Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/HCJaU82ALwWGJIpLzirnqmJhblA.roa
File: HCJaU82ALwWGJIpLzirnqmJhblA.roa (raw, json)
Hash identifier: A0k/m0xXXnYg6vHdz0UwhyPd0sn1VLUCRd1RQCU4tuo=
Subject key identifier: 1C:22:5A:53:CD:80:2F:05:86:24:8A:4B:CE:2A:E7:AA:62:61:6E:50
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07FA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/HCJaU82ALwWGJIpLzirnqmJhblA.roa
Signing time: Tue 13 Jun 2023 18:54:03 +0000
ROA not before: Tue 13 Jun 2023 18:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 18:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1C225A53CD802F0586248A4BCE2AE7AA62616E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2a:1b:9d:ef:a4:c4:a9:c9:31:77:9d:c1:d0:
c9:ea:fd:33:e9:06:1f:6c:a7:80:5c:bf:c6:56:f3:
29:f9:61:ca:73:98:88:29:ca:8b:41:61:ab:49:23:
a9:b3:23:05:1f:9b:b7:be:2d:ae:92:15:2f:0c:39:
32:92:5e:31:c5:18:b7:97:06:5f:d6:ff:e3:b1:b9:
21:c0:fd:45:2b:1d:fd:ae:a1:7d:aa:c7:41:05:d1:
a1:41:0a:66:66:e1:49:81:91:8f:fe:85:0a:c1:57:
b3:e9:aa:aa:f6:71:da:5f:e7:4e:16:2f:b7:46:c3:
5f:a2:b2:e6:22:60:2b:f0:06:e6:ac:44:a7:e7:a5:
07:0b:7e:70:f8:e4:67:14:22:22:c9:04:7a:fc:a3:
8d:59:d0:3b:42:a2:76:78:c1:00:61:96:fc:da:3b:
75:cd:cd:53:63:fb:9c:d2:1d:b2:8a:9c:da:ab:62:
32:8b:e0:74:89:2c:45:f2:ce:fc:aa:d2:17:21:25:
b4:a3:d1:77:ca:66:38:d8:2e:cc:fb:22:06:70:ae:
a0:4d:9b:3d:17:84:04:94:2b:7c:31:4f:0e:46:37:
d1:85:0e:33:0f:28:2c:cf:98:7a:67:48:b4:6e:eb:
79:61:09:cb:af:a4:c8:45:3a:19:eb:7a:4b:9b:bf:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:22:5A:53:CD:80:2F:05:86:24:8A:4B:CE:2A:E7:AA:62:61:6E:50
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/HCJaU82ALwWGJIpLzirnqmJhblA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
62:cf:a6:d3:98:fd:f9:23:a2:05:3c:84:dc:a0:e9:45:ff:8f:
e9:8f:8e:e1:e4:a6:07:85:0d:d3:99:a0:bd:25:98:65:38:e8:
06:b8:a2:a4:da:64:50:48:e9:a9:a1:66:db:27:57:43:7c:7a:
b7:01:9c:5f:fb:74:b9:0f:aa:f2:4e:3d:e6:86:2a:d7:6c:06:
a3:81:89:40:24:96:fc:aa:8d:a7:a1:d8:a5:19:a6:37:f1:6c:
3a:35:70:9f:ed:21:88:9b:8f:36:04:0f:d7:2b:7f:20:bc:94:
ff:8e:2b:0e:b6:38:1c:0b:aa:e8:9c:64:c8:ea:c2:eb:18:47:
2b:7b:97:08:d8:33:2c:49:e1:d8:6e:0e:fc:5b:a5:33:1f:e1:
43:8f:99:d8:34:a1:ab:2e:09:b0:9f:4b:b1:71:5d:41:f8:8d:
80:8a:ab:71:93:5a:16:88:ee:b4:a1:14:7c:1f:af:33:23:8e:
9d:b3:a8:c9:57:82:7c:e4:6d:9a:15:65:b0:ba:dd:67:d4:6d:
0e:99:31:d5:dd:09:cc:9f:4d:6e:50:e6:0e:7b:8b:11:ed:ae:
2e:4e:77:0f:31:6b:39:35:94:4b:35:18:b5:85:da:40:4e:68:
5e:ba:36:09:50:d7:ed:ea:56:24:03:79:82:57:36:df:a9:a9:
70:e9:1f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org