Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/DTnjw6WLYgUkJIfkHDZacXt8J8Q.roa
File: DTnjw6WLYgUkJIfkHDZacXt8J8Q.roa (raw, json)
Hash identifier: bnlt8F0BheFnzv3+rC+ZbA+UXfAoyuZ+BPzOygcqvpY=
Subject key identifier: 0D:39:E3:C3:A5:8B:62:05:24:24:87:E4:1C:36:5A:71:7B:7C:27:C4
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08AA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/DTnjw6WLYgUkJIfkHDZacXt8J8Q.roa
Signing time: Wed 14 Jun 2023 16:54:04 +0000
ROA not before: Wed 14 Jun 2023 16:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218 (0x8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 16:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0D39E3C3A58B6205242487E41C365A717B7C27C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:3b:e6:c0:af:71:f2:1b:12:ff:2f:15:75:
44:d6:20:99:78:c3:37:68:ab:8e:48:9d:d8:a8:72:
a8:1a:55:3d:29:90:58:9e:f1:2a:f9:7f:ae:c1:b1:
70:e0:bf:20:de:49:35:a4:bc:6f:dd:96:a1:af:5d:
6f:db:ff:ec:62:d0:15:cd:82:23:57:94:a2:23:02:
69:72:60:03:9b:7d:07:64:89:f0:8e:1c:c2:bf:f3:
22:23:e4:40:40:9c:59:4c:fe:34:f7:63:6f:3d:76:
85:5f:a6:f9:15:32:07:a4:6d:05:c3:27:f6:2e:2c:
f6:31:fb:db:a6:50:6c:f2:90:1f:89:7d:a9:ee:fe:
79:74:e3:5a:24:b5:0c:68:c4:56:3b:ae:ef:0c:1e:
84:8a:73:2b:87:2b:da:e3:d1:89:a8:b4:5d:81:65:
18:fb:d1:ac:72:9f:b7:fa:dc:2a:e6:5a:21:1e:c1:
0d:07:1b:46:94:d6:36:32:77:3e:68:f8:75:d7:2a:
f3:41:4f:41:77:a7:39:ae:52:6e:15:80:f4:c4:d3:
00:4e:3d:79:5b:29:65:eb:99:c5:6d:ed:58:89:a7:
73:35:40:76:c2:11:97:b7:59:a8:1d:f2:64:7e:7d:
92:8b:c0:92:6f:1b:d2:6f:14:b1:e3:99:25:36:29:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:39:E3:C3:A5:8B:62:05:24:24:87:E4:1C:36:5A:71:7B:7C:27:C4
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/DTnjw6WLYgUkJIfkHDZacXt8J8Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
18:90:e1:27:2e:78:c8:e6:54:b4:a6:6f:a1:39:97:fc:60:da:
7e:72:28:09:33:ce:a9:cd:1f:49:12:64:97:fb:91:52:97:3e:
33:60:6f:25:2a:08:9e:e6:a1:f6:1f:72:8e:53:2a:c0:13:7b:
3f:8b:eb:4c:33:08:00:d9:06:ee:aa:99:f6:e8:51:d0:68:41:
4e:87:4d:75:c7:e4:61:19:d6:75:5b:dd:6f:96:32:2a:b8:a4:
da:ab:47:85:2b:0c:0c:d0:98:d9:9c:8d:5b:7a:1c:de:99:26:
3f:d5:6f:23:88:41:e9:40:e4:27:72:c9:95:b2:9b:e1:fb:ee:
9d:7a:1f:22:41:6e:d1:f7:cf:30:a0:9d:56:1b:37:08:48:d0:
8e:e5:9e:c0:bc:c8:15:bf:be:96:92:06:35:83:91:b3:fa:51:
d1:a8:f7:a8:90:fd:85:14:c6:9d:01:04:44:82:74:e7:e1:bc:
22:8b:35:46:ff:b8:78:8f:36:c5:bf:ae:ea:cf:03:82:51:98:
65:54:d7:ac:2d:64:0d:ad:b5:a7:9e:33:b7:e4:67:34:7c:b2:
c1:ce:0f:f9:9e:4b:79:2c:71:91:49:9f:5b:6f:78:ec:2f:da:
62:49:6f:ee:74:7f:b3:16:5d:ee:07:f7:ba:06:09:4d:d5:9c:
3c:e7:8a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org