Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/GDFU_P47-X1vLHSYsz_vvEdhE-s.roa
File: GDFU_P47-X1vLHSYsz_vvEdhE-s.roa (raw, json)
Hash identifier: Z/MBjV6xc76tWYVxVG/okycmig1uj6di1O9NLlO3yiw=
Subject key identifier: 18:31:54:FC:FE:3B:F9:7D:6F:2C:74:98:B3:3F:EF:BC:47:61:13:EB
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07CE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/GDFU_P47-X1vLHSYsz_vvEdhE-s.roa
Signing time: Tue 13 Jun 2023 13:24:04 +0000
ROA not before: Tue 13 Jun 2023 13:24:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998 (0x7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 13:24:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=183154FCFE3BF97D6F2C7498B33FEFBC476113EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:30:a9:11:c0:75:d8:43:79:ac:4f:14:3d:
01:14:39:0f:e8:26:e9:82:3f:07:f8:74:cb:93:50:
53:e1:94:ef:cf:9a:3b:cf:62:40:c7:c6:49:c0:30:
8c:99:19:4d:73:b6:34:bc:e8:3f:30:6a:d3:cd:0d:
a5:54:e3:bf:df:c4:8b:77:10:3b:bf:fd:b2:d4:11:
c9:1c:9f:e4:ad:f2:8b:e7:2d:fe:48:39:32:68:4f:
d5:37:ee:52:85:3a:bf:89:ac:ad:d7:d0:26:eb:58:
07:91:cf:82:7b:48:ee:ed:b5:2c:5f:78:06:c5:a7:
79:71:1c:9a:17:2c:d4:59:0a:92:93:a8:55:61:a1:
50:22:d7:6c:b2:4e:96:31:7a:f8:28:1d:cf:64:14:
e6:ab:c8:b3:c1:6a:6e:b4:6c:73:3f:db:27:99:47:
32:82:74:61:62:23:da:7e:98:24:3b:90:39:96:9e:
3c:96:91:d6:34:47:8b:43:cc:6f:0d:c2:f3:8a:9a:
bb:88:72:ff:c4:87:46:6a:f5:6d:cf:24:11:78:77:
7a:35:c3:4b:7e:6d:b2:fa:fe:9c:7a:41:3f:30:f6:
c7:13:a9:b1:72:ba:9b:0f:b2:6c:82:73:41:6c:63:
ad:58:f2:3e:a9:2e:65:0c:69:ac:b9:e1:40:db:eb:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:31:54:FC:FE:3B:F9:7D:6F:2C:74:98:B3:3F:EF:BC:47:61:13:EB
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/GDFU_P47-X1vLHSYsz_vvEdhE-s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
12:d8:31:b9:4f:2f:2d:99:57:82:6d:57:6a:97:46:fa:2a:af:
f4:f4:a7:2b:a0:fb:fe:2c:10:9a:82:97:96:0d:60:e7:05:08:
e3:cb:1d:14:3f:61:d8:d8:02:ae:1e:49:5c:97:75:5c:a8:43:
72:08:f6:7c:7e:94:d0:63:91:41:6b:bf:80:01:bd:fa:17:6c:
ed:cb:04:a5:5d:05:a1:3d:ba:3a:20:e8:24:ff:e2:ba:99:2a:
7d:b1:91:8f:3b:c1:36:ab:15:5d:37:b0:60:05:ab:fd:6c:f3:
29:df:be:70:2f:54:2a:69:b6:d2:9c:a4:05:85:6e:a0:3b:b3:
26:04:c8:cf:b3:d2:9b:44:8b:37:5c:4c:70:86:7b:84:cb:a3:
99:32:48:aa:d3:ce:00:16:fa:39:9b:c8:d0:81:70:98:1d:c2:
a7:96:42:ca:8b:0e:34:be:47:14:84:8e:23:fd:62:2b:33:aa:
35:a1:43:03:d3:fe:3c:63:20:9f:18:fb:aa:93:2e:84:10:69:
4e:4a:44:b8:9c:11:bc:90:54:be:cc:ca:5f:20:5d:c7:d4:87:
3c:22:35:69:d0:b4:cf:b4:63:bc:a3:2d:95:f1:cc:df:0a:fb:
f2:85:e0:b7:a6:1c:f7:75:f0:7d:6b:ac:c3:7c:b4:4c:bf:20:
13:4d:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org