Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/-4ZJQ6DHYJ6NXgXFJAvUaYviMPo.roa
File: -4ZJQ6DHYJ6NXgXFJAvUaYviMPo.roa (raw, json)
Hash identifier: VaRPcA2UEWFJ7ZAhNb4jQXhsAV0Gx60ZUfUSnLT+8Gg=
Subject key identifier: FB:86:49:43:A0:C7:60:9E:8D:5E:05:C5:24:0B:D4:69:8B:E2:30:FA
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07BE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-4ZJQ6DHYJ6NXgXFJAvUaYviMPo.roa
Signing time: Tue 13 Jun 2023 11:24:11 +0000
ROA not before: Tue 13 Jun 2023 11:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1982 (0x7be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 11:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=FB864943A0C7609E8D5E05C5240BD4698BE230FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:e5:6c:2e:f8:2e:72:75:57:63:ff:e4:f6:
ca:f8:a1:6f:6d:56:dc:a2:8a:dd:d8:4b:29:a1:6c:
16:82:a4:7c:ed:88:22:8c:f1:ad:33:2b:ad:06:64:
68:e2:d5:ea:51:8c:02:63:57:a6:40:67:69:89:15:
ed:c1:96:5a:ab:80:99:3b:67:f9:e9:cc:a5:da:4d:
98:7b:dd:22:e2:a6:ce:f6:63:c9:73:cc:36:dd:bb:
ad:c1:ef:91:82:86:88:2c:b4:c1:c0:c7:8a:a4:7b:
69:c0:76:57:bd:ef:75:c8:7c:e1:ce:72:53:92:42:
3f:ad:88:64:6f:78:8a:ac:3e:9b:4a:06:f9:73:ef:
f1:5e:04:1d:64:4a:4b:8b:ac:02:83:e6:d1:44:00:
9a:20:98:a9:a8:01:33:09:ae:3d:be:0d:87:cd:c3:
59:22:53:0a:d0:c3:43:ae:a9:3f:3e:de:64:a5:61:
7b:23:0e:16:e8:ab:e6:0f:da:cb:0b:95:fa:1f:db:
d8:94:af:37:2c:57:b7:23:0c:2c:4b:07:d7:23:e2:
9b:46:50:72:a3:c0:24:58:29:60:00:6e:fd:a2:42:
88:fe:43:82:b1:b8:37:24:c1:c0:d8:a2:c6:27:92:
aa:a3:95:d4:2f:74:92:c5:fb:3b:ba:7c:cf:69:86:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:86:49:43:A0:C7:60:9E:8D:5E:05:C5:24:0B:D4:69:8B:E2:30:FA
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-4ZJQ6DHYJ6NXgXFJAvUaYviMPo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:a3:ec:31:db:a6:7f:fc:27:fa:64:76:2b:95:8e:81:31:49:
1b:fb:ed:8f:37:76:4a:de:50:bb:5c:65:54:4b:46:e6:26:e2:
07:cf:59:fd:fa:d7:ef:85:9f:4a:4a:4e:e3:9a:9a:2d:e6:94:
63:3b:17:7f:1d:83:0b:20:db:2a:5c:ee:75:db:33:77:91:b5:
2d:3b:29:17:c6:d0:96:dd:dd:51:d6:24:ec:4e:c7:41:b2:74:
70:d9:f0:10:21:20:4b:03:46:b5:6f:0c:c7:6d:9d:f4:9b:a5:
58:f9:fa:5e:22:4c:92:8c:ad:66:62:b2:9d:f7:eb:74:0f:96:
c5:23:36:db:6e:2c:94:5d:ad:c0:e4:6f:2d:b7:a4:5f:35:1a:
66:d9:0e:42:02:60:75:e9:4f:40:ef:f7:c9:c3:4b:cb:c5:73:
78:40:0b:d1:f9:29:d9:29:39:7d:0f:4a:1a:83:3b:5a:f1:f0:
07:4e:e7:68:30:ef:ab:2c:5d:02:d9:0b:e9:0b:71:af:5f:59:
4c:2c:ef:ca:55:3d:93:1c:ec:36:21:39:ea:78:1a:93:26:dd:
36:0c:c5:42:6b:52:d8:08:bb:e6:26:ca:fd:69:b8:49:77:f5:
23:e1:07:f5:00:bc:ac:5f:32:c5:da:22:c5:40:e2:a0:6e:5f:
53:89:8e:68
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICB74wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
MTI0MTFaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEZCODY0OTQzQTBDNzYw
OUU4RDVFMDVDNTI0MEJENDY5OEJFMjMwRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBwuVsLvgucnVXY//k9sr4oW9tVtyiit3YSymhbBaCpHztiCKM
8a0zK60GZGji1epRjAJjV6ZAZ2mJFe3BllqrgJk7Z/npzKXaTZh73SLips72Y8lz
zDbdu63B75GChogstMHAx4qke2nAdle973XIfOHOclOSQj+tiGRveIqsPptKBvlz
7/FeBB1kSkuLrAKD5tFEAJogmKmoATMJrj2+DYfNw1kiUwrQw0OuqT8+3mSlYXsj
Dhboq+YP2ssLlfof29iUrzcsV7cjDCxLB9cj4ptGUHKjwCRYKWAAbv2iQoj+Q4Kx
uDckwcDYosYnkqqjldQvdJLF+zu6fM9phj8FAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU+4ZJQ6DHYJ6NXgXFJAvUaYviMPowHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvLTRaSlE2REhZSjZO
WGdYRkpBdlVhWXZpTVBvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAS6PsMdumf/wn+mR2K5WOgTFJG/vt
jzd2St5Qu1xlVEtG5ibiB89Z/frX74WfSkpO45qaLeaUYzsXfx2DCyDbKlzuddsz
d5G1LTspF8bQlt3dUdYk7E7HQbJ0cNnwECEgSwNGtW8Mx22d9JulWPn6XiJMkoyt
ZmKynffrdA+WxSM2224slF2twORvLbekXzUaZtkOQgJgdelPQO/3ycNLy8VzeEAL
0fkp2Sk5fQ9KGoM7WvHwB07naDDvqyxdAtkL6Qtxr19ZTCzvylU9kxzsNiE56nga
kybdNgzFQmtS2Ai75ibK/Wm4SXf1I+EH9QC8rF8yxdoixUDioG5fU4mOaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org