Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/ElIiWjX-M3WaJU0myti5SXpeQrw.roa
File: ElIiWjX-M3WaJU0myti5SXpeQrw.roa (raw, json)
Hash identifier: umZDpkUknrTZ3ATdncJoj+dU/G4Z4IHKkfrolGMg2aQ=
Subject key identifier: 12:52:22:5A:35:FE:33:75:9A:25:4D:26:CA:D8:B9:49:7A:5E:42:BC
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07F6
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ElIiWjX-M3WaJU0myti5SXpeQrw.roa
Signing time: Tue 13 Jun 2023 18:24:04 +0000
ROA not before: Tue 13 Jun 2023 18:24:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 18:24:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1252225A35FE33759A254D26CAD8B9497A5E42BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:1f:cf:96:2e:b6:c6:55:8a:4e:c1:39:af:
cc:c3:08:78:44:cd:c5:9f:b8:b7:45:bb:a6:9c:fa:
cd:b8:9d:72:c4:bf:d9:2d:b9:55:1a:ab:15:84:70:
4d:db:69:ab:aa:89:9b:ad:21:f5:32:4e:16:eb:5d:
6d:07:2c:17:64:c6:50:64:ea:de:fd:59:d1:7f:ef:
ab:8f:2c:66:85:44:08:83:ee:91:b1:18:e0:26:96:
e4:a1:18:e2:90:3e:9a:4b:1f:6e:f1:e5:83:82:65:
bc:97:0f:2d:27:1a:81:ec:1b:17:76:40:b4:d7:9c:
81:ad:cf:93:8f:83:9d:a9:ba:33:a7:b6:31:09:2a:
63:f6:7b:4d:86:93:b4:90:39:de:a0:b7:21:7c:3d:
c4:ea:b2:79:89:fe:6d:e4:83:39:e5:70:5c:f6:5b:
af:df:74:7e:14:8a:10:a8:67:2c:a2:55:94:af:7c:
cb:b8:6a:2b:7b:cc:19:19:84:0e:e6:6e:e5:d1:2c:
02:f8:b8:ab:9e:e6:87:8b:ab:41:a1:16:2e:a8:23:
5a:25:88:3b:02:ca:87:19:bc:e3:21:87:38:b5:e1:
88:af:ed:12:ec:b7:b8:60:ef:76:a3:ce:1e:8d:82:
92:1b:4a:fe:59:ae:c4:43:47:3e:62:96:fc:22:d5:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:52:22:5A:35:FE:33:75:9A:25:4D:26:CA:D8:B9:49:7A:5E:42:BC
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/ElIiWjX-M3WaJU0myti5SXpeQrw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
80:c4:1a:f9:65:c6:11:40:32:91:d0:75:fd:0c:05:7d:b6:3c:
f0:9d:1d:f0:8d:61:85:4c:fc:ce:94:71:86:31:65:82:cf:aa:
af:9a:47:94:16:a9:46:98:97:4f:0e:58:b2:87:9c:40:fc:02:
a5:91:c0:3e:24:d9:f7:65:f4:66:87:7a:81:f5:4c:1f:6e:51:
9e:9b:da:a4:9a:15:4b:a1:9d:e3:1c:6a:3d:73:6c:f3:2c:67:
2c:db:25:af:7b:6c:10:f1:f1:5b:ee:a7:6b:60:00:4b:5e:ed:
a1:23:23:4a:3f:0b:0f:28:c5:8f:6e:0e:00:4b:96:73:40:1a:
19:ad:06:fe:fc:30:56:e6:6b:f4:8a:55:13:3b:d1:11:3d:12:
b8:eb:21:49:1b:19:03:5f:a6:a4:da:f9:44:3d:5b:a7:cd:e4:
9e:1b:3a:15:84:8e:a3:35:2b:57:6b:58:89:46:56:9f:a0:da:
82:ea:ec:24:06:ea:f5:dc:b3:86:9f:58:bf:42:b2:11:78:e7:
b3:f2:f5:75:4a:12:f3:a9:3d:89:2f:39:de:a0:fd:4d:1b:5f:
13:c8:2f:0e:f3:f2:35:0c:49:6d:dd:ad:20:9b:db:15:24:5b:
6f:97:44:4d:e5:76:f8:95:f5:0e:83:09:ab:20:87:78:0c:21:
27:7e:90:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org