Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/2L5WXYezUirLoAfJFWxRU8gSd8U.roa
File: 2L5WXYezUirLoAfJFWxRU8gSd8U.roa (raw, json)
Hash identifier: puWMJyidcVXEbWcz8H26Ck/7SIFpaK3SloZ7Ml3mBNM=
Subject key identifier: D8:BE:56:5D:87:B3:52:2A:CB:A0:07:C9:15:6C:51:53:C8:12:77:C5
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08CE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/2L5WXYezUirLoAfJFWxRU8gSd8U.roa
Signing time: Wed 14 Jun 2023 21:24:11 +0000
ROA not before: Wed 14 Jun 2023 21:24:11 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 21:24:11 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=D8BE565D87B3522ACBA007C9156C5153C81277C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:d1:f6:65:a5:d2:8a:0a:8e:59:8f:58:57:
66:c9:47:6c:89:79:63:fc:b1:21:f3:2f:68:05:a0:
84:3f:df:b9:c4:ac:fa:41:be:ab:56:ed:95:cf:a5:
98:5f:b7:c8:51:f5:86:28:68:27:9b:ba:1e:73:75:
c8:52:97:4d:18:a5:20:8a:df:7f:cd:67:f3:38:53:
e0:ce:38:89:6f:55:0e:a3:16:d4:1b:a2:55:ab:02:
21:3b:5c:f8:5e:bc:39:37:fc:3f:6b:64:6c:26:85:
b1:fa:04:4e:4c:9f:e8:22:c1:0f:dd:6c:fc:ed:05:
ae:b9:84:c8:09:04:21:e9:2d:bf:f9:b2:44:3d:84:
4b:cb:96:5b:86:cf:b1:bf:9c:df:98:5b:64:ea:43:
de:0a:11:a0:91:ad:bb:5a:7c:83:f9:28:ff:2e:e2:
00:c7:e4:38:38:c7:ee:28:f2:33:d1:99:4d:64:d6:
3f:34:61:9e:6a:20:fc:29:32:ab:0e:28:2e:ed:23:
59:45:57:7a:fc:54:26:c3:56:06:64:4b:73:7b:04:
ea:77:6c:35:4f:c7:e2:8c:48:9d:bd:da:99:9e:88:
35:dd:7a:83:53:17:2f:a4:c7:dc:64:4b:db:cf:77:
06:03:d1:0d:ff:5c:27:d2:34:24:b1:dd:e6:38:98:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BE:56:5D:87:B3:52:2A:CB:A0:07:C9:15:6C:51:53:C8:12:77:C5
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/2L5WXYezUirLoAfJFWxRU8gSd8U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
33:68:f2:ea:8a:c3:e2:2f:e9:13:42:22:d4:5b:a0:44:c5:f7:
d4:24:1c:f4:a8:f4:23:8b:50:29:8e:49:e0:3c:3f:cf:87:ec:
5a:51:14:18:57:a8:a0:b1:53:f2:7a:47:ee:52:65:05:f6:aa:
a8:f0:d9:5a:9a:27:5f:9b:06:26:74:2c:cb:d3:9b:bc:a7:ab:
09:89:89:ff:fa:91:b4:da:71:03:a3:df:c8:1d:12:29:97:2b:
56:5b:24:f2:a7:67:7a:ad:40:2d:3f:d3:93:f1:dc:ab:22:08:
98:bc:b6:ea:68:38:bc:d2:8d:a8:1a:09:6d:05:cd:51:ed:3a:
bc:ef:37:9b:50:47:89:d1:13:28:75:e6:2d:18:f9:93:c1:65:
1b:4a:67:4b:0f:03:4a:47:dd:6b:45:81:f9:da:aa:bd:a9:a3:
9f:87:58:60:35:ae:37:66:33:1b:2b:c6:54:fe:0c:8e:9c:63:
61:66:c5:99:da:19:86:27:ff:d9:e4:de:4f:4d:e0:4d:f3:a3:
0f:e2:7c:bb:3b:4b:18:e5:a7:94:18:97:3a:85:df:7e:fb:e3:
c5:79:f3:d0:7b:2f:cf:37:04:9c:19:f2:cd:91:72:7c:75:6b:
2d:72:dd:ca:5d:7e:a5:4e:3f:78:11:2b:9b:8f:e9:d8:47:a3:
52:da:65:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org