Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/-d8tjsyW0BO8dKNpQ7moLgttjSw.roa
File: -d8tjsyW0BO8dKNpQ7moLgttjSw.roa (raw, json)
Hash identifier: lT/hp6tkPIPZDdjpJ5jcJZv+0zyYy+q424hYElsbmo0=
Subject key identifier: F9:DF:2D:8E:CC:96:D0:13:BC:74:A3:69:43:B9:A8:2E:0B:6D:8D:2C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 085E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-d8tjsyW0BO8dKNpQ7moLgttjSw.roa
Signing time: Wed 14 Jun 2023 07:24:03 +0000
ROA not before: Wed 14 Jun 2023 07:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2142 (0x85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 07:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=F9DF2D8ECC96D013BC74A36943B9A82E0B6D8D2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:5b:6b:65:1a:ec:b9:5b:9a:c0:94:8c:f0:
73:96:de:0d:d3:e4:f3:89:a2:51:b3:0b:06:38:b9:
6f:20:46:25:2d:af:40:20:e2:00:22:ad:ac:52:ee:
45:bd:fd:fe:3f:b4:e9:7f:f6:34:44:59:df:d6:e1:
45:62:67:f8:b9:38:48:28:9a:55:3a:e2:9a:25:ee:
0c:20:1e:0d:7d:25:a2:1d:87:f8:66:fb:b6:87:bc:
bb:52:40:f6:8d:bd:29:e6:50:ec:4d:35:62:b8:82:
f2:10:20:4d:48:bc:13:ea:3d:ac:84:d4:7d:cc:38:
90:79:a8:db:bf:77:84:de:21:ee:ff:fd:aa:f4:82:
7c:a1:a2:fd:ec:3b:f1:43:bd:06:28:89:87:79:7b:
33:80:e5:b4:b1:f4:c7:d1:60:82:72:ca:d1:ad:e9:
5e:0d:76:8a:03:91:6b:b4:15:26:fa:31:f3:72:7c:
cf:bf:e4:40:ad:85:4d:ab:bf:ff:b6:d8:df:c2:aa:
4c:b2:3c:35:2a:5a:d2:1d:cc:10:9a:03:c5:8c:f4:
24:90:f8:50:16:de:6f:35:8c:95:b5:b7:6a:b3:59:
91:b1:1c:7e:e8:94:8c:69:e3:2a:be:01:cc:87:55:
fc:71:53:86:48:59:45:58:b7:f4:e2:05:7a:24:c0:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DF:2D:8E:CC:96:D0:13:BC:74:A3:69:43:B9:A8:2E:0B:6D:8D:2C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-d8tjsyW0BO8dKNpQ7moLgttjSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:2f:f5:90:c4:96:da:ea:3c:c0:35:fe:ea:bf:5e:67:e9:e9:
bd:c7:8a:9a:39:2f:90:1b:6d:2e:a7:20:0a:e6:1b:8a:d6:3e:
1b:63:cb:86:c0:e7:5c:79:a3:45:10:19:1b:f3:aa:9e:ab:69:
a9:bf:1f:fd:d8:d9:27:24:af:31:5d:4a:49:6d:54:c1:86:dd:
80:50:9b:8a:34:c0:82:5b:ae:40:97:cb:b0:b0:5b:82:d5:91:
58:2f:b9:49:0f:7e:2f:dc:28:5c:14:57:7b:2a:b1:01:aa:6d:
b9:3a:fb:cf:2f:93:16:e0:2b:33:74:35:d0:9b:b1:09:a5:2c:
34:a8:d6:9a:ee:ca:6f:24:99:a4:a3:14:1a:2d:cd:51:fd:1d:
91:0b:f2:3e:18:7a:d2:6e:10:95:8a:c9:9d:38:d8:39:34:85:
3f:7c:c5:17:50:3a:c4:bf:c6:f2:7f:d2:5d:87:bd:c6:95:31:
d4:64:96:a2:32:a9:56:49:47:dc:0c:1a:83:2f:63:87:f3:ca:
c7:38:b8:fa:32:cb:ab:25:6b:8b:9c:3f:f0:13:09:12:05:32:
30:d3:f5:55:44:fa:52:56:26:04:93:c8:35:d8:4c:7a:2c:d0:
c1:c3:95:74:31:62:25:c0:12:96:39:65:09:23:6f:39:06:b4:
f1:86:61:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org