Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Bn-nrCjHCVj30ftwMcqk0_YeR90.roa
File: Bn-nrCjHCVj30ftwMcqk0_YeR90.roa (raw, json)
Hash identifier: jounwBMcZzpl7gSyp5z3kU0MzJ700f2bZR6yHsNvjoE=
Subject key identifier: 06:7F:A7:AC:28:C7:09:58:F7:D1:FB:70:31:CA:A4:D3:F6:1E:47:DD
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08DA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Bn-nrCjHCVj30ftwMcqk0_YeR90.roa
Signing time: Wed 14 Jun 2023 22:54:08 +0000
ROA not before: Wed 14 Jun 2023 22:54:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 22:54:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=067FA7AC28C70958F7D1FB7031CAA4D3F61E47DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:66:da:78:f8:99:82:1b:ac:98:65:6e:40:
3b:d2:03:d9:cf:11:93:89:80:24:72:b6:26:f1:69:
9f:90:41:db:f9:97:f5:19:e3:29:cd:10:20:f7:af:
74:78:72:0c:70:f1:f5:5f:86:bf:ee:6c:38:27:e5:
86:13:e2:da:33:76:c7:41:10:b9:b5:98:57:8d:53:
61:1c:02:cb:53:3a:e8:29:d0:53:25:5b:97:30:8a:
cd:9e:bd:86:43:f8:6f:1c:7c:c2:76:84:af:0f:e2:
b7:88:8a:c9:ad:e4:1d:51:b3:79:48:a0:88:45:14:
44:0a:a8:99:7d:c7:6a:47:70:c5:78:4d:bd:56:c1:
b8:ff:fc:48:24:b1:5e:8f:38:76:62:31:fd:47:33:
b6:c1:92:56:e0:43:5a:16:6b:bb:c5:81:ce:f1:ec:
5b:ba:69:33:72:8c:6f:16:04:4a:93:ee:e3:bd:f0:
2e:c4:95:6b:ee:d3:26:e6:7d:2b:42:e8:46:c5:3f:
74:66:be:5a:f2:a5:46:d7:94:ca:e0:cd:1e:26:8e:
2f:67:5b:79:3d:f2:36:fa:80:a2:66:59:21:45:8a:
c0:c4:cd:1a:f9:25:45:4f:7e:b8:af:71:b4:11:04:
e8:d4:ac:a5:38:c0:0d:b8:7c:29:3b:7b:93:9b:41:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7F:A7:AC:28:C7:09:58:F7:D1:FB:70:31:CA:A4:D3:F6:1E:47:DD
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Bn-nrCjHCVj30ftwMcqk0_YeR90.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
20:58:75:7b:7b:d7:e9:7f:9f:9a:af:06:46:03:19:69:ce:e2:
93:80:3d:2e:2a:c6:4b:b5:62:46:b9:cb:d1:ca:bf:64:d7:25:
0f:bf:e0:3d:ed:2a:6f:0a:79:c4:ca:ec:28:ad:08:c3:2e:8e:
68:f3:0a:dc:fc:5f:4a:38:25:43:6d:b7:07:6f:b3:8a:ea:a8:
16:b7:f8:55:f7:db:15:a1:f6:ae:4e:38:ad:ac:98:72:f6:73:
96:68:34:7e:f3:1f:b1:87:0f:b5:de:c2:d1:3c:e8:32:80:e8:
e8:a9:96:2b:d2:2c:6f:ff:c5:28:2d:db:0f:30:b3:b6:63:cd:
00:d6:6f:b9:16:9e:c6:f7:da:b7:e2:63:dd:49:7b:a9:eb:50:
b2:3d:15:17:09:fa:f1:a4:69:9f:33:0f:df:69:7b:3e:66:f1:
f1:f5:be:01:53:5f:5f:ea:45:62:92:19:b2:22:42:b2:b2:ca:
f0:ce:96:e6:5d:51:24:dc:19:cb:c5:34:3a:3d:da:3c:c4:e8:
c2:5a:32:6c:88:c6:45:f6:9f:8e:92:12:c8:d7:52:b0:05:30:
46:2b:73:f9:f4:51:d5:e5:0c:25:1e:02:9f:42:3f:23:8a:6c:
f1:a2:1b:03:3f:f0:b2:f9:cc:0f:69:5e:de:f6:db:ba:70:6d:
d4:e2:dd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org