Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/z0rpCqNKjRkV8alj0FLlxPiT8x4.roa
File: z0rpCqNKjRkV8alj0FLlxPiT8x4.roa (raw, json)
Hash identifier: XRjadylwKk8Izc4YqUTwqoQAu3/5ldDrK2A/OaWPmVs=
Subject key identifier: CF:4A:E9:0A:A3:4A:8D:19:15:F1:A9:63:D0:52:E5:C4:F8:93:F3:1E
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08B1
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/z0rpCqNKjRkV8alj0FLlxPiT8x4.roa
Signing time: Wed 14 Jun 2023 17:54:05 +0000
ROA not before: Wed 14 Jun 2023 17:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 17:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=CF4AE90AA34A8D1915F1A963D052E5C4F893F31E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:70:25:ee:e2:79:42:ed:b8:ba:63:aa:42:
d7:ce:d1:27:d4:2a:d3:07:66:9b:29:0a:d7:5e:3e:
79:02:0b:42:2d:e1:d7:83:92:42:d2:52:6c:41:c4:
ee:ef:fe:5f:05:e6:5b:cd:71:b7:aa:c6:b3:57:07:
bf:be:90:39:db:53:85:92:d1:51:e9:d5:14:8a:f1:
b1:96:91:6a:c8:9d:8c:45:ca:e5:72:8f:c1:8f:f1:
ac:ad:97:59:aa:f4:c6:29:54:ee:be:bb:1f:a8:f6:
61:5b:22:2c:4b:41:95:f2:65:0c:c3:0a:35:24:74:
25:41:05:2f:1a:d3:87:c8:f1:65:e2:ec:d9:9d:72:
f9:99:76:eb:2c:c0:a6:ec:82:49:86:f5:7b:51:64:
67:5b:19:f5:61:0d:1c:92:2c:2e:08:82:ed:d9:60:
77:dd:be:41:3e:e0:52:17:7f:39:ba:c6:82:e8:4e:
1a:5b:53:74:68:45:fd:35:c5:62:9f:f8:20:b1:96:
21:e7:0b:45:eb:7f:63:ad:52:c1:4f:2e:d5:78:11:
ef:66:d5:6a:70:e3:35:33:03:5e:44:4f:45:d4:c7:
78:00:4e:98:01:07:f4:00:7a:5e:01:3e:de:8e:dc:
ed:3e:9a:e4:1d:d5:44:34:a8:5f:d4:4a:4f:87:2c:
3b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4A:E9:0A:A3:4A:8D:19:15:F1:A9:63:D0:52:E5:C4:F8:93:F3:1E
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/z0rpCqNKjRkV8alj0FLlxPiT8x4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:8c:83:7d:ff:20:c6:42:5a:0d:a2:cc:8c:30:87:80:d1:b0:
4c:86:98:17:fb:f7:d6:f0:69:d0:b8:e4:58:1f:6c:77:8e:8f:
a9:e5:ad:4c:dc:8b:b0:11:67:b2:af:78:fe:0b:66:d4:d7:3e:
1c:aa:4d:b1:47:20:72:99:df:f1:7a:1d:06:fc:47:e9:2d:da:
58:a5:e3:f6:a2:d3:3a:0d:a6:ea:6f:9f:1d:eb:f8:6f:e1:4e:
c5:e3:70:c3:77:57:96:ff:86:64:79:7f:4c:90:cc:44:10:d7:
ec:8e:40:a9:99:b9:18:dc:59:fb:67:13:a3:b6:25:6d:da:10:
c6:2c:f8:2c:a6:cf:e1:24:4c:7f:69:8d:02:c2:79:ea:5a:86:
33:76:30:86:4b:f0:ee:70:61:7c:ae:4f:55:e1:c1:2f:40:eb:
da:8a:3b:6c:57:6a:5f:e3:ef:58:ac:6e:a0:96:63:ed:31:69:
63:03:c2:d1:3f:17:55:5c:55:ca:71:7a:a6:6b:b1:26:1d:db:
d4:fa:f1:1e:8e:1a:9d:5e:98:ef:de:fb:da:2f:7f:76:56:c2:
96:8c:a7:06:c0:d7:23:c1:dc:30:7f:39:9b:bd:47:56:3d:00:
c7:16:07:1d:fa:23:34:49:9b:bc:55:60:1f:74:a2:38:ed:94:
48:4b:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org