Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/KjIXf10IdBelhsg2wRhtF5X-5Yc.roa
File: KjIXf10IdBelhsg2wRhtF5X-5Yc.roa (raw, json)
Hash identifier: Hej8JAkv5v55+BrUPtI4x4ArFLb2sRwZpdmTSxlr55c=
Subject key identifier: 2A:32:17:7F:5D:08:74:17:A5:86:C8:36:C1:18:6D:17:95:FE:E5:87
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 091E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/KjIXf10IdBelhsg2wRhtF5X-5Yc.roa
Signing time: Thu 15 Jun 2023 05:54:05 +0000
ROA not before: Thu 15 Jun 2023 05:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 139021
IP address blocks: 43.250.116.0/22 maxlen: 24
103.235.184.0/22 maxlen: 24
150.242.224.0/22 maxlen: 24
219.234.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2334 (0x91e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 05:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=2A32177F5D087417A586C836C1186D1795FEE587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:b1:18:1a:98:34:a4:b8:97:59:c0:ad:32:
cc:55:e6:0f:89:8b:98:74:04:e0:6e:bb:85:09:e0:
27:9b:b5:d4:20:4f:71:7b:20:aa:ef:1c:22:c1:37:
76:0b:05:97:72:fe:f2:3b:9f:f5:45:de:de:bb:11:
a1:2b:08:d5:2b:dd:b2:c1:bc:cc:03:3c:2e:2e:39:
64:0d:98:8a:93:11:6b:8f:b0:2a:19:46:04:18:95:
28:57:51:60:b7:4e:24:d0:77:05:82:5b:45:4e:f4:
f9:cc:c6:b3:ec:ee:d9:19:cc:ca:40:2c:f2:8d:d8:
4c:b6:a2:e8:09:c9:9f:7e:24:81:42:b9:60:e7:31:
68:d6:ba:9a:f1:93:7e:72:2e:c1:3c:39:fe:d0:31:
ea:0f:c4:f5:91:a6:53:41:99:17:92:4e:c8:00:df:
b9:00:cd:9e:a4:b1:bb:17:04:71:e6:d8:03:14:7c:
37:b6:2d:5b:82:b7:30:1c:26:ca:d0:c3:f8:b2:0e:
19:03:bd:ac:2d:46:ee:8e:f6:38:aa:5e:db:79:98:
01:da:33:c5:43:c0:28:e5:3c:d6:38:cb:e8:4e:b2:
fd:e4:3e:d4:30:36:db:3a:66:a7:4f:14:a3:7b:d7:
91:92:71:dc:9f:e8:e0:f7:3b:8b:74:7a:0a:d6:91:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:32:17:7F:5D:08:74:17:A5:86:C8:36:C1:18:6D:17:95:FE:E5:87
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/KjIXf10IdBelhsg2wRhtF5X-5Yc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.235.184.0/22
150.242.224.0/22
219.234.8.0/21
Signature Algorithm: sha256WithRSAEncryption
99:22:af:14:c0:00:74:66:e7:54:d9:7c:29:de:16:f7:6d:be:
09:69:9e:46:42:8c:d8:80:e9:73:cc:48:ec:d3:de:5c:19:eb:
de:0a:de:df:2a:ec:56:9e:61:22:eb:51:d0:db:f0:75:ab:2c:
bb:36:cd:ec:2e:2b:0c:16:1f:80:aa:c2:5c:21:11:ed:00:e3:
3b:d0:01:6a:43:15:db:33:e0:73:b8:63:47:1e:17:2c:b2:43:
8c:2f:23:e4:2b:ae:32:f4:63:3a:70:b8:d6:f7:1c:f6:3e:2e:
0c:96:be:5e:6d:25:a5:97:a8:2c:95:b2:01:1f:74:f6:ec:8e:
2c:e1:0a:68:6e:04:00:ac:6a:12:66:81:9d:31:2f:d1:96:f2:
ab:13:b7:67:72:e5:ac:47:15:7a:fc:93:76:32:1f:46:0e:4a:
c6:9e:54:d9:ea:11:9d:63:4a:5e:4e:28:6d:f1:c9:fb:1b:19:
09:5b:ee:1c:2b:ea:a4:0e:a8:eb:cd:a7:9c:43:aa:81:7d:87:
4a:8f:42:04:ee:b8:a2:69:f3:c2:0c:d9:ff:fa:96:a3:d9:d5:
77:d4:25:81:c7:08:d4:66:b4:50:60:2d:0c:1d:a4:25:d3:a6:
b0:f1:1b:38:1e:42:65:83:c1:50:5d:e0:e2:e9:98:0e:e7:2a:
7d:1a:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:24:44 2025 by rpki-client