Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/-j_7vHISGViuo0b54Bf4CH-MAvw.roa
File: -j_7vHISGViuo0b54Bf4CH-MAvw.roa (raw, json)
Hash identifier: 1V2jVHHd7Im9wVIRL6vAj/X3BDxBC2urZQ8fobrrhuA=
Subject key identifier: FA:3F:FB:BC:72:12:19:58:AE:A3:46:F9:E0:17:F8:08:7F:8C:02:FC
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08B6
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-j_7vHISGViuo0b54Bf4CH-MAvw.roa
Signing time: Wed 14 Jun 2023 18:24:08 +0000
ROA not before: Wed 14 Jun 2023 18:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230 (0x8b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 18:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=FA3FFBBC72121958AEA346F9E017F8087F8C02FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:f8:2b:3f:8a:6a:08:5a:07:d5:eb:00:7f:
b6:91:df:50:0b:da:11:88:83:64:cc:fe:cc:ea:2f:
33:f2:ec:19:cf:c7:85:4c:b9:f4:a7:91:07:80:31:
2f:f0:93:4c:d8:a8:02:5c:c2:a4:83:c1:a3:98:a5:
15:a3:cc:1b:14:8d:c6:5e:1c:f1:af:f5:b2:ea:2d:
68:e8:b1:16:25:0c:97:9e:51:3c:8f:52:e2:1a:5d:
18:51:c6:24:ac:e8:ea:be:20:c5:7b:9f:bf:bc:26:
ce:e9:65:64:e8:e5:08:2b:78:21:1e:f7:21:de:e3:
41:21:cd:77:ab:2b:c7:49:89:cf:ad:41:f3:47:22:
0d:38:86:5a:fb:00:23:f1:cc:b7:eb:dc:54:4e:fa:
4e:82:0c:fe:4d:1a:b7:f8:fe:e6:01:49:f8:29:67:
c8:db:b5:d2:d2:e0:a2:3d:40:81:87:c8:70:0f:04:
a6:78:e4:06:74:1b:58:e2:a1:a3:b6:3a:ac:0c:96:
e7:30:b8:04:5a:34:03:7a:c9:01:29:85:44:a9:a9:
d2:29:a6:ad:6d:57:4e:96:62:93:89:a1:98:b2:a7:
59:02:e9:7d:0d:58:5d:e3:d8:a9:eb:f2:d1:ae:1e:
bb:09:cf:53:b1:c8:20:c7:2a:fd:e6:1f:20:4c:23:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3F:FB:BC:72:12:19:58:AE:A3:46:F9:E0:17:F8:08:7F:8C:02:FC
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/-j_7vHISGViuo0b54Bf4CH-MAvw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:07:e2:0c:25:00:9a:b9:3f:4c:2a:4b:ad:5d:6a:64:51:4f:
4d:2e:2d:1d:f4:db:c4:b3:8e:28:6d:47:f2:1d:10:3d:3e:0b:
26:1f:c0:fe:fb:c3:6f:87:6a:e4:23:82:5a:0d:1f:fe:bc:6c:
36:cd:f9:74:30:d2:77:74:51:2c:40:77:d5:25:ff:a6:3c:20:
f8:f2:05:3e:a3:2c:dc:bb:d7:98:87:d0:e9:cb:3e:ec:f1:e5:
4f:84:ac:8f:4f:54:72:1f:0b:b7:47:22:45:ee:a4:12:4a:b1:
d4:5a:67:a8:66:7e:51:aa:14:54:cf:50:b5:aa:65:0c:d9:c5:
ed:73:66:83:83:ca:2a:a7:41:2b:d3:99:4c:1f:21:55:4b:47:
35:a1:c1:0b:98:1d:54:80:76:55:75:21:95:10:87:cc:cf:16:
11:55:cd:37:35:5f:4c:04:d2:1b:c2:fd:03:82:cb:01:3a:0f:
fb:49:ee:d3:c8:ee:7b:54:bd:fb:ad:75:1f:77:a3:e1:13:2b:
1f:08:f4:61:51:a0:3a:3b:d1:61:ff:30:40:32:52:01:dc:af:
e7:58:a1:20:bd:62:c0:85:14:70:24:22:34:65:07:f5:bf:2b:
70:6b:b0:ab:b6:22:37:31:01:c6:05:46:39:2f:06:d5:ea:9f:
af:3b:b9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org