Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/-XClErt_7xpv8ovmFLn87WyFvO8.roa
File: -XClErt_7xpv8ovmFLn87WyFvO8.roa (raw, json)
Hash identifier: PL9X/oFC/FQldjx7gr7ntDh5FFmfE5e/JEY1p3r/y9Y=
Subject key identifier: F9:70:A5:12:BB:7F:EF:1A:6F:F2:8B:E6:14:B9:FC:ED:6C:85:BC:EF
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 088A
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-XClErt_7xpv8ovmFLn87WyFvO8.roa
Signing time: Wed 14 Jun 2023 12:54:05 +0000
ROA not before: Wed 14 Jun 2023 12:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 12:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=F970A512BB7FEF1A6FF28BE614B9FCED6C85BCEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:86:0b:b3:f4:2b:47:5b:37:f4:8a:7c:ee:
48:38:94:3f:3b:84:7c:9e:23:c2:dd:d4:26:4e:87:
63:6a:a9:25:9b:62:29:16:12:c2:56:c3:15:85:3a:
58:01:a9:1e:71:01:8e:24:82:fc:19:af:79:ca:80:
a2:d0:3e:96:91:a1:7d:f5:fc:42:ea:1a:5d:2c:b2:
a2:e6:e0:7d:4f:5c:34:de:ff:01:98:63:94:21:11:
4c:16:4c:5a:d4:00:fc:c3:d3:ef:1d:5c:f9:d7:1f:
21:3d:49:a2:f6:0c:35:20:ab:fa:cf:96:49:93:6a:
2d:03:e3:ed:31:46:e7:69:ff:84:46:62:ee:72:a5:
25:72:63:d5:e6:bd:af:70:f6:b5:e1:85:db:c9:78:
1f:df:3d:1d:bf:c0:a9:16:b4:0b:b0:32:ca:fc:59:
5c:f9:97:04:8c:ce:d7:0f:bb:fd:c8:0f:0d:38:c8:
30:49:80:72:80:61:dc:cf:d5:a5:49:3e:bd:52:bf:
8e:45:97:d9:47:31:a1:23:e0:8e:1a:a6:e2:db:88:
f5:fc:9d:56:aa:0e:14:9d:91:b1:53:41:37:0b:79:
92:69:dc:ec:bd:4a:b7:21:f4:34:e1:66:50:d6:9a:
9d:6f:29:d3:08:34:04:75:7c:45:da:15:57:b1:7a:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:70:A5:12:BB:7F:EF:1A:6F:F2:8B:E6:14:B9:FC:ED:6C:85:BC:EF
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-XClErt_7xpv8ovmFLn87WyFvO8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
17:ab:cb:b7:78:74:1e:6a:2a:e3:77:8e:c3:72:06:15:d3:25:
7d:42:6d:f8:b1:90:97:18:a6:3d:e5:9e:78:e4:e5:77:16:56:
01:a9:34:be:02:c5:d2:f0:91:ac:80:b4:4b:9b:d6:02:d0:20:
9a:d6:04:43:60:0b:3f:e5:64:4a:08:5c:66:49:7c:0f:99:56:
ee:2f:03:22:9b:81:6a:54:11:6c:63:63:9f:bd:a3:9a:7a:9d:
14:84:08:a7:ff:41:75:2e:16:b8:ea:34:77:a6:40:cb:f3:d7:
21:76:42:95:f8:6f:1b:0a:49:99:6f:b4:5c:7b:e8:34:6b:8e:
19:be:28:6b:3d:e6:2a:e8:95:5f:0c:dc:b1:fa:a8:06:d5:e0:
c2:4b:d9:e8:b8:91:64:58:88:ee:9c:7f:ef:1b:c6:92:16:46:
16:b6:76:56:10:83:8b:5f:13:68:29:cc:e2:03:dd:7c:41:9a:
26:bb:0f:12:d0:5c:d4:fa:ad:cc:b0:b2:42:a6:7b:b5:8e:6b:
03:1a:c1:e3:32:ec:5e:1e:97:bc:e3:d6:fa:44:e1:b4:e0:0f:
ea:18:c4:21:f6:33:51:31:c6:86:8c:2c:3b:67:f6:11:4a:d7:
26:65:d7:e6:9a:e4:be:05:a7:a1:65:4d:07:ac:ad:32:1c:38:
15:57:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org