Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/B0soKa5ZAo7xT4cL-2PSKivGNSw.roa
File: B0soKa5ZAo7xT4cL-2PSKivGNSw.roa (raw, json)
Hash identifier: Z5S2gsav1FwBc9ows547jfS7fq5/PSG4AmgBuTc2RJQ=
Subject key identifier: 07:4B:28:29:AE:59:02:8E:F1:4F:87:0B:FB:63:D2:2A:2B:C6:35:2C
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0886
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B0soKa5ZAo7xT4cL-2PSKivGNSw.roa
Signing time: Wed 14 Jun 2023 12:24:05 +0000
ROA not before: Wed 14 Jun 2023 12:24:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 12:24:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=074B2829AE59028EF14F870BFB63D22A2BC6352C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:3e:d8:f6:a4:01:55:a2:9a:87:30:7b:bb:
8e:aa:14:a8:e4:c3:fa:d4:4e:5c:fe:87:15:d4:26:
ed:d6:e5:23:f4:40:1c:36:7f:e7:6e:91:ba:a1:e5:
b8:6c:10:fe:f5:50:dc:93:72:49:aa:c4:e5:f4:92:
cc:af:a1:12:ca:44:9b:ec:54:6b:b9:a9:f8:08:0c:
61:b0:01:6d:14:2f:7f:a9:e4:2e:fa:0e:43:ea:1b:
68:4a:d7:00:cc:c4:69:3a:74:05:29:b2:61:04:a7:
d3:e3:ef:b9:5b:0f:2c:6f:42:b3:1a:c8:aa:f9:4a:
3d:1c:80:0e:ae:87:c4:9b:29:8b:ce:f4:55:9d:8e:
79:12:c3:49:0d:fc:f3:6d:f9:1d:7a:21:b1:ff:44:
b6:16:40:30:8e:10:89:90:a0:4f:57:33:e7:21:e1:
5d:b6:5b:f7:90:44:df:85:6a:00:10:d3:47:8f:93:
45:7f:12:23:94:cb:73:f0:bc:5f:97:90:5c:11:cd:
f7:5a:7b:ee:f8:17:76:fd:25:20:02:17:8b:7e:1c:
d2:b6:80:b2:ca:53:3a:5b:42:22:4e:af:0a:e2:42:
22:48:d0:3f:e3:16:a1:4b:e8:ca:56:69:a6:2a:b1:
93:13:dc:4c:d6:6d:0a:b0:8e:79:7e:99:5b:b0:96:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4B:28:29:AE:59:02:8E:F1:4F:87:0B:FB:63:D2:2A:2B:C6:35:2C
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B0soKa5ZAo7xT4cL-2PSKivGNSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
55:d6:02:d4:65:9b:37:4a:53:6a:dc:a0:80:0e:2b:58:95:84:
43:b4:b4:ca:44:17:c5:16:35:68:58:f4:7d:9d:8a:f0:6d:ba:
1c:61:7b:4a:c7:8b:47:26:05:06:d4:4e:b3:30:f2:7d:e8:90:
19:e6:ef:66:35:37:5d:72:27:59:8b:e3:b3:96:1d:92:45:d6:
a9:32:e7:29:30:bf:eb:e6:bf:a5:f8:ae:c4:d5:85:96:85:1f:
85:3e:3a:93:f2:aa:34:91:1e:cb:8a:7d:a4:d6:ec:16:2b:99:
80:59:c3:66:d5:74:e1:a9:c1:03:f6:c6:57:57:43:06:4a:09:
33:b4:a3:ce:28:8c:0e:45:02:93:80:fa:9a:d3:5b:9d:6b:d2:
e5:27:fe:a1:67:af:e1:15:0b:4e:86:c1:6b:30:73:19:64:3b:
8e:ff:e6:00:11:ba:d2:bc:6d:77:af:ca:fd:75:fc:96:54:27:
27:a1:41:8f:a1:c3:ba:bf:ea:07:97:14:c9:89:44:d9:34:c2:
70:0f:d7:d9:83:56:1f:d4:0b:73:c6:04:9e:bf:2a:d8:88:a9:
3f:53:66:50:f0:9c:7a:be:a8:79:f1:07:68:c4:28:c2:51:96:
f0:67:aa:e0:b9:c0:2b:e8:96:6e:72:e7:6a:9e:f6:ac:97:64:
09:24:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org