Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/4xbnDYxTOk3iVnvBSqbzchBQ7r0.roa
File: 4xbnDYxTOk3iVnvBSqbzchBQ7r0.roa (raw, json)
Hash identifier: +Bsp3CvICQxbC3qToqzgtaj5z8K0boUy4pMV6/OvxUI=
Subject key identifier: E3:16:E7:0D:8C:53:3A:4D:E2:56:7B:C1:4A:A6:F3:72:10:50:EE:BD
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 081E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/4xbnDYxTOk3iVnvBSqbzchBQ7r0.roa
Signing time: Tue 13 Jun 2023 23:24:04 +0000
ROA not before: Tue 13 Jun 2023 23:24:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 23:24:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E316E70D8C533A4DE2567BC14AA6F3721050EEBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:0d:cb:2a:55:66:0e:02:70:b0:be:84:43:
1f:0c:f8:ec:2e:c4:90:c3:54:93:d4:7d:18:7f:81:
ae:fe:7b:26:17:11:76:ac:2d:eb:89:d9:81:eb:73:
09:38:e6:c1:e0:ad:89:bf:a6:34:48:a9:1f:ef:8f:
97:05:4f:e8:4b:04:2d:f9:15:78:79:7a:2e:fb:9c:
e2:90:13:75:62:b4:91:29:0c:25:99:5b:19:30:88:
7d:4a:03:8c:31:94:ed:fa:02:d8:d0:9d:c7:09:dd:
52:49:f1:48:b2:01:a2:0b:c8:14:cd:4d:ae:8f:17:
8a:29:f0:45:a4:75:3f:ec:da:f9:23:88:1a:e7:b8:
8e:3e:15:82:36:00:e7:37:0c:2c:26:7e:65:75:f6:
97:65:81:28:3e:e0:c2:4b:8d:93:83:f6:89:a2:75:
59:98:60:1f:4d:d6:a1:ab:00:b5:96:fd:13:b6:c9:
09:2e:d1:68:f1:08:c2:8e:db:99:8c:91:77:83:c3:
8e:4e:0a:82:f9:01:c9:14:4c:79:69:58:c8:34:46:
83:df:12:20:9e:5e:a5:d9:3d:e5:c8:82:4e:08:8d:
1d:88:48:b6:a2:3e:73:40:eb:50:a5:3c:b8:04:72:
e7:ff:da:ab:62:ac:9c:bf:9d:d9:9b:1e:d4:18:9c:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:16:E7:0D:8C:53:3A:4D:E2:56:7B:C1:4A:A6:F3:72:10:50:EE:BD
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/4xbnDYxTOk3iVnvBSqbzchBQ7r0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
01:e0:1d:90:a6:fa:39:d1:8c:75:6d:83:81:81:f5:4f:46:e1:
34:4f:84:b6:4c:9c:f1:64:d3:71:20:60:73:ef:68:86:ec:b3:
63:4d:2c:34:6b:a3:2e:2e:78:48:c9:4b:58:2e:e9:cf:29:97:
d0:22:31:f5:5e:36:fc:f0:8c:89:92:10:66:0d:13:85:ec:60:
59:9e:e6:e8:ee:e9:f5:f2:64:88:fd:2a:ef:47:3e:c8:e1:eb:
ec:f8:54:2f:c0:7c:54:c4:9f:1c:5d:8a:e9:04:b9:7e:12:30:
f4:c3:a2:5a:93:e7:46:a1:e9:a8:66:c7:fe:d0:f4:be:ea:5b:
b6:43:0a:72:91:f5:ab:47:07:6c:b3:8b:fd:5f:bf:bd:df:0b:
20:19:e1:bc:03:8f:d5:cf:da:0b:36:00:e9:8d:78:bc:72:46:
a0:dc:12:ee:60:d6:19:25:67:c4:37:a9:3c:73:6b:44:7e:89:
0c:37:ad:ef:49:b9:55:2f:df:92:1d:f3:c9:d5:1b:43:be:5c:
d2:ff:94:57:4b:3a:d8:51:7b:90:e5:8e:56:a7:cc:af:78:cd:
10:9a:c3:71:ff:ce:cc:8a:aa:37:9b:81:42:3c:ef:14:56:91:
dd:46:1b:b6:ff:c4:30:45:70:ab:dc:6a:c8:a5:6c:30:ab:9f:
00:fb:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org