Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/BvkrRWJzIfzofK84IhdERPotA7w.roa
File: BvkrRWJzIfzofK84IhdERPotA7w.roa (raw, json)
Hash identifier: rl473xqLfX7JHOwA3mojgrzDk6Rnyku0Mccw0VqCUyk=
Subject key identifier: 06:F9:2B:45:62:73:21:FC:E8:7C:AF:38:22:17:44:44:FA:2D:03:BC
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07EA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/BvkrRWJzIfzofK84IhdERPotA7w.roa
Signing time: Tue 13 Jun 2023 16:54:02 +0000
ROA not before: Tue 13 Jun 2023 16:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 16:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=06F92B45627321FCE87CAF3822174444FA2D03BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7e:13:39:a3:97:40:25:46:be:a4:d7:46:3c:
f8:89:06:d8:b4:ef:86:ea:42:bb:d9:6f:52:17:4e:
8c:91:fe:db:96:93:1a:66:d1:65:d1:c7:76:ae:e0:
be:45:b0:86:79:8f:b3:09:97:c6:89:62:d0:80:28:
cf:db:1b:63:4c:91:a9:c6:17:ec:94:dd:c9:51:96:
9b:1c:ec:fc:f7:be:de:d4:4b:92:eb:43:e5:0c:32:
60:27:65:08:2b:a5:e2:b4:5b:73:a5:8f:9c:96:22:
44:85:7c:5e:40:66:2e:11:88:47:d7:b0:81:4c:01:
19:87:6a:ff:64:0a:20:b2:53:c1:1b:56:ef:2b:78:
2a:60:d3:5c:2a:36:5c:76:75:15:61:63:a9:32:52:
83:b8:d4:0c:71:d2:64:89:80:40:e6:12:33:8d:da:
77:75:a1:d9:ea:a8:7c:3e:dd:b7:06:67:8a:b1:0e:
86:5a:38:88:b6:43:1e:04:b1:13:0c:66:4e:a2:dc:
05:94:3a:4e:40:65:c9:05:de:b0:75:7d:fe:70:72:
af:b1:36:39:63:90:7f:5a:5d:83:ba:11:d2:e4:45:
0f:0f:50:da:9d:4d:80:c0:1f:9b:6a:10:11:25:ce:
66:33:2e:a6:16:11:c0:9d:7f:75:c8:39:80:3e:47:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F9:2B:45:62:73:21:FC:E8:7C:AF:38:22:17:44:44:FA:2D:03:BC
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/BvkrRWJzIfzofK84IhdERPotA7w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:d9:51:6e:a3:02:31:1d:5e:54:b0:ab:f2:f2:20:10:65:6f:
0e:e2:79:f8:8d:c5:94:c1:b9:9c:95:7a:ae:6a:a1:5b:db:27:
1c:55:a3:ef:b7:48:c1:47:1a:8f:fe:c6:e1:e8:70:e6:e8:ec:
47:44:16:2b:14:85:f5:8b:66:ed:28:1a:de:6e:16:e5:b8:b3:
94:88:5d:40:af:d0:6d:f2:d0:21:b5:96:37:b4:bc:62:9a:69:
c5:21:79:94:6e:9d:63:ed:41:4f:1c:9b:5b:82:b8:8b:1e:a1:
17:9b:4e:8b:7f:71:4e:c9:1c:fa:a0:6d:b0:3f:2b:35:55:5c:
d4:fc:35:1d:52:56:cc:02:69:10:d2:f9:58:f4:2c:af:24:45:
59:d1:a1:83:ec:e6:1d:4d:01:92:99:29:3d:86:ff:99:92:e4:
be:ce:89:b8:49:df:28:90:14:37:45:10:c4:fd:e0:9a:77:49:
ae:2f:19:a5:77:48:13:45:9e:39:9f:5c:24:28:42:24:12:df:
6f:bc:67:1b:52:c3:7f:56:00:3b:87:fe:f7:aa:f7:c3:18:3c:
dd:f8:b2:f3:df:bc:61:b7:0d:5c:b0:f8:45:43:9e:fd:21:02:
39:17:e8:62:73:13:6f:a6:91:b5:c9:dc:35:2d:ad:07:35:11:
f5:ef:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org