Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/EFZ5C8rDl1U-6OeNxH6aDRNMfYM.roa
File: EFZ5C8rDl1U-6OeNxH6aDRNMfYM.roa (raw, json)
Hash identifier: Ox0wR5+2LC+ZHQJfU8+wBN1TLb873XBQkBqzfnME3RI=
Subject key identifier: 10:56:79:0B:CA:C3:97:55:3E:E8:E7:8D:C4:7E:9A:0D:13:4C:7D:83
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 06E3
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/EFZ5C8rDl1U-6OeNxH6aDRNMfYM.roa
Signing time: Thu 18 May 2023 07:23:37 +0000
ROA not before: Thu 18 May 2023 07:23:37 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
103.41.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: May 18 07:23:37 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=1056790BCAC397553EE8E78DC47E9A0D134C7D83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:88:cb:95:83:ca:ed:67:bb:8b:d6:7d:1e:8a:
de:52:ca:de:41:b5:63:1a:f4:66:76:fc:a3:f4:a7:
b9:1d:64:68:75:f4:fc:02:07:10:78:81:7a:1d:92:
c9:50:18:76:77:a1:6f:70:78:b2:f9:c0:aa:55:33:
7f:11:a2:36:d8:e6:01:13:68:b3:b2:b4:0c:41:1b:
45:d6:85:71:8c:03:d8:0a:a9:9a:5b:24:86:04:6e:
b6:6b:7d:13:43:0c:55:93:22:bb:04:0e:8b:89:5d:
18:24:9c:8a:23:59:d4:96:33:9b:8f:7d:2a:d5:a2:
bf:92:dc:50:c9:8f:eb:20:a1:d3:61:34:65:48:5b:
e2:28:5d:10:1a:de:17:19:4d:cf:5d:e7:b1:67:df:
a1:b8:29:c1:10:5b:fc:ed:b2:03:aa:8f:c5:25:63:
19:cb:3b:85:fe:b3:a9:25:96:75:ba:86:89:7a:5d:
a9:80:96:79:84:94:55:63:7c:4b:ca:25:f7:9e:f3:
5c:ca:da:ea:e4:29:4f:a8:be:88:09:fb:0c:e1:7c:
0c:0e:87:ed:9a:44:6f:a3:2d:16:bc:97:83:89:83:
ab:1b:50:f8:dd:ef:87:1d:f3:fb:1b:50:af:73:1a:
d3:8d:ea:a9:91:e4:a4:c8:b2:3b:12:7e:b4:25:66:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:56:79:0B:CA:C3:97:55:3E:E8:E7:8D:C4:7E:9A:0D:13:4C:7D:83
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/EFZ5C8rDl1U-6OeNxH6aDRNMfYM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
103.41.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:e9:a7:5c:00:aa:55:86:52:13:43:49:b2:a4:22:2a:ce:df:
1c:8d:ec:3d:a1:31:99:ae:9f:c6:7f:ad:83:31:54:39:e7:1a:
ce:d4:d5:b1:97:fe:3f:86:81:24:2c:b8:93:f2:67:d4:69:22:
35:aa:36:07:8d:26:0b:c3:ea:05:5b:51:a4:f8:9c:b6:c2:8a:
b1:e3:93:4b:d0:0f:48:a1:5a:83:fd:fe:57:7f:71:03:60:54:
04:e9:be:5e:a5:14:0d:7b:06:00:72:c7:ad:44:4d:1a:76:22:
96:b6:79:f5:ff:e0:c7:d2:5b:c2:cd:dd:25:3f:c1:ec:9c:c8:
2b:55:32:8b:9d:a0:20:38:61:b3:ec:68:c1:17:16:18:b7:63:
9d:a8:21:00:8c:ac:79:c7:94:8f:2d:a8:fb:0d:57:6f:62:a7:
63:71:d8:ca:b2:6e:0a:5f:ba:5d:df:d5:ca:08:e3:98:ee:6e:
59:aa:68:f0:fc:8f:dd:dc:4e:da:2f:51:e1:11:eb:b7:d2:3d:
c6:70:c9:68:6b:2f:5b:f0:8b:76:4d:cf:40:1e:fb:a7:e8:90:
14:63:59:33:de:4a:ab:4b:e0:bd:b6:f7:6e:e2:65:90:6a:36:
2f:68:56:d2:ff:a8:7d:81:88:dc:80:6c:99:b6:39:ac:f7:99:
20:da:ec:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org