Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/BQfxqTub1XOvWFhH9DnZino00P0.roa
File: BQfxqTub1XOvWFhH9DnZino00P0.roa (raw, json)
Hash identifier: SC/JeTWW8caY2IPuvTcPvlXcI2igrLiewiJQmtOSuI0=
Subject key identifier: 05:07:F1:A9:3B:9B:D5:73:AF:58:58:47:F4:39:D9:8A:7A:34:D0:FD
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 092F
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/BQfxqTub1XOvWFhH9DnZino00P0.roa
Signing time: Thu 15 Jun 2023 06:54:05 +0000
ROA not before: Thu 15 Jun 2023 06:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2351 (0x92f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 06:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0507F1A93B9BD573AF585847F439D98A7A34D0FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:18:f9:bd:69:03:29:0e:f9:46:81:64:0a:
9e:31:24:aa:e9:46:cf:30:59:4c:73:1e:0a:2b:40:
34:dd:3b:be:08:04:2e:df:11:85:ba:ca:ef:e5:17:
98:d9:7d:66:c8:84:c4:a5:c5:35:57:29:11:e9:6a:
77:ca:b2:ea:e1:41:2e:6b:41:e0:1a:c1:be:c5:44:
58:be:84:ae:22:e8:b1:90:af:3a:cb:f6:fc:12:6c:
a1:da:ab:f7:de:20:b6:3a:5b:5d:38:60:b1:3f:ae:
d2:34:1f:9c:87:a8:ce:c5:1b:9c:dd:c6:7b:2d:f6:
0c:9e:76:9c:99:08:63:d1:5b:c8:20:02:b3:bf:ae:
92:42:2b:db:3c:8e:51:8a:a6:82:69:bd:a7:50:39:
36:45:48:7b:f0:03:e1:ef:89:e6:eb:40:9f:bb:8a:
05:3c:64:3c:3b:be:3b:fb:e1:7a:fb:7a:dc:bc:f6:
67:23:0f:dc:88:1d:98:13:dc:70:9e:ef:df:dd:48:
f1:3f:f9:fd:0b:4c:5c:52:83:a5:25:ee:3c:d3:4a:
60:d6:bf:67:51:7f:72:fd:d2:33:95:d4:40:25:d3:
c8:26:38:1f:dd:cc:26:f8:e1:de:79:ab:23:f3:33:
de:48:d8:a1:fc:89:a1:05:ae:a2:fb:04:54:1f:d4:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:07:F1:A9:3B:9B:D5:73:AF:58:58:47:F4:39:D9:8A:7A:34:D0:FD
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/BQfxqTub1XOvWFhH9DnZino00P0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:81:e6:da:08:5c:78:77:bb:83:e2:b0:b5:ba:89:3d:04:3f:
fe:88:8f:75:8f:85:55:89:e2:5c:aa:32:07:1c:55:f0:c4:82:
26:39:93:1c:9b:fd:41:69:94:4b:d4:19:ce:5a:71:58:b6:b4:
20:2c:36:78:24:01:93:02:3c:86:0f:42:e4:81:f5:5f:07:59:
3f:18:44:0a:2c:99:56:ca:81:05:f9:83:da:45:c2:83:32:2b:
89:8f:b4:45:37:aa:93:c4:cf:97:97:31:c5:61:67:bd:c9:ed:
00:be:42:36:53:c6:1e:8e:4f:8b:77:80:1e:8a:ce:e9:c9:82:
3e:44:00:38:a6:37:82:e2:ed:a0:b4:ff:bb:99:f9:a5:1f:b1:
d0:f5:1c:f5:93:e1:cb:73:03:51:00:63:ac:77:30:c5:7b:ed:
9e:0c:b6:c6:0b:5d:bd:8c:22:31:61:4c:5e:70:cf:6c:f9:6c:
47:e2:0c:b7:52:b8:43:fd:66:8b:0b:aa:1e:53:ec:ac:07:ab:
d0:b9:b1:db:ea:6e:97:4c:ee:6e:44:9a:80:a0:36:6b:be:7b:
2f:da:b1:27:fb:ff:d0:03:f8:53:90:0c:82:ea:c6:b3:fc:b6:
91:57:97:8e:e1:56:70:2c:0b:d8:b9:ae:02:8e:f4:d3:6e:d8:
56:d5:7e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org