Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/0WxDHlk0aHV8hVtfxcImjqa60O8.roa
File: 0WxDHlk0aHV8hVtfxcImjqa60O8.roa (raw, json)
Hash identifier: a2oKq2cj7i4cIpbg4s/PzfgTKwWHk8exMoSPG4SyrwQ=
Subject key identifier: D1:6C:43:1E:59:34:68:75:7C:85:5B:5F:C5:C2:26:8E:A6:BA:D0:EF
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0832
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0WxDHlk0aHV8hVtfxcImjqa60O8.roa
Signing time: Wed 14 Jun 2023 01:54:10 +0000
ROA not before: Wed 14 Jun 2023 01:54:10 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098 (0x832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 01:54:10 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D16C431E593468757C855B5FC5C2268EA6BAD0EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:47:8d:02:e9:95:59:a4:76:47:97:52:9a:
7f:8b:8b:ec:34:fa:08:9f:23:15:9c:e0:b6:8e:e7:
63:5b:d0:74:e5:56:74:d2:86:b2:67:f5:6b:26:c1:
40:9a:45:a6:3c:d9:66:80:53:2a:63:70:5e:ed:c6:
c0:5a:47:ef:0c:51:75:ad:ff:9c:60:27:fe:07:d6:
bc:c9:32:a7:3e:65:90:bc:87:15:53:42:b5:79:05:
c7:33:ca:cd:a0:80:ae:6e:db:f2:f5:1b:ac:05:15:
42:c6:1f:80:6f:d3:f5:78:b6:da:7f:e0:ae:76:32:
90:9b:fe:35:98:e1:cf:ce:49:cd:15:a5:bf:ec:fd:
98:c6:1d:ca:ec:7e:b1:75:be:d0:df:84:1e:82:14:
a3:a0:c6:33:b8:9e:ee:ce:c1:c3:b8:e9:51:17:1c:
e5:4d:4a:3b:a2:25:a8:03:75:fc:e7:de:22:da:e0:
1a:2b:a6:8b:d5:a4:6f:03:05:c2:b6:78:df:66:db:
aa:3d:ea:d7:96:b0:04:4e:45:b5:26:77:a8:4f:60:
a5:8d:48:35:0e:31:b4:e1:50:25:8b:d1:16:3b:f6:
e2:fd:dd:b4:cc:80:17:45:3c:a2:a5:8a:7e:b3:50:
24:80:27:fa:a0:c2:22:b3:2b:11:c0:4e:74:ad:22:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6C:43:1E:59:34:68:75:7C:85:5B:5F:C5:C2:26:8E:A6:BA:D0:EF
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0WxDHlk0aHV8hVtfxcImjqa60O8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:f3:c5:56:74:93:fc:79:6c:33:1f:f2:e2:e6:33:a4:68:f4:
b0:91:80:c7:ae:41:06:80:63:16:8c:ea:c7:65:55:84:16:d9:
f6:aa:f2:7c:76:12:42:f2:06:f1:66:66:2a:bb:c0:77:a1:f0:
51:c6:ca:d0:f1:87:ac:5d:3a:b8:56:78:83:cf:57:37:58:b8:
4c:57:50:00:58:79:28:6b:05:60:d9:6c:a7:47:d4:4f:0a:f6:
8a:c5:3d:b3:c6:fa:fa:a9:93:e3:8e:2f:dc:87:ef:00:b4:96:
32:d7:22:3c:80:c5:a1:76:30:ce:7e:e4:dc:79:6c:49:08:59:
7b:ae:74:ae:25:c0:b7:22:17:03:7a:0d:7c:a1:a9:55:d1:b3:
55:b3:b3:d4:c8:a1:26:c3:83:f4:5b:d6:95:d3:92:fa:13:6f:
7a:16:d8:da:a1:c0:6c:e0:9e:5b:da:08:a8:72:2e:53:90:28:
a2:61:ac:18:d4:c8:8a:0f:83:ad:ca:69:61:2a:9d:2f:a8:c2:
54:56:4b:4b:f2:dd:b4:e6:9c:5b:23:cb:c2:7a:63:7a:b8:6e:
05:49:a4:0f:82:4f:2f:b3:dd:09:5a:16:60:91:06:e4:5a:5d:
cf:ce:c5:05:ae:e4:87:b0:72:9a:cb:f1:e8:33:b1:d0:4e:54:
e7:7f:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org