Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/G9NlCAFzcPXiyy0AFqEoqEm7mfk.roa
File: G9NlCAFzcPXiyy0AFqEoqEm7mfk.roa (raw, json)
Hash identifier: bcocrJj1Ad340vnmDRGIAnf2hOxQ0FLcOWSjXjrHFQ0=
Subject key identifier: 1B:D3:65:08:01:73:70:F5:E2:CB:2D:00:16:A1:28:A8:49:BB:99:F9
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0902
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/G9NlCAFzcPXiyy0AFqEoqEm7mfk.roa
Signing time: Thu 15 Jun 2023 03:54:08 +0000
ROA not before: Thu 15 Jun 2023 03:54:08 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306 (0x902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 15 03:54:08 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1BD36508017370F5E2CB2D0016A128A849BB99F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:d8:18:c6:14:b1:8f:f9:86:90:b1:3e:c6:
ca:af:86:4a:18:d6:71:23:f8:4d:d9:cf:05:0b:d4:
93:15:c1:55:62:4c:7c:43:2d:42:68:8a:ef:47:54:
14:ac:85:12:bb:ae:bb:e8:15:99:e0:ee:eb:4a:79:
e6:b2:23:8f:4f:ee:44:10:82:a3:5b:48:c7:40:01:
93:4c:b2:a9:5b:33:b0:1b:32:cd:68:4d:bc:f7:5b:
df:27:23:c2:84:7e:fd:99:33:dd:b4:e4:80:89:0d:
93:d2:d0:79:4a:45:f1:c9:41:84:02:cf:06:4e:b5:
0b:d5:c1:84:f4:4d:a6:ef:01:2d:80:b5:1c:46:e8:
00:90:51:57:ca:ab:89:0a:e9:65:22:ca:c3:8d:47:
f4:ae:31:50:cf:95:c1:cb:11:0d:3c:be:43:ee:b4:
17:1c:b0:81:77:0a:f6:68:e5:bf:6e:4c:fd:b3:49:
07:fc:85:d2:10:5f:a9:68:68:47:78:58:21:b8:39:
af:1d:eb:a4:d8:6c:0e:4a:1a:dc:4c:4b:d1:89:0e:
05:58:c0:75:f6:9a:3d:f9:2d:62:5f:ca:c5:9e:72:
06:97:9d:b5:78:e8:e4:d7:9f:f9:96:d4:f6:66:6c:
ed:39:14:b8:81:49:eb:a1:29:ba:a4:61:bb:a0:70:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D3:65:08:01:73:70:F5:E2:CB:2D:00:16:A1:28:A8:49:BB:99:F9
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/G9NlCAFzcPXiyy0AFqEoqEm7mfk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:e9:02:78:76:34:38:55:cd:a9:1e:d4:8f:7b:b5:eb:7b:b6:
fe:b8:d7:1a:29:ef:46:ae:f2:b9:06:83:ed:88:68:1f:e9:94:
5a:b7:9b:9e:f0:2b:f1:19:0e:4f:d4:7e:56:ba:ab:05:c3:72:
1c:5b:a5:68:a2:cb:50:2f:ee:51:b1:3f:87:c4:f2:73:4a:ea:
e7:9e:61:3a:b4:98:ae:6d:0c:68:4f:d2:ec:6c:e7:52:82:1e:
89:00:c1:e6:60:0b:0b:42:d2:e7:c2:28:ce:66:73:d6:64:e4:
41:44:92:cd:91:45:38:1e:cb:d1:8a:75:f8:2a:9b:8c:51:32:
da:29:4c:0d:ba:88:59:26:60:b5:ba:e9:98:48:42:f5:25:ca:
1c:9c:03:60:14:e9:c2:f1:6c:75:0a:fa:38:51:41:6a:db:db:
5d:34:d6:77:26:d4:4a:44:76:57:7c:fd:f7:0a:7d:08:9b:24:
ae:84:22:41:81:cf:01:45:58:c1:23:72:71:c6:0b:c9:e2:47:
c8:4b:56:9f:b1:8a:2d:b1:6a:60:04:1e:aa:78:a1:ba:1e:6b:
61:0e:4b:d0:94:fe:e0:04:3c:31:3d:c4:f2:2e:5c:c8:62:89:
9d:88:d7:01:64:cd:6c:af:d8:6e:bf:f4:0b:b4:88:79:a7:66:
12:88:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org