Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Du4idc1RM7pu6AJX7eFNFjawG8g.roa
File: Du4idc1RM7pu6AJX7eFNFjawG8g.roa (raw, json)
Hash identifier: /nj2gl+u6TNCa30MtRlI3q6qn7+IMSRPZXfBYFzFzbw=
Subject key identifier: 0E:EE:22:75:CD:51:33:BA:6E:E8:02:57:ED:E1:4D:16:36:B0:1B:C8
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0892
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Du4idc1RM7pu6AJX7eFNFjawG8g.roa
Signing time: Wed 14 Jun 2023 13:54:07 +0000
ROA not before: Wed 14 Jun 2023 13:54:07 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2194 (0x892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 13:54:07 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=0EEE2275CD5133BA6EE80257EDE14D1636B01BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:d4:7d:4d:2b:a7:29:32:d5:71:d7:d9:5b:
b0:7f:bf:98:21:29:17:46:37:3a:c7:ee:1a:6d:7f:
ec:d3:f5:c7:d7:08:0b:72:ce:87:1b:42:83:d3:61:
73:1d:6d:95:27:0b:c9:a3:78:5b:ef:49:0a:85:7e:
67:50:3b:49:8e:a9:aa:c8:7d:b0:22:d1:6f:ec:d9:
61:81:1d:16:e8:8e:5f:61:52:60:8e:8c:10:aa:12:
e4:ef:84:09:3d:61:e1:c7:a3:bd:74:b0:58:7d:a7:
ab:94:5c:43:60:ae:e6:96:a3:82:0c:00:78:76:b5:
37:a7:cb:a3:46:e0:13:9d:02:2a:69:0a:6a:cc:21:
2b:69:32:a8:a5:9a:16:5b:5f:21:57:ec:c7:4d:fa:
9c:4e:53:f8:68:0a:c2:61:7f:a5:0b:7c:06:50:68:
61:45:8a:9f:48:54:3e:fd:43:fd:b8:2d:37:a3:ea:
bf:a6:51:df:7f:10:d3:3e:06:9b:b8:7b:af:15:82:
ad:7f:31:36:df:0c:fb:cb:ef:42:ed:21:70:2f:c0:
13:c4:3b:db:fd:38:fd:e0:b0:31:1c:63:cd:f5:cb:
6a:32:5c:50:e3:f8:62:13:8c:0e:13:6f:09:8d:c1:
a8:1f:f0:27:09:d9:6f:f8:a2:31:30:a6:b9:6f:68:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:22:75:CD:51:33:BA:6E:E8:02:57:ED:E1:4D:16:36:B0:1B:C8
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Du4idc1RM7pu6AJX7eFNFjawG8g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:aa:a9:77:80:45:2a:78:41:d3:e1:b0:34:a5:fe:65:d7:30:
36:fe:94:b8:0e:64:67:ea:b9:8a:d0:03:00:a5:da:71:f2:ae:
ca:ea:9a:73:eb:25:fd:eb:04:61:3d:11:c0:ca:02:b8:b5:5f:
66:22:db:5b:e7:a5:57:57:29:d9:71:35:08:88:7f:07:5e:80:
d5:fc:2f:fc:37:11:ce:6d:c9:e5:2e:e3:58:b5:6e:99:2a:81:
58:35:c7:ee:04:22:da:fe:1e:9d:a1:75:7d:03:bf:e3:b6:8c:
ca:56:f1:90:5d:bd:aa:8c:fb:7c:f5:c7:0f:76:18:67:1a:c1:
6a:0c:94:a8:82:35:b8:8e:35:44:86:3e:d9:a4:94:68:c3:b4:
25:1c:0d:67:1e:0e:c8:06:f1:8e:d6:b0:fb:77:d2:91:d4:57:
37:36:6e:e9:18:8c:72:9d:fb:9c:95:b1:9c:58:9d:1f:8e:39:
ab:65:88:d1:59:1f:d9:2c:67:cd:44:e2:d6:0d:6c:88:ef:62:
07:a1:d0:a1:ea:28:5e:6d:af:8e:be:c2:d4:f4:e7:3d:3c:af:
87:0b:ea:5b:20:34:3f:ec:14:56:a6:c7:ec:f8:23:bd:55:4c:
e5:a0:61:5c:2b:26:f0:44:1b:2e:cb:eb:08:5c:e3:02:d6:2e:
8b:4e:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org