Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/4RhjTReiyrB2vuXYnsk1DwQOpp4.roa
File: 4RhjTReiyrB2vuXYnsk1DwQOpp4.roa (raw, json)
Hash identifier: kzwURuJJ4kMVznnz7roFTLdTXYd9NR0YHaStzSPdaAQ=
Subject key identifier: E1:18:63:4D:17:A2:CA:B0:76:BE:E5:D8:9E:C9:35:0F:04:0E:A6:9E
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08CA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/4RhjTReiyrB2vuXYnsk1DwQOpp4.roa
Signing time: Wed 14 Jun 2023 20:54:07 +0000
ROA not before: Wed 14 Jun 2023 20:54:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 20:54:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E118634D17A2CAB076BEE5D89EC9350F040EA69E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:2c:06:46:f2:21:e5:91:8d:2e:4a:6d:26:
d1:4d:aa:12:12:ee:88:2c:b9:46:cd:58:c5:65:6f:
cc:c7:83:4d:fd:5a:f8:2d:41:34:49:dd:c3:e9:1c:
c4:12:04:ae:0c:46:47:a7:03:5f:37:0b:53:02:28:
f5:7f:55:6d:12:59:72:90:a2:99:00:12:af:7a:e4:
ba:11:53:5f:ab:2e:c4:ca:06:cf:ca:67:10:b8:a5:
bf:b2:3c:80:76:2c:b1:fe:ea:a1:5e:62:15:41:3e:
9c:f7:4b:c3:c6:f1:78:b2:df:17:d6:d7:08:7b:48:
72:95:16:e2:29:47:7b:a9:b7:99:ac:41:19:50:fb:
bb:c4:d8:65:3c:65:93:4e:91:ae:2b:13:93:bd:17:
db:b0:2b:3f:72:d2:1e:e4:a6:45:78:27:15:76:e5:
a2:ef:ce:db:d1:2e:05:c7:1c:99:74:58:d6:f6:bb:
cb:90:8a:b0:32:60:e2:42:d9:44:42:38:c9:9b:75:
bb:9e:9b:4a:31:47:3c:f1:50:b9:f9:d7:51:59:7b:
b6:45:3b:19:50:af:0b:e5:28:fd:8a:c7:c9:90:e0:
13:f9:b4:df:9e:a0:82:0a:a0:97:dc:55:23:e7:bb:
2c:b5:3c:94:d1:f0:39:88:b7:eb:d2:a9:88:7f:73:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:18:63:4D:17:A2:CA:B0:76:BE:E5:D8:9E:C9:35:0F:04:0E:A6:9E
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/4RhjTReiyrB2vuXYnsk1DwQOpp4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:6e:ee:90:ce:55:89:19:60:df:64:e9:4a:06:50:35:c5:21:
92:d0:a6:48:1d:b4:c2:f4:af:9b:58:fd:17:f7:d5:d2:ba:05:
14:dc:d7:eb:12:67:f6:30:89:00:b0:0f:55:ed:34:49:1f:c8:
39:6c:2b:ae:70:78:d0:20:91:55:2b:b9:b8:71:36:56:53:34:
22:32:26:9d:21:b1:8a:15:e4:0a:65:08:7e:02:9a:44:93:60:
98:eb:ee:d0:53:c7:ae:86:93:12:f4:3b:a9:5e:bd:6a:f3:5c:
11:68:4a:a2:62:ac:64:6c:b9:af:3a:af:25:ce:68:ca:12:62:
99:9d:8d:a6:b2:bf:d9:5f:07:c2:4b:ea:bb:3f:6a:68:77:7a:
bf:02:ef:8c:47:1b:39:69:70:2d:de:8f:f9:9d:55:d9:ce:e6:
8f:5f:e1:ca:05:05:e9:00:9e:e1:38:fe:74:37:70:63:95:b5:
f0:bb:b9:c4:6e:ca:6d:54:62:14:f1:6e:24:a1:91:a9:88:2f:
a0:8e:3d:99:1a:3b:e5:b1:8c:ca:0c:12:7d:59:96:f5:18:5b:
71:74:f6:e3:bb:9a:e0:e9:dc:3c:23:67:28:19:75:5c:c7:3a:
49:ec:06:92:bf:5e:dd:fc:46:bc:4b:c2:cb:49:35:d3:62:8d:
e5:d4:dd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org