Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/Fo5yorcoQZ6D44yaBEaDNpu72q4.roa
File: Fo5yorcoQZ6D44yaBEaDNpu72q4.roa (raw, json)
Hash identifier: pecFoIJar+d9hPK5bbGOfCltmz7J3xjwYlA+gFITwJA=
Subject key identifier: 16:8E:72:A2:B7:28:41:9E:83:E3:8C:9A:04:46:83:36:9B:BB:DA:AE
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0927
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Fo5yorcoQZ6D44yaBEaDNpu72q4.roa
Signing time: Thu 15 Jun 2023 06:02:06 +0000
ROA not before: Thu 15 Jun 2023 06:02:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343 (0x927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 06:02:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=168E72A2B728419E83E38C9A044683369BBBDAAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:0e:76:d0:e0:3a:d0:89:93:0a:87:f2:07:
69:da:3d:84:ad:2d:4c:39:78:94:9f:6a:dc:7b:91:
e3:b9:30:43:8f:0b:2f:91:45:73:9f:c4:de:c6:31:
e6:96:61:ce:26:7f:0c:69:3f:92:f1:1f:d6:71:09:
07:46:81:67:6d:46:4a:bc:d1:f0:b0:75:bf:30:33:
d1:6c:b3:b8:20:a2:4c:03:03:d5:b1:e0:8f:61:ab:
b6:64:f7:d9:9c:52:86:ba:e8:ef:c6:af:32:a4:48:
08:e6:74:3f:ba:46:d3:05:9a:c7:fe:b3:98:49:c8:
42:fe:95:a3:88:7a:a2:77:4f:8c:d4:a4:48:c0:ee:
a6:c6:03:44:98:b2:ad:f6:85:20:d2:d9:51:21:b7:
79:2b:59:56:25:8e:a9:c2:2f:37:9b:7c:f0:51:f5:
9d:03:a1:83:7a:11:89:0f:17:27:7a:9d:e5:8e:95:
b4:4e:d4:55:c9:fb:11:86:38:eb:a4:90:54:7b:6d:
0d:df:61:54:86:00:3f:01:a0:c4:6e:b8:62:be:cb:
ab:5a:19:43:7d:53:50:ed:42:82:48:03:5f:9b:80:
90:b1:9e:c7:ae:0f:b2:3d:78:ff:0e:9b:31:eb:de:
34:c5:ca:cb:51:44:a0:2b:93:c9:b1:ec:49:14:08:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8E:72:A2:B7:28:41:9E:83:E3:8C:9A:04:46:83:36:9B:BB:DA:AE
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/Fo5yorcoQZ6D44yaBEaDNpu72q4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
22:81:24:73:a7:90:a7:e6:39:2c:83:0f:f8:ec:dd:07:4b:9c:
ea:4c:21:29:d7:f2:78:43:5a:0d:4f:b4:e3:f3:1d:b1:f9:b7:
a9:e8:9f:85:e9:e0:f2:d7:0c:c0:be:6c:13:52:e3:0a:9d:32:
ff:bc:8e:2f:c8:0d:a5:5a:12:74:31:68:90:46:bc:62:fc:f1:
e4:6a:da:f2:cb:e9:af:c7:a2:f8:d2:a1:02:c8:59:3d:37:b6:
07:70:f4:c0:58:96:4a:cc:37:ab:2f:f4:11:88:e9:1f:65:aa:
f5:e1:90:69:31:8c:ba:c3:59:b5:74:27:ab:dd:52:e3:48:19:
0f:5b:8b:c6:b0:19:3e:aa:65:48:c5:4c:16:65:cb:6e:0c:b2:
e9:02:aa:c9:7c:4d:84:90:8c:0a:57:71:74:71:eb:c2:a8:39:
54:a7:be:8b:c4:cf:4c:83:e9:0f:26:49:49:78:62:62:0c:aa:
35:33:ff:1d:38:18:db:5f:fd:c1:45:18:60:9b:55:d9:29:ba:
80:fe:57:53:1e:eb:a0:85:e2:2d:49:5c:46:4b:0b:2f:17:3a:
23:c7:3e:b3:ee:69:96:ec:1d:e1:8c:7e:bb:75:e0:25:3a:31:
5d:1d:0c:d7:c4:1e:20:ed:ee:0e:80:0a:a0:9e:9f:ca:84:0f:
a7:a2:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org