Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/7IHc6zjjc7Gdn6JnLiuE-QfFaSM.roa
File: 7IHc6zjjc7Gdn6JnLiuE-QfFaSM.roa (raw, json)
Hash identifier: Qhqgi1hNLcm7n2V3wl/D+ariOf7A6oeJhNEdmy/IOVc=
Subject key identifier: EC:81:DC:EB:38:E3:73:B1:9D:9F:A2:67:2E:2B:84:F9:07:C5:69:23
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07C6
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/7IHc6zjjc7Gdn6JnLiuE-QfFaSM.roa
Signing time: Tue 13 Jun 2023 12:24:01 +0000
ROA not before: Tue 13 Jun 2023 12:24:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1990 (0x7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 12:24:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=EC81DCEB38E373B19D9FA2672E2B84F907C56923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:bd:2a:d1:da:cb:01:d1:7b:2d:78:20:6b:
ee:b1:ad:cc:c0:8e:46:57:15:3d:64:e2:6b:22:73:
74:79:7f:22:e1:bf:2f:bb:5e:30:c4:31:5a:75:5b:
77:f8:40:0e:54:c0:ab:05:fd:f1:83:64:3d:46:f3:
e4:fe:08:88:6c:c5:d7:02:ee:1a:76:ae:dd:82:5b:
65:c3:54:7c:5c:84:c5:94:9a:21:96:1b:67:c2:d6:
db:d8:bc:6b:91:86:1b:aa:db:b2:55:ac:60:30:e9:
e9:b7:6d:c1:9b:3a:9b:bb:84:3a:a6:9a:72:e6:eb:
98:8f:66:76:16:73:5a:69:61:c6:2e:44:f3:84:21:
cf:6d:12:c9:ee:f5:48:1b:60:49:eb:48:e2:eb:f9:
74:fa:60:ad:e0:3c:a5:08:aa:21:c6:4e:ca:32:68:
94:15:f2:79:54:6e:ce:58:12:27:b6:54:ea:1c:c6:
6c:3b:fe:56:c0:d0:c4:23:da:ae:d2:b8:ee:83:b7:
43:23:2d:53:70:68:38:4f:1c:d6:45:e7:dd:e8:6e:
e5:a3:31:c8:0f:24:97:6b:d3:50:9c:d8:f2:71:39:
24:46:fa:aa:a0:50:32:d5:5e:be:80:0a:e9:97:af:
79:5d:6d:c2:97:18:1f:bb:a7:18:92:f9:08:69:66:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:81:DC:EB:38:E3:73:B1:9D:9F:A2:67:2E:2B:84:F9:07:C5:69:23
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/7IHc6zjjc7Gdn6JnLiuE-QfFaSM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
85:fa:39:a7:b6:9e:fa:f4:c7:a4:a6:c9:5b:cf:38:83:0d:18:
e3:39:36:40:4d:51:0c:e2:96:c0:0c:3c:65:0f:dc:34:e0:e3:
81:42:47:63:19:a2:f3:91:b6:ee:05:fc:74:79:92:3b:90:9e:
1b:05:ae:34:5c:7f:e3:ff:50:b7:4a:09:07:66:3e:27:91:64:
bd:e5:34:78:0f:35:4b:ce:5d:96:da:90:70:d8:14:32:35:db:
bd:b0:98:20:72:6b:0a:0e:d4:1a:32:16:ac:2a:60:0e:99:fa:
cb:8d:19:0e:bd:7d:24:7c:70:0e:6f:cf:4f:ec:b4:aa:a4:99:
a9:d5:a0:0f:59:39:66:ea:33:4f:bf:30:d4:c8:e6:31:21:98:
de:3d:9b:99:6a:b5:cb:1b:c1:6c:28:de:58:c6:8c:1c:de:5b:
f6:72:4e:df:e6:15:5c:16:ad:5f:2c:6c:44:f3:18:3a:d2:4f:
00:1d:d5:0e:11:c8:cd:cc:68:b1:b8:ed:d4:49:d1:b9:77:41:
08:df:dd:d9:34:9b:5c:e2:ec:24:1a:59:77:f4:30:96:87:56:
22:68:23:c7:76:ed:ff:1b:a4:4a:42:8c:22:98:06:f7:04:25:
2f:99:2b:80:91:7c:6c:ea:64:be:3f:17:db:0b:db:43:47:a1:
a5:70:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org