Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/0ZjkCcj3vX5GwccdBl0n_GWB4SM.roa
File: 0ZjkCcj3vX5GwccdBl0n_GWB4SM.roa (raw, json)
Hash identifier: 3ciiesx2A5PZD2fEMtSyoAgTOOssU5RGTH7jB4l6yaQ=
Subject key identifier: D1:98:E4:09:C8:F7:BD:7E:46:C1:C7:1D:06:5D:27:FC:65:81:E1:23
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 084E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0ZjkCcj3vX5GwccdBl0n_GWB4SM.roa
Signing time: Wed 14 Jun 2023 05:24:12 +0000
ROA not before: Wed 14 Jun 2023 05:24:12 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2126 (0x84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 05:24:12 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D198E409C8F7BD7E46C1C71D065D27FC6581E123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:ab:01:a0:53:70:28:e1:75:41:1a:d1:8f:
a3:7a:51:52:fe:2f:50:1b:2a:08:3b:4c:3c:2b:4a:
a9:9a:b2:20:d2:12:8c:4d:7f:0f:69:ab:8e:56:fb:
c1:b5:9d:06:c8:15:40:d2:a6:bf:df:e1:be:cd:5f:
e2:2b:31:a8:76:48:69:43:68:2b:2f:fd:6d:2f:57:
87:1b:79:f6:34:f8:a9:2a:10:b7:5a:b4:89:3f:7b:
69:09:0a:4d:fb:35:f1:e5:9d:1a:3a:9e:b6:6b:4e:
d9:8d:9c:d6:d7:8d:ec:aa:d4:8b:92:25:74:28:c6:
64:85:be:ff:1f:a3:d7:a7:dc:b2:d4:e7:8f:83:80:
08:d9:1d:08:43:29:03:3e:88:2d:7b:cd:cb:eb:51:
4c:7c:92:f1:ed:ae:e8:4c:07:f3:4b:c0:44:ec:e0:
b2:88:91:36:af:56:59:81:e2:d4:91:cf:2a:77:e9:
9f:0e:17:f6:1c:af:2f:b3:6a:51:37:48:ba:ef:56:
ca:ed:83:58:93:02:87:a2:14:d9:2d:5c:8e:bf:a8:
d2:65:f2:00:9d:6f:27:ec:fe:d8:47:77:69:6d:52:
e3:2c:5b:ac:b0:99:fe:d6:b8:9a:51:5e:43:17:9b:
f4:6e:ea:5e:26:8b:92:cc:69:62:6f:29:b8:a3:7d:
94:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:98:E4:09:C8:F7:BD:7E:46:C1:C7:1D:06:5D:27:FC:65:81:E1:23
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0ZjkCcj3vX5GwccdBl0n_GWB4SM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:8b:09:b4:81:4a:ee:fd:1e:f8:2a:ab:fb:c6:86:dd:58:05:
3f:f8:c4:6c:43:69:fc:01:4b:7f:a8:c4:d6:b2:87:75:06:9b:
73:3c:6a:65:ea:2a:05:5c:be:7b:f5:8f:e9:8c:f1:9d:b7:e5:
44:e2:c7:76:8e:fe:d4:6b:b8:66:21:1b:e5:4e:fa:3f:da:a4:
5f:74:18:90:d2:75:84:f8:99:33:23:8d:61:f0:a9:ae:f3:db:
7a:3a:9d:d6:8f:61:ea:56:7f:85:63:07:6a:3f:8f:32:71:03:
7e:52:c9:16:47:fd:3a:ba:56:fb:8b:fb:aa:11:86:81:f9:1e:
9e:a5:df:f1:5c:93:2d:80:57:19:01:dc:4b:c9:08:a8:83:6c:
58:4f:5a:36:c4:77:6c:83:3a:27:a6:ce:e9:f4:ab:8e:10:9d:
d7:a9:49:73:7a:49:e7:ba:66:48:8a:96:62:c3:be:c0:41:90:
06:52:31:31:e6:a9:c6:d5:ad:a7:91:45:ab:fa:5d:b9:4f:23:
70:dc:ba:20:e6:a8:65:f6:7a:b4:fe:3e:74:95:dc:55:f8:50:
9c:53:66:08:5a:1a:b7:df:b0:c6:12:b7:50:33:a3:e2:5e:30:
38:e3:d0:cd:f5:ee:ea:b2:3c:32:3b:b4:3e:72:43:f4:a2:18:
e3:2c:d3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org