Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/HzcVwUlD9euYxmn8rVLXYVu0Tnk.roa
File: HzcVwUlD9euYxmn8rVLXYVu0Tnk.roa (raw, json)
Hash identifier: pPb4AIsHqNMx6EmIf7RppcQLIt7X0kWYgHo36Y1BEds=
Subject key identifier: 1F:37:15:C1:49:43:F5:EB:98:C6:69:FC:AD:52:D7:61:5B:B4:4E:79
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0882
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/HzcVwUlD9euYxmn8rVLXYVu0Tnk.roa
Signing time: Wed 14 Jun 2023 11:54:04 +0000
ROA not before: Wed 14 Jun 2023 11:54:04 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178 (0x882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 11:54:04 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=1F3715C14943F5EB98C669FCAD52D7615BB44E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:ec:17:75:d5:d9:94:59:c2:0f:70:6c:c8:
6b:9a:aa:77:8b:77:a4:3e:e4:56:f0:04:a4:49:62:
86:85:f5:a1:8b:35:8d:1d:c9:c9:60:49:7a:95:dd:
3d:9f:d2:83:62:97:2c:27:f8:16:db:1e:76:4e:2b:
e1:79:da:81:51:98:48:b1:17:98:23:f2:ec:96:3d:
62:e2:85:72:3e:5b:af:be:7c:0d:a1:d4:43:14:60:
c8:12:de:de:ee:ba:b0:16:47:81:a4:8e:a9:09:3d:
52:44:3b:8b:27:36:2a:55:0a:47:82:fa:54:14:a1:
20:5c:7f:ea:01:15:eb:e1:71:af:01:fc:29:67:f2:
bb:34:a7:1a:6a:46:85:12:38:64:c7:43:6f:96:46:
ba:4e:31:6a:4b:c9:10:64:1f:a6:20:df:ed:7a:e4:
da:f1:74:01:03:55:36:0d:15:fc:49:bc:84:f4:1e:
5c:af:b5:90:37:b2:37:3e:86:16:9f:88:27:bf:79:
67:2a:aa:5b:42:73:9b:86:64:9f:54:31:59:fc:63:
5b:d3:5d:18:9a:d6:08:68:76:4d:53:48:49:14:0f:
b5:22:00:2e:d8:0a:ba:e7:de:57:cf:c0:ee:b2:1a:
c5:40:76:db:f1:73:a6:e9:2b:75:9b:56:69:fd:0e:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:37:15:C1:49:43:F5:EB:98:C6:69:FC:AD:52:D7:61:5B:B4:4E:79
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/HzcVwUlD9euYxmn8rVLXYVu0Tnk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:3a:8a:62:ad:c6:65:ed:1b:b3:a3:0e:80:b4:1e:07:8a:6b:
87:46:5c:96:c2:e4:0e:af:09:5e:17:d6:d2:2e:b3:6c:22:f4:
f2:f0:fd:af:ce:58:dc:3c:d9:1f:ce:54:39:53:6a:78:11:ba:
49:65:02:71:fd:77:9a:92:f6:70:76:d9:a3:b9:b2:ab:17:35:
c4:46:2f:da:f7:58:44:bf:5e:90:f1:f3:e5:61:57:c2:44:9d:
aa:e2:15:53:a8:f0:ac:02:a6:19:f3:a2:5b:fd:51:fe:b8:72:
0a:e2:fa:1d:8d:97:1e:0f:04:3d:6f:7f:56:e4:4f:cb:0b:92:
37:e2:21:c3:50:5c:03:46:27:f4:95:cf:76:85:62:72:dd:95:
c2:5c:fb:e2:e4:27:fc:af:4c:56:bc:db:6e:24:09:5a:28:24:
3f:bf:39:d0:39:27:36:3d:cb:81:5d:59:0b:3b:80:b0:3f:a0:
04:c5:cd:8a:85:3b:c0:a4:22:ed:41:b1:89:c5:b8:71:73:65:
fc:17:fe:4e:a4:27:bf:43:79:66:3e:a1:6e:b9:93:9f:6d:b9:
0b:f1:2e:43:60:cf:b1:ca:34:40:4a:0e:79:63:58:de:08:49:
39:89:1d:2c:e1:2d:74:b8:79:d4:04:92:f7:ad:ee:74:97:07:
f6:ed:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org