Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/CwUEkRcMgGd2mU3EycYFqyk6uOo.roa
File: CwUEkRcMgGd2mU3EycYFqyk6uOo.roa (raw, json)
Hash identifier: dWVAGSa0U6MmVtptzm4M2faSDgHy08s0Qt8z0vkcTa8=
Subject key identifier: 0B:05:04:91:17:0C:80:67:76:99:4D:C4:C9:C6:05:AB:29:3A:B8:EA
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08DE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CwUEkRcMgGd2mU3EycYFqyk6uOo.roa
Signing time: Wed 14 Jun 2023 23:24:08 +0000
ROA not before: Wed 14 Jun 2023 23:24:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 23:24:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0B050491170C806776994DC4C9C605AB293AB8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:ea:77:25:89:05:bf:ef:8a:04:0a:ce:a1:
2a:de:78:18:0a:18:ca:70:c4:78:bc:15:48:c1:87:
68:24:ae:8a:55:82:db:bb:ae:e4:f9:22:7c:cd:3c:
33:b7:64:c5:e6:15:99:1b:dd:30:12:f7:9d:17:d6:
be:d4:36:d3:48:63:f2:14:0d:31:c7:bf:27:df:dd:
62:cc:6a:3d:15:40:a3:b3:b2:4b:3c:a2:66:fe:7a:
8c:89:ac:bf:db:f8:9b:e8:f8:a6:c7:da:43:ac:e0:
28:6e:d4:77:8d:12:6e:31:13:8c:bf:a0:d1:5f:10:
1f:46:70:e1:f1:7e:66:a7:66:35:22:9f:44:7e:22:
bc:c8:d7:15:a2:49:23:af:c6:39:e8:e8:b3:08:e4:
a9:2f:9a:8a:62:cb:a8:da:96:af:a8:fe:0d:a3:7e:
30:19:8f:6e:4f:b1:c3:5e:52:59:f6:54:f9:02:48:
f7:57:18:da:67:df:ef:bb:42:e7:d4:77:b5:43:69:
6e:a0:94:ca:de:43:be:44:bc:24:dd:44:bb:87:42:
f5:5b:9d:ff:00:c8:94:75:d3:4d:e3:9e:9e:24:98:
d1:91:cc:3f:0a:54:0b:e0:e1:6c:83:cb:e4:cb:b7:
a4:f1:3c:73:03:d7:57:74:75:53:ef:12:40:dc:73:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:05:04:91:17:0C:80:67:76:99:4D:C4:C9:C6:05:AB:29:3A:B8:EA
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/CwUEkRcMgGd2mU3EycYFqyk6uOo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
95:15:50:4a:e1:bf:be:3f:21:75:05:c8:7a:2b:00:6f:4b:ea:
f1:2b:43:2a:a8:63:ab:71:b8:7b:ad:2d:fb:c0:eb:4a:7e:ef:
b7:a4:63:0c:dc:5c:3b:a5:fa:90:6f:b5:e2:9a:4d:48:fe:72:
eb:ab:bd:fc:eb:01:37:16:ee:e2:eb:46:cd:65:37:c1:3c:0b:
c7:22:87:1a:a7:84:b9:dd:97:1b:2b:72:71:51:5e:45:b8:c7:
f7:ac:9e:c7:a5:d8:25:89:e7:99:4c:cf:83:81:c6:12:ab:c6:
e4:03:83:33:e1:5d:6d:2a:48:5c:78:69:ea:c8:c2:62:65:29:
30:fc:45:28:3f:8b:b9:0a:81:0d:ec:e7:70:46:07:49:eb:fb:
d8:62:a4:b9:96:c4:b9:e6:f8:5e:fb:a5:fd:6f:a8:be:ee:b8:
8a:a5:a8:25:db:b8:4a:31:0d:98:78:78:9b:12:f4:55:b0:33:
e0:69:51:4e:91:dc:92:b8:21:42:16:f1:bf:53:9c:b7:4f:0d:
01:0e:0c:35:95:56:69:bc:11:ec:b1:78:d6:62:19:fb:5d:f3:
36:9c:eb:53:c2:fa:93:bd:22:2b:74:af:a8:5c:5b:8f:d5:2e:
22:9c:5a:d3:33:39:d2:1c:ba:92:c5:12:e7:9c:07:30:8a:bb:
d8:75:89:a5
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTQy
MzI0MDhaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDBCMDUwNDkxMTcwQzgw
Njc3Njk5NERDNEM5QzYwNUFCMjkzQUI4RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsyep3JYkFv++KBArOoSreeBgKGMpwxHi8FUjBh2gkropVgtu7
ruT5InzNPDO3ZMXmFZkb3TAS950X1r7UNtNIY/IUDTHHvyff3WLMaj0VQKOzsks8
omb+eoyJrL/b+Jvo+KbH2kOs4Chu1HeNEm4xE4y/oNFfEB9GcOHxfmanZjUin0R+
IrzI1xWiSSOvxjno6LMI5Kkvmopiy6jalq+o/g2jfjAZj25PscNeUln2VPkCSPdX
GNpn3++7QufUd7VDaW6glMreQ75EvCTdRLuHQvVbnf8AyJR1003jnp4kmNGRzD8K
VAvg4WyDy+TLt6TxPHMD11d0dVPvEkDcc+CbAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUCwUEkRcMgGd2mU3EycYFqyk6uOowHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvQ3dVRWtSY01nR2Qy
bVUzRXljWUZxeWs2dU9vLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAlRVQSuG/vj8hdQXIeisAb0vq8StD
Kqhjq3G4e60t+8DrSn7vt6RjDNxcO6X6kG+14ppNSP5y66u9/OsBNxbu4utGzWU3
wTwLxyKHGqeEud2XGytycVFeRbjH96yex6XYJYnnmUzPg4HGEqvG5AODM+FdbSpI
XHhp6sjCYmUpMPxFKD+LuQqBDezncEYHSev72GKkuZbEueb4Xvul/W+ovu64iqWo
Jdu4SjENmHh4mxL0VbAz4GlRTpHckrghQhbxv1Oct08NAQ4MNZVWabwR7LF41mIZ
+13zNpzrU8L6k70iK3SvqFxbj9UuIpxa0zM50hy6ksUS55wHMIq72HWJpQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org