Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/H0sfcwuoiKV0qcvocuHSAetBFig.roa
File: H0sfcwuoiKV0qcvocuHSAetBFig.roa (raw, json)
Hash identifier: pjY4u89pgdcEE1eNPMYX+1uSlajDalBKcW5mIDI4Fag=
Subject key identifier: 1F:4B:1F:73:0B:A8:88:A5:74:A9:CB:E8:72:E1:D2:01:EB:41:16:28
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07A6
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/H0sfcwuoiKV0qcvocuHSAetBFig.roa
Signing time: Tue 13 Jun 2023 08:32:02 +0000
ROA not before: Tue 13 Jun 2023 08:32:02 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1958 (0x7a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 08:32:02 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1F4B1F730BA888A574A9CBE872E1D201EB411628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:66:4b:02:24:67:86:d5:bd:c1:4f:99:c2:43:
6b:27:ea:f6:11:de:25:08:08:8b:46:38:80:24:96:
bf:d3:63:b0:ff:c3:66:28:af:f2:d0:93:65:d1:21:
11:56:e8:94:ec:99:e0:0c:2e:48:67:cf:59:cd:0a:
35:a8:41:c4:7d:99:5a:80:cf:43:b2:90:80:b8:97:
7d:c6:a6:77:32:e3:d0:3f:5f:aa:1c:33:14:70:13:
63:e4:8f:de:6e:ad:e0:f4:dc:de:3c:93:fb:3b:15:
b0:22:56:d5:1e:06:52:e2:66:dc:53:9d:3c:bc:4d:
c5:a1:f1:33:b6:a9:9c:ce:d0:81:8f:a4:c7:31:b6:
25:48:cf:d4:c9:f0:42:af:24:5c:35:c3:38:d4:d0:
e6:11:bf:e2:09:59:ba:bc:8d:d0:b1:45:e8:ad:9b:
f7:ab:13:89:f0:a0:a2:98:69:30:f4:df:64:d0:7c:
53:42:7f:17:00:d2:af:1d:11:7f:44:ce:c0:4c:2b:
a0:18:fa:27:f8:c6:e7:9c:e3:86:18:a9:a6:9b:83:
36:30:8a:14:3d:60:ec:16:c3:e8:41:15:66:8b:f4:
df:22:3d:89:80:0c:ee:03:32:57:e0:c8:7d:db:40:
34:34:29:07:1e:d7:d3:1b:5d:71:4e:1f:77:e7:f4:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4B:1F:73:0B:A8:88:A5:74:A9:CB:E8:72:E1:D2:01:EB:41:16:28
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/H0sfcwuoiKV0qcvocuHSAetBFig.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:0d:d5:70:3f:40:ca:3f:29:da:3f:11:99:9a:2b:57:7f:1e:
2f:84:9b:22:62:96:b7:46:e8:6a:dd:fa:8c:d5:f0:25:33:05:
0f:e1:01:9c:95:b0:68:aa:71:89:6a:f1:96:17:ed:91:66:ee:
0a:a5:b6:7e:8e:5b:6f:20:a9:4e:51:c1:bb:a4:37:d7:0e:eb:
49:50:82:7b:46:b8:6b:d9:1d:05:ef:96:33:ba:56:f8:d0:ec:
6d:a3:0f:56:e1:15:49:af:29:7d:cb:f4:fd:10:d3:3b:21:fd:
07:30:6a:58:00:af:56:62:2e:bd:3c:86:eb:21:2f:27:46:f3:
a0:fa:93:2b:cb:f1:ca:46:53:a3:bb:e2:b1:6d:81:1d:f1:92:
ee:6d:67:0d:64:ce:43:ab:0b:03:fd:bb:e7:fe:dd:81:de:d6:
d9:85:73:af:26:68:15:df:f7:ea:ca:44:7f:f5:88:3e:65:2d:
2e:d6:f9:66:55:5a:5c:e6:1d:4b:61:28:86:be:ad:60:e7:65:
0f:09:a2:7b:78:74:df:77:b0:1a:c4:32:dd:d0:62:61:aa:a3:
e4:2f:db:1c:1c:bc:87:e0:8a:b7:5e:bb:5c:64:94:36:64:b4:
bf:cf:8f:36:ab:df:bc:7d:9f:08:06:a1:24:b8:95:c7:cf:5b:
33:54:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org