Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/yOXlRuSgcKAHQIjdIlBN9awBLrU.roa
File: yOXlRuSgcKAHQIjdIlBN9awBLrU.roa (raw, json)
Hash identifier: FUKQ+NonSt4LI/oUnrRH1HDIxlyvKX1SC3j2PruipBY=
Subject key identifier: C8:E5:E5:46:E4:A0:70:A0:07:40:88:DD:22:50:4D:F5:AC:01:2E:B5
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0845
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/yOXlRuSgcKAHQIjdIlBN9awBLrU.roa
Signing time: Wed 14 Jun 2023 04:24:05 +0000
ROA not before: Wed 14 Jun 2023 04:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 04:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=C8E5E546E4A070A0074088DD22504DF5AC012EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:09:da:d3:fd:0e:dd:14:23:65:da:4d:37:
ee:ef:30:28:bd:46:28:6a:4c:a6:6e:2d:7f:1d:87:
05:87:65:18:9c:50:2e:34:4d:c6:a8:45:9e:c6:e5:
0e:77:fc:85:74:79:1e:57:25:ee:42:6e:40:98:b5:
b2:80:12:f3:da:73:6f:e5:1c:a2:2d:f6:08:ad:57:
4f:46:a2:69:6c:82:a6:d3:56:fb:34:10:0a:fc:3c:
67:3c:d8:45:27:20:84:33:28:a7:49:08:27:b8:c4:
f4:cb:c7:0b:29:e3:15:a9:f4:1b:b5:22:a1:5a:a6:
3c:04:71:b8:a3:21:32:33:8a:b0:2b:37:9e:6a:91:
7d:3e:06:cb:5c:99:d0:a7:56:d7:da:89:d5:a6:a9:
9e:4c:34:0d:81:b8:cd:cf:67:c6:3e:19:ca:3b:14:
d5:e9:84:26:00:a5:b7:40:43:69:b7:c2:06:74:d3:
b7:d2:40:35:25:3f:7e:de:3f:a8:f1:8e:7c:7e:e8:
2b:cb:d9:50:2b:f6:61:96:32:03:5e:3d:02:82:36:
0d:2c:36:b9:1d:a4:49:fa:84:bf:d4:ab:a6:85:c2:
92:7c:78:96:a4:e1:d8:35:f1:99:5e:50:e0:85:d4:
56:ae:e6:0c:44:cb:43:5c:2e:f1:ef:34:11:a6:c0:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:E5:46:E4:A0:70:A0:07:40:88:DD:22:50:4D:F5:AC:01:2E:B5
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/yOXlRuSgcKAHQIjdIlBN9awBLrU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:68:7c:99:9a:59:fa:19:d6:59:05:82:39:10:a5:46:4a:34:
75:d5:3b:92:75:6b:da:ae:2f:23:d5:55:7c:79:1d:ff:bc:2b:
38:d4:41:ad:ce:06:f2:fc:6d:e6:9a:0f:15:c8:f0:69:e2:5a:
ec:6a:9b:b2:19:48:d6:11:12:78:c8:aa:6d:5f:0c:ff:db:64:
c1:c4:28:f1:ba:4e:4e:53:cb:5c:bc:5f:12:7d:9b:1c:4f:55:
00:9d:e0:53:40:2c:6e:97:2f:fe:ce:65:30:93:99:c2:1b:c7:
a3:0f:d4:f9:30:e6:a7:20:24:7f:21:c9:71:9f:05:e0:5d:0c:
34:8d:51:eb:3a:97:99:06:53:7d:4c:a6:3e:c5:bb:c1:f8:2f:
b6:bd:c3:90:81:a4:41:53:01:79:e3:1d:08:72:09:17:7b:6c:
33:04:1f:e5:53:47:0d:3b:16:bd:d5:dc:c3:7e:92:21:53:d9:
88:d7:3e:18:16:8c:21:de:1b:32:41:62:00:3f:30:d8:8f:86:
d8:bf:96:07:e0:ac:56:ef:84:b9:99:4a:a3:75:1a:97:86:3d:
ed:6f:b0:d3:5f:2f:26:e2:26:a9:55:e1:71:a6:ee:2c:96:64:
9b:19:7f:f3:75:be:7a:21:3f:86:7d:ab:f6:32:bf:e5:6b:b8:
91:9d:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org