Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/4ujkgkvm4mP3uciJ97PoUxJEvKY.roa
File: 4ujkgkvm4mP3uciJ97PoUxJEvKY.roa (raw, json)
Hash identifier: xtgRe2VhPij2umsCgF4XKSOEsWAZfaxFDfm4GCvmKtw=
Subject key identifier: E2:E8:E4:82:4B:E6:E2:63:F7:B9:C8:89:F7:B3:E8:53:12:44:BC:A6
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0937
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/4ujkgkvm4mP3uciJ97PoUxJEvKY.roa
Signing time: Thu 15 Jun 2023 07:24:05 +0000
ROA not before: Thu 15 Jun 2023 07:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2359 (0x937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 07:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E2E8E4824BE6E263F7B9C889F7B3E8531244BCA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:b4:5c:93:cf:aa:c6:9f:a9:0b:f1:23:1e:
47:0b:d2:2b:c9:7d:35:1f:8f:b1:72:2f:ff:1b:7b:
62:60:0f:0d:29:09:68:cd:f6:66:0b:a4:03:4d:4b:
86:6b:9f:dd:fd:5d:ee:26:38:fb:6b:25:f7:b1:0a:
42:18:2e:03:7a:66:83:d2:17:64:f8:a2:8b:85:73:
fd:13:99:98:5a:32:b3:0d:36:16:79:f1:d6:55:66:
cb:0a:8e:29:74:80:77:0d:b2:14:eb:fd:95:40:d1:
75:77:74:c4:2c:91:4a:7a:a4:af:d8:e3:ee:c6:de:
1c:ad:60:1a:75:de:ef:ea:71:3c:49:64:b9:01:6c:
09:9b:2b:40:4c:52:15:0b:29:3c:8f:5d:a1:69:22:
93:87:11:2d:43:e9:df:95:5b:76:b9:43:54:72:69:
72:96:58:06:0f:3a:e9:e1:65:cd:9e:25:f6:45:9d:
af:ca:9e:3f:6d:6a:fe:52:07:92:e3:c2:d5:8f:78:
f3:aa:14:aa:81:a2:09:47:89:e8:74:7c:1e:fd:1f:
fc:a8:23:96:fd:25:e3:83:02:a1:50:4d:1c:90:b2:
00:e8:fa:06:3a:d2:b6:12:e2:a8:f5:a4:4c:c8:78:
1c:f6:92:82:10:50:d3:fa:18:52:eb:5a:ca:ea:8f:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E8:E4:82:4B:E6:E2:63:F7:B9:C8:89:F7:B3:E8:53:12:44:BC:A6
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/4ujkgkvm4mP3uciJ97PoUxJEvKY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
19:11:5f:de:d6:e9:ab:e8:52:28:ed:44:ce:05:2c:e9:46:9f:
13:9f:08:c9:a7:9b:96:76:c0:3a:05:3a:fe:46:f3:21:b5:7f:
13:8b:75:6a:ee:93:b7:ad:0e:fe:17:78:35:a5:3f:68:ef:7c:
d7:1c:af:fa:b6:40:06:c2:78:84:69:d7:92:39:0f:30:fe:dd:
52:61:43:86:29:72:47:c8:10:48:23:43:df:f0:0b:b3:e3:62:
90:4e:81:27:7e:31:d6:84:f4:f1:ca:23:92:50:90:94:65:c0:
9f:bf:83:04:4c:4e:52:aa:b8:c4:e9:e9:c1:95:12:30:16:c0:
03:3b:db:77:e3:ad:57:a5:f4:48:55:4c:5f:de:9a:34:c5:49:
95:7b:86:a7:f1:4f:45:a2:b5:80:21:40:0f:ff:ae:bc:73:2d:
fe:62:75:8b:aa:d1:28:d5:fe:ae:24:e8:38:60:7f:06:1c:c8:
57:cf:e6:09:56:d6:73:e6:93:9a:3f:d8:fe:55:49:7a:7d:1c:
a1:b9:a5:b7:c1:27:5d:97:96:9b:60:ae:ad:ce:34:ee:18:ec:
c0:e6:1d:43:d5:b6:a0:1c:38:9a:f3:d0:25:e8:33:dd:10:79:
ac:fb:a5:fe:fa:08:06:50:b0:de:32:69:db:eb:40:16:fa:a7:
b4:87:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org