAz6T2nEX2f30Jd3Jpl5lDxOeSN3i
/XkYcnzJK7mcOi6MEWuOyGacdVX6JIuoMV0WET4rbqZvm3zQEma4LUkZwvNdklhT
8CZ3bp+80CeG+kyFTRGqetW3XCGS4SgxnwcnAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUwV1TVN35c1PZqVNJDB6cPjdRLrIwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvd1YxVFZOMzVjMVBa
cVZOSkRCNmNQamRSTHJJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw
GAMEAiv6dAMEAmfruAMEApby4AMEA9vqCDANBgkqhkiG9w0BAQsFAAOCAQEAcAtR
ql2/t6P+v0US8Y/A7dR1cArY1N1sEjmozon2GGqSM+oEg5dHphbQSMIRNf5q6aJX
yvjnTrk86gjBHFlYhW8UEKlSxqXs7Ie9VXvxQ+2hvBphbwYAQJyoG48b0Zx7bHYz
gmkwgXL4705CbQoEUiFkfVnkrrdszWhzJ1nffRwWtABYh2tEIU3UUGVogC6jcH4Y
i9JlfkuHdQQVixdkc5zx5mg4pTBMetzzO+vAl3/GfzMXC9Zeg6ARZjsJImpion3v
+kONCtCBFUMKXkXLRfJV4iqj1TSiU4ULW9BPb5wfNNh4V2TBxC/XzASvpa5IE2/5
X31oXdOcod7wjyCuhg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org