Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/0ifcz1P7Wc15Zq1ke08TE1RrgOs.roa
File: 0ifcz1P7Wc15Zq1ke08TE1RrgOs.roa (raw, json)
Hash identifier: HH5uUA6lY20yK2zdBfEOF+kBeYzaB7t1yc6+Iw1LXBU=
Subject key identifier: D2:27:DC:CF:53:FB:59:CD:79:66:AD:64:7B:4F:13:13:54:6B:80:EB
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07AE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0ifcz1P7Wc15Zq1ke08TE1RrgOs.roa
Signing time: Tue 13 Jun 2023 09:24:11 +0000
ROA not before: Tue 13 Jun 2023 09:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966 (0x7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 09:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D227DCCF53FB59CD7966AD647B4F1313546B80EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:ea:8a:ff:ef:70:67:b0:d0:87:8c:b5:8f:
dd:59:d8:92:47:16:60:cc:bf:8c:b9:be:2a:d6:47:
84:bb:96:0b:56:56:6c:a3:84:8c:5b:75:24:f2:47:
82:f0:77:5b:7a:7d:e5:b4:ab:8f:fe:a3:18:9b:46:
8f:89:ca:4e:3b:ef:79:d4:5e:32:30:2d:0c:8e:e9:
0c:ac:20:d2:d8:35:75:1d:e9:87:ab:33:74:cc:95:
68:91:8a:26:83:fa:21:1c:36:81:f1:7b:41:47:13:
53:f7:ed:6a:91:70:7b:b1:52:ed:4b:43:a9:58:fc:
74:f1:0d:72:3c:ad:9d:e0:e2:13:ff:f4:97:d4:57:
21:ba:11:8d:9a:51:84:1a:32:c4:dc:f6:4b:2f:03:
73:7e:52:c7:17:22:af:79:28:0c:10:21:a7:6a:79:
5b:b3:cc:d1:bc:59:09:9b:70:24:0c:16:84:bf:85:
09:91:b0:f9:e0:d3:0d:e2:e5:57:cd:68:14:35:c8:
af:b8:d2:96:86:0b:11:52:82:c5:88:0e:58:46:05:
9a:07:01:ad:00:4a:4f:29:40:12:a8:6c:2e:91:aa:
78:06:81:47:4c:8f:b0:04:99:ba:d3:24:a0:22:0c:
d8:32:d5:d2:92:05:98:d3:bf:8e:93:35:8c:50:1c:
d8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:27:DC:CF:53:FB:59:CD:79:66:AD:64:7B:4F:13:13:54:6B:80:EB
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/0ifcz1P7Wc15Zq1ke08TE1RrgOs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:96:6b:10:e1:ce:19:68:19:39:ee:de:b5:40:cc:69:91:74:
b9:60:d8:31:17:7a:88:3e:f9:b6:81:7a:4c:21:48:b0:76:37:
be:e1:c7:6f:b1:a7:68:f4:c5:25:94:5b:d4:c2:72:26:9c:13:
e7:9c:85:e4:04:ac:8c:2a:55:cb:8f:82:26:c0:56:64:5e:39:
3c:3a:a8:1f:ae:e2:8d:35:98:7a:44:af:90:fa:e7:97:6f:bc:
1b:b3:ff:2f:ad:60:88:7a:0f:33:65:9d:06:43:25:72:d5:f5:
ae:9e:1b:69:94:d8:55:af:77:22:c7:2b:e7:6f:5e:f6:5d:7d:
21:59:a5:e7:54:56:2c:9c:33:18:37:61:bb:0e:59:d5:e8:63:
db:8b:8a:bf:de:2f:22:e2:d7:b0:5b:55:ff:1c:7c:d3:c9:b9:
a9:58:98:fc:df:50:b7:52:20:d2:a1:40:44:24:27:6f:72:e4:
56:af:41:2d:43:1d:7b:69:d7:c9:b4:b2:db:71:0a:e7:46:8c:
31:23:18:e9:b7:25:d9:0e:46:10:db:48:f3:9c:0e:3d:72:e1:
9d:46:ed:88:52:45:24:5c:f8:08:9f:14:12:71:3c:26:a4:0a:
e7:35:85:ca:ad:21:e3:90:59:9a:6a:b0:95:13:f0:0b:9a:4d:
53:75:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org