Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/5EEoSaDyDt75pVaTz3lahUrJJLE.roa
File: 5EEoSaDyDt75pVaTz3lahUrJJLE.roa (raw, json)
Hash identifier: P3rZp0IRh6xY4JCj6U4Nwr9VsN5vmi+NBjVGbZICpPc=
Subject key identifier: E4:41:28:49:A0:F2:0E:DE:F9:A5:56:93:CF:79:5A:85:4A:C9:24:B1
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0866
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/5EEoSaDyDt75pVaTz3lahUrJJLE.roa
Signing time: Wed 14 Jun 2023 08:24:03 +0000
ROA not before: Wed 14 Jun 2023 08:24:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2150 (0x866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 08:24:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E4412849A0F20EDEF9A55693CF795A854AC924B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:06:35:6d:ad:1f:3d:59:fe:0f:ef:f9:ba:
98:49:b2:93:3d:74:10:6b:71:dd:5b:e5:25:e1:b1:
38:e9:94:31:eb:f1:f3:cc:c7:24:3d:3c:0a:27:de:
ea:61:42:d4:8c:f0:03:01:32:3e:64:1d:18:91:7a:
54:65:4d:72:48:cc:ee:de:f3:93:57:28:6f:c0:c3:
8d:a3:9d:58:1b:58:29:bf:a6:e7:d8:07:ff:09:77:
33:85:58:7f:40:e1:7c:ec:1d:29:e7:6f:ac:e1:ad:
4a:58:f8:a9:26:d9:10:03:2f:47:28:53:6b:f9:3c:
84:09:75:2a:94:61:7d:3c:d7:4a:6b:51:9b:10:8a:
0b:b7:11:e5:2d:03:64:a4:04:ea:67:80:9f:67:86:
ef:91:7a:0e:63:d0:cc:7f:45:36:39:6a:38:19:46:
3a:8d:ff:fe:fd:4a:d1:14:e2:09:11:2c:2b:38:88:
ca:ec:97:be:20:d4:85:b7:6b:fc:b4:6b:14:71:f5:
bf:11:ba:2b:71:e7:78:be:ee:64:ea:d3:d8:b9:4e:
ef:c0:aa:b7:a0:5c:35:6f:e1:64:19:32:8c:18:0d:
13:61:61:4f:29:83:5a:13:16:f7:97:ba:a9:41:35:
72:29:de:9b:5e:d3:44:d7:94:b5:4d:88:c9:45:7a:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:41:28:49:A0:F2:0E:DE:F9:A5:56:93:CF:79:5A:85:4A:C9:24:B1
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/5EEoSaDyDt75pVaTz3lahUrJJLE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:f3:a1:d0:1e:dc:c2:1e:e4:a5:a9:12:95:43:94:21:ca:01:
90:d6:2c:7a:d4:50:72:5b:d8:0a:7a:27:e3:2b:c1:1d:fc:92:
55:4a:90:1c:62:8b:1b:9c:95:4a:a7:01:92:83:0b:ce:8e:86:
f4:15:81:58:ea:cb:f9:42:00:11:0e:b2:c5:75:ee:cb:86:90:
ab:ee:de:ab:69:19:6c:18:8c:32:3e:79:d7:6f:f7:a4:da:7c:
a9:b3:0c:88:8a:bb:2f:c4:bb:49:6e:2f:4a:ae:93:50:4e:3c:
16:e9:4b:28:15:8d:70:52:3f:93:29:15:f8:3f:48:44:b5:ac:
1c:a3:d3:47:3f:60:cc:3d:60:d2:f6:b6:45:cb:9a:8b:70:7c:
28:5f:47:60:02:d6:2c:77:ae:6c:0a:6e:74:92:50:68:78:8c:
bc:e7:92:90:c5:b6:fa:a7:c4:ae:ef:54:d7:2a:34:06:f7:75:
a5:cb:32:0b:80:31:57:d5:b6:17:ec:d5:b6:36:b9:62:ca:eb:
be:18:b5:1c:ec:c0:99:13:64:ab:1a:e8:3d:ae:8e:9e:91:be:
f0:89:f7:2c:ec:20:66:de:1c:37:7b:89:d1:69:d5:0e:7d:68:
7a:16:93:45:43:a8:4f:9d:0d:9f:70:c7:7f:fa:fc:10:df:0f:
33:4a:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org