Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/EHvcYi81htSdrC_sj0j4-cJUd7Q.roa
File: EHvcYi81htSdrC_sj0j4-cJUd7Q.roa (raw, json)
Hash identifier: +I3cVIgQrVkib3Lq977A2r9BaHehiPiRidMWHgYuTvk=
Subject key identifier: 10:7B:DC:62:2F:35:86:D4:9D:AC:2F:EC:8F:48:F8:F9:C2:54:77:B4
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07F2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/EHvcYi81htSdrC_sj0j4-cJUd7Q.roa
Signing time: Tue 13 Jun 2023 17:54:02 +0000
ROA not before: Tue 13 Jun 2023 17:54:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034 (0x7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 17:54:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=107BDC622F3586D49DAC2FEC8F48F8F9C25477B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:10:35:1d:b3:5e:dc:a6:0a:9d:33:17:0d:
ba:25:d2:72:d6:94:3e:86:dd:c9:20:26:9f:aa:71:
aa:51:56:42:c0:58:91:e2:bf:87:72:c1:33:eb:2f:
3d:31:eb:34:fc:07:31:f6:93:a4:6c:5d:19:b4:ef:
e2:5d:94:80:1a:ca:9a:4a:e1:83:9e:92:47:28:0e:
32:af:69:10:b3:83:54:8e:78:da:6a:77:c8:29:12:
bf:f5:7c:30:2b:8b:c8:cc:71:58:b6:f2:7c:80:84:
45:d3:4c:fb:dc:5b:1a:62:af:6e:5e:d0:d7:7d:f4:
f9:f1:bb:a7:6d:d0:d1:1f:86:22:e6:5e:48:33:ba:
71:b9:0d:c8:86:67:05:95:06:6a:d0:cc:ad:8f:00:
d2:1d:85:ec:d5:11:97:63:78:aa:8b:16:f7:99:22:
91:71:68:c2:9f:8f:ed:dd:89:a5:a9:b1:77:29:f9:
66:8b:92:14:05:f4:c7:79:6d:2a:c3:75:43:ad:ff:
10:08:8e:be:27:d7:02:a9:a2:c8:fd:15:56:60:e8:
e8:f4:03:e6:82:e2:9c:0d:fb:c4:08:14:ed:3e:8d:
06:95:81:54:8c:80:98:69:7c:e8:75:10:76:2f:2c:
20:58:42:29:60:6e:ff:85:1d:f9:94:ac:c7:ff:5d:
b9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7B:DC:62:2F:35:86:D4:9D:AC:2F:EC:8F:48:F8:F9:C2:54:77:B4
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/EHvcYi81htSdrC_sj0j4-cJUd7Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
03:05:7a:df:a3:79:2d:c4:4b:a1:6a:50:7e:dd:73:f7:5a:28:
cc:09:10:f8:f0:02:ba:e6:68:26:9d:83:34:31:0d:57:57:db:
89:d9:d2:da:7c:1f:56:60:de:53:e7:74:34:64:81:c7:4b:5e:
34:78:f6:b8:c4:55:f4:bb:8f:ab:c1:ed:a2:9b:ea:ab:2b:cb:
38:29:b0:75:ee:f9:98:3e:9a:a4:2e:c3:0a:d7:cd:63:bf:4e:
64:d7:fa:58:5e:74:a9:72:1b:9f:17:71:04:e8:61:33:cf:93:
2a:b2:8c:e1:62:01:5d:3e:3a:4e:94:e2:9d:ae:8d:2f:b7:ae:
d7:ad:fa:e1:d5:7f:db:ae:6d:67:17:7b:58:00:08:5f:f8:4f:
73:47:c4:e3:63:5d:da:ec:38:04:28:4d:ec:4c:d0:d6:c7:2c:
45:b9:4f:0d:7d:0e:41:a5:35:54:87:d6:18:22:70:41:1b:fa:
b5:72:2b:4d:3d:a1:8e:da:ce:bf:bd:6c:c8:96:55:e7:26:a7:
ba:e0:27:68:d2:3b:61:74:6a:2d:e7:7b:f7:0f:22:01:cd:64:
a0:dd:10:1d:87:97:a3:fa:70:51:c2:ff:ba:56:bf:86:89:b7:
2b:37:94:7d:66:f6:77:00:e7:3e:c6:16:ed:39:89:08:8e:90:
73:fb:47:04
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMx
NzU0MDJaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDEwN0JEQzYyMkYzNTg2
RDQ5REFDMkZFQzhGNDhGOEY5QzI1NDc3QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFjBA1HbNe3KYKnTMXDbol0nLWlD6G3ckgJp+qcapRVkLAWJHi
v4dywTPrLz0x6zT8BzH2k6RsXRm07+JdlIAayppK4YOekkcoDjKvaRCzg1SOeNpq
d8gpEr/1fDAri8jMcVi28nyAhEXTTPvcWxpir25e0Nd99Pnxu6dt0NEfhiLmXkgz
unG5DciGZwWVBmrQzK2PANIdhezVEZdjeKqLFveZIpFxaMKfj+3diaWpsXcp+WaL
khQF9Md5bSrDdUOt/xAIjr4n1wKposj9FVZg6Oj0A+aC4pwN+8QIFO0+jQaVgVSM
gJhpfOh1EHYvLCBYQilgbv+FHfmUrMf/XbnrAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUEHvcYi81htSdrC/sj0j4+cJUd7QwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvRUh2Y1lpODFodFNk
ckNfc2owajQtY0pVZDdRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAAwV636N5LcRLoWpQft1z91oozAkQ
+PACuuZoJp2DNDENV1fbidnS2nwfVmDeU+d0NGSBx0teNHj2uMRV9LuPq8Htopvq
qyvLOCmwde75mD6apC7DCtfNY79OZNf6WF50qXIbnxdxBOhhM8+TKrKM4WIBXT46
TpTina6NL7eu16364dV/265tZxd7WAAIX/hPc0fE42Nd2uw4BChN7EzQ1scsRblP
DX0OQaU1VIfWGCJwQRv6tXIrTT2hjtrOv71syJZV5yanuuAnaNI7YXRqLed79w8i
Ac1koN0QHYeXo/pwUcL/ula/hom3KzeUfWb2dwDnPsYW7TmJCI6Qc/tHBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org