Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/7tHO4cx5GDICmmrcUMh7h-QRTls.roa
File: 7tHO4cx5GDICmmrcUMh7h-QRTls.roa (raw, json)
Hash identifier: aG7pQZY1tZg7KrnuN4gDps9Go1KNimDwWCSnlxG2dew=
Subject key identifier: EE:D1:CE:E1:CC:79:18:32:02:9A:6A:DC:50:C8:7B:87:E4:11:4E:5B
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08EE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/7tHO4cx5GDICmmrcUMh7h-QRTls.roa
Signing time: Thu 15 Jun 2023 01:24:15 +0000
ROA not before: Thu 15 Jun 2023 01:24:15 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 01:24:15 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=EED1CEE1CC791832029A6ADC50C87B87E4114E5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:c8:4a:c4:e9:68:d2:88:5c:d4:75:69:1e:
c9:d8:d1:98:0a:8d:22:56:34:a2:95:21:39:e5:22:
36:d2:4e:49:d6:0c:7d:35:1c:e5:13:2d:33:a2:e8:
46:35:ae:f6:4c:0e:f5:21:d0:3a:1f:78:e5:b2:6a:
ec:65:25:64:2f:97:85:8e:82:b8:46:68:cd:40:6a:
39:3a:f9:ce:8b:42:d2:de:09:2f:16:43:c9:2e:2f:
1f:84:a3:2c:ac:44:26:e5:c0:db:be:50:d6:e0:d6:
64:0e:33:3c:e5:ed:ac:b0:3d:05:04:aa:e7:33:e5:
e7:89:75:a0:fd:a0:f8:c2:ad:9b:04:f2:f6:5a:b5:
47:0d:40:bf:3f:53:01:4b:99:73:2f:ce:a3:bd:90:
84:93:c4:6c:1a:6a:b8:d4:d9:56:3b:dd:23:45:94:
a0:ae:fd:44:f6:e8:a7:dc:af:ea:d1:9f:a4:20:81:
7d:0b:05:50:6c:52:12:35:87:a8:73:66:fe:7c:1b:
46:f0:bc:40:40:5a:72:80:2f:8b:e6:28:ed:e1:83:
89:1c:a8:9e:02:62:49:d0:be:99:26:1c:8f:97:fe:
61:57:27:f9:e2:70:85:28:89:4e:74:78:82:a8:ed:
b1:b8:3c:17:3b:86:7a:9f:90:03:2c:9c:d9:84:b5:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:CE:E1:CC:79:18:32:02:9A:6A:DC:50:C8:7B:87:E4:11:4E:5B
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/7tHO4cx5GDICmmrcUMh7h-QRTls.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
45:54:6c:f4:51:42:77:d7:d0:5f:25:3f:12:df:e8:19:96:0e:
c6:9b:89:3b:84:55:e5:1b:76:2e:ea:f4:46:40:57:70:95:6e:
07:d2:e0:ff:aa:63:dc:24:37:c5:9a:c9:d9:2a:2f:39:54:c0:
df:84:11:25:21:e3:13:15:7d:e9:f3:dc:d1:0b:8b:51:a5:70:
09:24:1e:fc:63:53:7e:9f:0b:60:ee:ce:b6:25:ad:55:8f:8d:
51:7a:13:33:5e:76:e7:77:6b:2f:9f:62:ee:e4:02:ed:ac:63:
56:6e:2c:48:21:2e:c9:69:ab:4a:aa:ea:8a:d4:56:ac:46:84:
e9:ff:0c:a6:4d:51:df:75:4e:7f:3e:c6:37:f4:c5:4a:85:42:
a2:e5:96:54:11:f2:0c:d8:31:4d:9a:8d:62:a1:98:b8:09:c7:
38:84:72:6c:d0:35:ff:bc:a0:ce:4f:86:51:76:5e:48:98:5d:
7a:54:dd:47:c3:6f:a9:fb:3f:c1:ce:1f:b6:17:f3:0a:1d:a5:
9b:73:11:9f:4e:7c:47:11:78:74:81:58:47:52:92:ba:78:ea:
af:cf:2d:64:36:f5:00:23:82:cf:29:f9:d2:50:bf:c7:fc:ae:
81:28:90:8b:62:69:9d:b6:0d:79:09:3b:96:be:2e:43:11:6c:
21:24:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org