Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/z_r3dj9MRqjOGQWkD0jl8roGg6E.roa
File: z_r3dj9MRqjOGQWkD0jl8roGg6E.roa (raw, json)
Hash identifier: yOKdf9m2AipYFTT3ZpT9yjbK2+R/TzU49lHwsyMJBKs=
Subject key identifier: CF:FA:F7:76:3F:4C:46:A8:CE:19:05:A4:0F:48:E5:F2:BA:06:83:A1
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0889
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/z_r3dj9MRqjOGQWkD0jl8roGg6E.roa
Signing time: Wed 14 Jun 2023 12:54:05 +0000
ROA not before: Wed 14 Jun 2023 12:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 12:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=CFFAF7763F4C46A8CE1905A40F48E5F2BA0683A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:ba:e2:d2:2f:0d:ec:a6:e8:98:83:b4:d5:
9b:69:0c:5b:78:d6:41:ea:09:96:72:ad:d8:38:66:
b0:d4:10:21:15:f6:83:26:2e:11:b1:bc:83:2d:22:
1d:ef:95:b8:74:a0:e1:52:f9:7a:36:61:fe:b5:cf:
98:1b:26:c4:77:df:bd:16:f6:7c:46:34:3d:8c:95:
1f:ab:2d:0f:b6:e6:15:e2:e0:7e:9e:99:ae:12:32:
f8:ef:a7:17:99:3b:29:2a:d6:b9:41:3d:7d:f7:3e:
eb:b3:c2:eb:69:bc:56:99:be:04:b1:b8:87:31:ef:
b2:48:34:32:73:13:b3:25:17:ad:a6:b6:5e:69:9d:
38:bf:c5:f4:34:bd:a9:41:c7:b7:c8:c2:6a:92:5d:
af:19:b9:1b:c8:04:78:3f:68:e6:eb:77:db:cd:54:
04:be:e4:c9:aa:ee:b2:83:fe:c3:85:72:7e:36:e6:
00:43:8d:db:d9:9d:c2:03:97:0c:6f:cd:bf:38:f3:
40:69:77:b1:cc:5f:ee:ef:73:7d:b8:52:4f:8a:59:
36:b8:16:45:8a:a4:91:00:9a:67:28:35:38:73:ea:
68:46:48:15:c2:90:f7:a4:47:06:cb:9c:25:e4:82:
6d:4e:a9:d7:bc:79:6f:b3:89:25:2f:78:33:8a:b6:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FA:F7:76:3F:4C:46:A8:CE:19:05:A4:0F:48:E5:F2:BA:06:83:A1
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/z_r3dj9MRqjOGQWkD0jl8roGg6E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
20:af:38:1c:1f:7f:fb:61:f6:b1:75:b4:9c:e2:45:1b:85:5c:
fb:22:15:c6:e6:1e:a6:eb:ba:ac:db:f4:63:f9:bc:ff:02:66:
87:13:cb:23:b4:e2:0e:f8:11:6c:32:ac:0b:d7:73:90:fa:1f:
8e:56:05:4e:91:84:3e:5b:4a:ef:d0:35:0e:81:73:c2:58:29:
07:ae:dd:f5:87:88:1b:5e:09:8b:1d:ce:8d:b7:28:58:47:ab:
e2:09:49:aa:2d:d5:df:a0:e7:0d:83:3d:ab:1e:d0:ab:78:66:
9f:eb:dc:45:46:a3:8d:59:32:7b:90:42:b1:df:5e:07:17:f8:
ad:e5:ab:62:ba:90:04:6a:ee:8d:73:d7:ee:62:e2:5a:91:3f:
3a:19:35:ad:5d:9a:fd:6f:c9:8d:3e:a9:ee:83:b0:0d:bb:90:
51:3d:ff:32:e8:b1:40:a5:d7:1d:84:48:55:c6:7b:d2:3a:83:
28:07:c2:c1:15:ca:0b:99:24:98:1b:a0:46:86:5b:d9:09:76:
f6:c8:d6:30:5f:2c:8d:07:e8:f4:2b:cb:2e:ee:e6:82:99:03:
f1:d4:c0:ff:14:b3:18:0a:22:ab:4d:e1:52:95:0e:b9:2a:2a:
b1:7a:cb:fe:21:0a:fe:5f:cb:81:8b:6b:c6:29:cb:65:70:7a:
34:cd:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:02 2024 by rpki-client on console-fra.rpki-client.org