Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Efa8lOela3mT_nPRatRomJA9t-s.roa
File: Efa8lOela3mT_nPRatRomJA9t-s.roa (raw, json)
Hash identifier: d4BT+pBdEwBzUU3Ilc65u5y7U6TbabbWSFJ+9X5WmFA=
Subject key identifier: 11:F6:BC:94:E7:A5:6B:79:93:FE:73:D1:6A:D4:68:98:90:3D:B7:EB
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0872
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Efa8lOela3mT_nPRatRomJA9t-s.roa
Signing time: Wed 14 Jun 2023 09:54:04 +0000
ROA not before: Wed 14 Jun 2023 09:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 09:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=11F6BC94E7A56B7993FE73D16AD46898903DB7EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:54:78:f4:eb:89:52:57:2a:0c:64:a5:2a:
36:d2:93:3e:4e:7f:f8:6f:9b:26:6b:6c:63:01:91:
bb:82:cf:81:f4:bd:e5:1a:63:f5:c3:ac:11:01:ad:
f0:26:2a:0a:3c:e6:7c:ac:46:0d:80:a2:54:b0:e3:
80:fd:eb:02:5d:e7:0f:03:0a:03:6b:9e:71:57:ad:
dc:1d:46:9b:c9:a1:77:3e:54:63:37:6d:d0:df:ab:
83:6b:44:2c:05:27:50:92:1d:e4:9f:ce:7b:0b:6b:
7d:c3:8d:e2:71:85:3a:7d:35:6f:13:45:b7:ca:ce:
0c:83:c9:fc:07:54:e7:4b:18:7c:a8:5d:a7:1a:4d:
5c:43:d9:49:e2:9a:34:bf:37:2b:75:9b:52:0b:b0:
b8:b6:d2:5c:98:3b:4d:0a:04:54:93:ed:d1:75:09:
81:73:71:88:4d:ed:0f:d4:d7:46:84:cf:59:0d:30:
81:48:7d:e0:5d:cf:c0:6a:a0:88:f9:8d:3b:f2:76:
d6:5a:6d:8d:ee:de:72:29:ec:31:25:b6:6d:ff:9b:
74:10:e0:98:ff:fb:b7:e1:fa:f8:d1:c3:4d:2b:6e:
cd:77:ce:40:80:61:1f:dc:65:f1:52:ed:cf:e3:65:
fb:bd:1b:21:fb:7b:3a:99:64:cd:58:d2:4c:b8:78:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F6:BC:94:E7:A5:6B:79:93:FE:73:D1:6A:D4:68:98:90:3D:B7:EB
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Efa8lOela3mT_nPRatRomJA9t-s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
19:34:e2:22:77:f2:05:7a:42:09:90:df:cc:5a:3b:a1:e8:d4:
41:ab:8b:51:2e:96:77:fe:50:77:a9:44:f9:85:cc:4f:9b:e8:
4b:2d:ac:7f:a6:be:42:53:5f:99:dc:d0:cc:38:a2:ed:ee:17:
a7:a5:2a:29:88:75:38:27:80:a1:f9:07:99:b7:e1:22:51:13:
77:a6:21:a5:d6:6f:39:25:81:b9:a7:c0:59:4b:47:d6:be:c0:
89:63:36:e6:7b:72:0c:3d:f1:06:eb:05:c0:98:7c:13:af:9d:
05:9e:1d:d9:f3:75:01:0d:7a:d5:1c:69:c3:9a:2e:0c:b7:a4:
c8:3b:4e:9e:eb:98:1d:24:19:d1:33:3b:97:48:d7:34:d3:5f:
7a:10:49:30:53:e6:b7:30:1f:31:dc:c7:a0:80:f4:9d:10:c0:
31:9d:f8:5d:f9:c2:83:c1:0b:7d:40:cd:25:92:39:e4:f7:7d:
66:f3:18:31:6f:79:f2:7f:88:64:99:75:91:b8:13:c6:e6:8e:
23:23:de:0d:d8:67:40:8e:40:0f:67:2a:1c:ac:65:02:2a:db:
d2:44:0f:68:95:23:45:ae:f6:81:2c:15:5d:5e:c0:65:d6:f3:
e1:2f:73:c2:c8:5c:e3:e7:f9:66:fc:61:ad:7b:44:4f:ad:81:
30:b8:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org