Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/5pmPtBS2QcO7nWt9laFDlfG1eEw.roa
File: 5pmPtBS2QcO7nWt9laFDlfG1eEw.roa (raw, json)
Hash identifier: oXspJ9lrjPXa+7uzLwTHqbCJm4WGmCjqeV26TTFRQvA=
Subject key identifier: E6:99:8F:B4:14:B6:41:C3:BB:9D:6B:7D:95:A1:43:95:F1:B5:78:4C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0816
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/5pmPtBS2QcO7nWt9laFDlfG1eEw.roa
Signing time: Tue 13 Jun 2023 22:24:01 +0000
ROA not before: Tue 13 Jun 2023 22:24:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 22:24:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E6998FB414B641C3BB9D6B7D95A14395F1B5784C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:92:23:f9:ed:6c:7e:52:e7:47:74:28:43:
cc:20:80:06:d8:2f:4a:37:d3:f2:84:d2:38:6c:b4:
2c:62:cb:5d:3d:5a:48:87:dd:e8:58:be:45:e3:44:
7d:99:6b:c3:f2:2f:72:35:38:08:31:9a:4b:6b:13:
5a:2f:49:0e:18:59:de:75:2c:5c:a8:88:09:45:ee:
fc:66:e3:07:cf:ed:1f:e9:f6:17:6a:74:42:2f:1b:
9f:4e:00:b2:28:14:9c:4c:56:67:e0:7c:02:90:07:
5f:bf:77:4d:a9:d1:72:be:75:b2:1e:5b:30:0f:c1:
df:a1:de:49:16:f0:fd:1f:58:8e:0a:9f:45:e3:81:
a7:3d:2a:43:a4:fc:2c:39:a1:d9:9c:63:3e:28:b6:
7a:26:61:b0:5c:d9:99:4f:16:26:9f:3c:d6:59:75:
cb:84:e0:66:6a:b2:9e:71:02:17:41:36:b0:17:6d:
44:b8:cb:38:5e:61:9d:3d:00:68:9e:c6:91:3a:84:
8f:20:dc:b8:9e:f7:38:4d:85:8b:0e:40:bf:1e:d6:
df:45:de:d1:1a:e9:23:84:60:62:32:ea:6f:37:91:
af:f1:eb:8a:3b:05:67:9f:b3:af:3a:07:8d:45:81:
1d:f5:f8:9d:b2:6a:d6:22:8a:fb:82:60:9c:5a:05:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:8F:B4:14:B6:41:C3:BB:9D:6B:7D:95:A1:43:95:F1:B5:78:4C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/5pmPtBS2QcO7nWt9laFDlfG1eEw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
20:f2:a6:8f:b8:ac:f5:37:1c:4f:aa:99:fa:b8:a5:b7:5e:65:
38:0a:85:42:c0:ce:1d:0a:b2:81:01:5c:67:1e:54:21:79:6f:
04:ee:f9:46:ef:b9:4b:ad:a7:a0:1b:44:3f:3f:67:c7:68:ca:
67:ba:3e:57:27:a8:43:15:bd:44:9a:16:1d:ff:fb:85:ef:46:
18:47:56:28:c1:5c:2f:82:71:9b:1c:9f:fe:e8:7a:42:86:ec:
b7:cb:99:25:fb:0b:8c:52:3f:de:2d:85:e6:a3:31:4e:b4:a8:
fd:c0:1a:b6:8f:11:49:7e:0c:c2:af:47:03:fd:b0:61:11:b8:
8f:50:ef:57:df:57:eb:ee:fc:aa:18:f2:ed:41:db:f6:6e:5d:
de:b6:c0:2c:3c:2f:07:db:3b:b6:66:dc:16:d0:3b:0d:04:11:
02:71:56:06:cf:a3:87:8b:8e:00:cb:91:82:2c:4d:fc:bd:23:
a5:8a:05:16:bd:01:f8:f6:39:83:87:a0:ca:46:c2:94:90:be:
40:4e:73:44:b2:b3:9d:4d:98:83:40:63:df:2f:e4:3f:86:0f:
a4:68:78:1e:73:3e:ac:e7:a5:26:78:59:1e:cb:83:de:03:70:
8f:f5:0f:cb:b6:9f:33:ea:9c:12:fb:bb:c9:47:d9:47:0c:70:
56:74:01:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org