Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/6ZBymaC1z43OaX7W4VtnJujE7mQ.roa
File: 6ZBymaC1z43OaX7W4VtnJujE7mQ.roa (raw, json)
Hash identifier: pRrNOzPkp0imid/N5fsi5izUScFvrhxNAFQJ0sFqqTQ=
Subject key identifier: E9:90:72:99:A0:B5:CF:8D:CE:69:7E:D6:E1:5B:67:26:E8:C4:EE:64
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0876
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/6ZBymaC1z43OaX7W4VtnJujE7mQ.roa
Signing time: Wed 14 Jun 2023 10:24:13 +0000
ROA not before: Wed 14 Jun 2023 10:24:13 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2166 (0x876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 10:24:13 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=E9907299A0B5CF8DCE697ED6E15B6726E8C4EE64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:ab:ea:ab:93:68:10:1e:70:d9:bc:cd:36:
f1:82:d0:c3:64:c2:ff:f8:72:ab:00:12:2e:42:c9:
f8:af:12:ae:df:c7:b9:2c:da:60:cb:52:84:3b:0a:
10:3a:5a:3e:40:93:d5:3d:30:a3:b1:e2:e0:29:14:
e7:ff:86:21:91:62:88:fa:d3:b1:5b:6d:ff:70:6c:
ca:46:00:e6:6f:9b:4d:d0:43:8b:ca:9c:15:6d:3f:
79:15:71:c1:a0:2a:f0:bb:82:7a:7d:5d:68:0e:34:
bd:a6:9a:c5:cf:80:14:11:a1:16:23:6d:cf:70:6a:
42:5b:c1:33:ea:ed:f3:dc:69:e8:28:bc:d1:a3:38:
e1:8d:2a:69:17:13:58:fd:fc:f8:a4:13:50:72:18:
3b:49:e2:8d:76:7b:1c:3a:fc:24:15:2f:db:82:d5:
dd:1c:b1:7a:ff:b7:9b:2b:33:15:f6:a9:06:30:6f:
bd:8c:77:13:c1:fa:85:15:d4:4d:5f:e8:79:d9:64:
bc:c8:28:d6:93:6e:8f:43:40:84:c3:43:47:18:1d:
d5:77:1d:c5:b4:76:fa:3b:ec:f7:b4:ce:b8:6a:51:
98:c8:3c:51:2f:6d:c6:92:ee:ee:91:4f:03:d5:8e:
59:ce:4a:59:18:da:a5:8a:81:92:68:c0:a2:9f:e7:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:90:72:99:A0:B5:CF:8D:CE:69:7E:D6:E1:5B:67:26:E8:C4:EE:64
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/6ZBymaC1z43OaX7W4VtnJujE7mQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
07:05:b6:6b:50:ff:e7:2e:d9:4f:9d:0b:32:b0:93:e0:db:2c:
96:d7:41:94:38:0c:09:5d:37:b3:a7:70:15:ea:d3:c8:db:4d:
0f:05:dd:ce:cc:b2:7d:17:c9:72:b6:16:2d:76:74:1f:03:4a:
27:be:51:c1:65:d5:42:db:af:f5:a6:79:e9:12:41:a3:49:dd:
93:15:33:f1:9e:91:2b:3d:8e:00:43:ef:c0:6d:b2:f0:29:8c:
a4:a5:a0:14:0d:72:fd:a3:96:c7:78:bd:c8:e6:9b:99:7e:f8:
1b:7f:7b:fa:e0:2d:3d:ee:62:14:d4:e4:23:02:57:e7:cf:d2:
03:04:78:07:60:f7:c9:6a:58:02:1f:0a:78:18:d9:e0:2e:9c:
40:72:96:d6:94:2d:f1:a8:f9:05:23:63:a1:99:f9:f3:e3:13:
d2:37:59:d1:25:ad:e4:59:1e:9d:dd:32:b8:8c:4e:60:d7:f9:
28:b7:4d:eb:3e:c9:03:97:55:80:f0:69:dd:d2:42:d7:e9:dc:
30:ba:32:bb:c2:4f:5a:73:29:fe:5e:1c:07:db:2d:9c:9c:22:
a7:07:0a:53:d4:55:3d:4c:07:dd:7d:6f:ed:e8:c4:f7:fa:78:
3d:77:e2:7c:23:35:3d:19:c7:9e:bf:35:7d:f1:c1:74:dd:1e:
00:8f:5d:86
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQx
MDI0MTNaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKEU5OTA3Mjk5QTBCNUNG
OERDRTY5N0VENkUxNUI2NzI2RThDNEVFNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCk2qvqq5NoEB5w2bzNNvGC0MNkwv/4cqsAEi5CyfivEq7fx7ks
2mDLUoQ7ChA6Wj5Ak9U9MKOx4uApFOf/hiGRYoj607Fbbf9wbMpGAOZvm03QQ4vK
nBVtP3kVccGgKvC7gnp9XWgONL2mmsXPgBQRoRYjbc9wakJbwTPq7fPcaegovNGj
OOGNKmkXE1j9/PikE1ByGDtJ4o12exw6/CQVL9uC1d0csXr/t5srMxX2qQYwb72M
dxPB+oUV1E1f6HnZZLzIKNaTbo9DQITDQ0cYHdV3HcW0dvo77Pe0zrhqUZjIPFEv
bcaS7u6RTwPVjlnOSlkY2qWKgZJowKKf54hzAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU6ZBymaC1z43OaX7W4VtnJujE7mQwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvNlpCeW1hQzF6NDNP
YVg3VzRWdG5KdWpFN21RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEABwW2a1D/5y7ZT50LMrCT4NssltdB
lDgMCV03s6dwFerTyNtNDwXdzsyyfRfJcrYWLXZ0HwNKJ75RwWXVQtuv9aZ56RJB
o0ndkxUz8Z6RKz2OAEPvwG2y8CmMpKWgFA1y/aOWx3i9yOabmX74G397+uAtPe5i
FNTkIwJX58/SAwR4B2D3yWpYAh8KeBjZ4C6cQHKW1pQt8aj5BSNjoZn58+MT0jdZ
0SWt5Fkend0yuIxOYNf5KLdN6z7JA5dVgPBp3dJC1+ncMLoyu8JPWnMp/l4cB9st
nJwipwcKU9RVPUwH3X1v7ejE9/p4PXfifCM1PRnHnr81ffHBdN0eAI9dhg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org