Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/7L2hXI-_mtQJhN0gi5mZFwWGE_U.roa
File: 7L2hXI-_mtQJhN0gi5mZFwWGE_U.roa (raw, json)
Hash identifier: Ksc/NbheFMLbOEDLeg+xs41RK9GA8kOzmEfJSpB7IH4=
Subject key identifier: EC:BD:A1:5C:8F:BF:9A:D4:09:84:DD:20:8B:99:99:17:05:86:13:F5
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0906
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/7L2hXI-_mtQJhN0gi5mZFwWGE_U.roa
Signing time: Thu 15 Jun 2023 04:24:08 +0000
ROA not before: Thu 15 Jun 2023 04:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310 (0x906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 04:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=ECBDA15C8FBF9AD40984DD208B999917058613F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c1:85:95:01:ba:b2:6f:4e:21:02:22:ab:b7:
2a:67:0e:1b:bf:c1:7c:81:39:1d:24:de:cc:c6:61:
ca:eb:e1:9b:5c:3c:b8:f9:1f:e1:54:e0:0f:53:34:
fa:d4:30:b0:91:ae:7b:c7:71:62:fd:c9:fb:fd:1e:
6f:0e:30:a5:90:35:b5:83:1f:c2:5c:b8:91:f8:45:
47:d4:62:55:07:80:0a:a6:63:ee:53:e3:ee:3f:11:
a8:12:96:8f:c7:c0:09:f3:43:d4:1d:90:f1:33:b4:
24:68:72:0b:4b:fd:9c:1f:30:c4:d1:91:48:3c:30:
32:99:fd:0c:a8:99:19:2b:30:9f:12:99:ca:9c:a4:
78:fe:af:d7:3a:b3:2f:d5:4d:93:92:47:a1:92:24:
47:23:01:87:16:28:4e:48:4a:1c:8c:4d:f0:11:fd:
b6:f0:33:70:56:bf:cc:f9:89:89:5d:bc:ee:45:b6:
4c:60:42:66:50:54:85:c5:0a:51:58:95:75:c0:fe:
0a:57:8b:3f:c4:af:e2:95:0d:42:fa:68:57:e3:9e:
e4:14:cf:74:dd:b3:c5:17:4c:d6:1c:7c:be:12:08:
e8:6d:1f:c9:fd:95:2d:6d:79:b4:9e:ad:97:cb:29:
46:53:84:56:8d:87:2a:bd:c5:1f:78:97:66:f1:84:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BD:A1:5C:8F:BF:9A:D4:09:84:DD:20:8B:99:99:17:05:86:13:F5
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/7L2hXI-_mtQJhN0gi5mZFwWGE_U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:7b:3f:67:3c:8c:e1:ae:da:84:6c:eb:4a:b8:52:23:dc:55:
50:10:0d:1b:42:30:08:a3:1e:ce:45:ae:6d:17:ab:ef:1f:68:
6a:b6:24:86:ca:54:4f:e6:53:5b:bc:e1:bb:2b:a9:7a:61:9b:
3a:af:cc:d2:01:e9:18:26:b5:1b:62:16:b8:6e:73:37:a2:b4:
ef:86:f4:96:bf:66:60:de:db:bd:05:92:21:7f:09:fd:4e:9c:
1a:6b:1b:76:06:7f:fe:94:d7:69:99:46:5c:52:c7:0a:bf:36:
16:2d:b7:54:de:a7:62:b4:02:69:96:68:32:ee:2a:e9:d3:e8:
6c:32:4f:94:51:6f:93:f6:f8:15:14:72:1a:39:01:93:76:e1:
ad:d9:3e:d1:10:20:be:5d:94:7d:39:ea:7c:d7:df:c8:aa:7b:
97:8b:b2:05:50:1e:3d:f7:22:c8:e2:61:4a:b9:c9:52:b4:ee:
5b:5b:28:26:cf:e9:fe:0f:3d:0c:8d:da:c5:be:bd:a9:69:c3:
43:99:7f:e6:13:7f:08:3d:51:84:a1:4f:63:e3:9f:f4:e9:bb:
45:4d:54:67:54:50:94:59:20:59:7c:db:f8:b8:de:3d:4d:f8:
f9:13:68:2b:87:57:9b:4a:29:31:f7:01:cf:11:f1:54:bc:33:
36:e8:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org