Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/I9ukSwSSLoUR8J7wr2RFjN8jVQE.roa
File: I9ukSwSSLoUR8J7wr2RFjN8jVQE.roa (raw, json)
Hash identifier: sStAWfAMcoEIOzbwHS8HDkHGj5BSgGXuLrt+EEU4U+o=
Subject key identifier: 23:DB:A4:4B:04:92:2E:85:11:F0:9E:F0:AF:64:45:8C:DF:23:55:01
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08BA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/I9ukSwSSLoUR8J7wr2RFjN8jVQE.roa
Signing time: Wed 14 Jun 2023 18:54:05 +0000
ROA not before: Wed 14 Jun 2023 18:54:05 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 18:54:05 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=23DBA44B04922E8511F09EF0AF64458CDF235501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:15:eb:60:0a:9f:1f:bb:34:aa:a7:8a:8c:
89:49:36:b2:61:56:e2:79:07:47:f8:fd:50:2e:a0:
4f:fe:4f:ae:88:7e:45:fe:f6:9f:af:15:c4:79:f9:
89:ce:9b:12:07:c9:4c:ce:15:5d:a5:dc:6c:b3:96:
dd:e1:c0:09:04:ab:56:5a:c4:7d:1f:b5:d1:54:46:
3f:28:20:1e:e3:4c:4d:b0:54:b3:68:8f:fe:b1:d7:
98:34:41:f1:aa:1c:bc:af:ba:cb:62:bb:aa:4a:78:
0b:e9:8c:b3:0a:ce:db:7f:77:eb:6f:ec:9f:dc:0c:
e8:c2:f6:1b:6d:c7:f0:7c:64:ae:c1:bf:a7:13:e2:
12:b8:7b:c2:55:93:5f:df:81:31:83:bc:80:63:b0:
48:a0:e6:94:bf:7e:9b:b7:e6:bf:5d:a1:38:74:4c:
84:73:26:06:cd:ea:dd:29:85:2c:51:72:a3:38:81:
e9:c7:29:24:75:c7:60:2e:0c:93:7e:26:0a:fc:06:
c7:0a:b0:e4:33:ef:cc:40:e5:c6:77:d1:59:14:2a:
12:8d:8a:7d:2b:b0:a1:92:1b:73:81:ae:61:cd:6b:
e8:32:b1:a0:8c:c0:7f:57:1d:13:a6:2a:18:9e:d1:
fd:54:2e:36:ed:c7:2d:36:c7:3c:11:5c:25:7b:71:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DB:A4:4B:04:92:2E:85:11:F0:9E:F0:AF:64:45:8C:DF:23:55:01
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/I9ukSwSSLoUR8J7wr2RFjN8jVQE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:41:ee:a1:32:9d:22:ec:e2:1f:09:61:79:f2:2b:a1:61:d5:
cb:40:00:5b:04:dc:4d:15:5b:5d:de:97:33:e6:e8:ed:f2:d4:
05:27:fd:3d:e3:cf:a2:b6:f9:12:4e:91:b7:8a:5e:0a:71:09:
53:39:6c:0f:61:f9:e6:2d:6d:99:e0:a8:6d:7c:21:c7:64:7a:
00:9a:4e:48:6d:3e:77:38:d4:35:0d:75:03:5c:a7:54:a7:3a:
1a:2e:cc:2c:47:b0:24:06:3b:5c:19:a4:86:95:36:5a:58:b2:
c2:da:ed:02:98:7e:f5:98:54:9b:49:a8:16:8d:a6:97:f9:f2:
64:d8:17:94:7c:a1:b9:64:2c:ba:40:93:d5:6f:c2:02:10:bd:
57:b8:a1:62:34:69:cf:32:a6:89:00:59:ff:49:d6:51:b7:47:
ae:2f:ee:ca:a4:32:0e:25:dc:01:f8:5d:cc:2c:b1:37:36:c9:
bc:ca:a1:79:90:06:23:92:a9:86:16:88:0c:b9:f3:ad:dc:0d:
74:a4:c1:25:35:f9:b9:9b:76:be:9c:c1:f4:ab:6f:d6:55:f4:
64:b1:c7:b4:87:98:e7:b2:00:5e:aa:85:40:f6:7e:ea:dc:65:
d6:9e:c8:b4:33:1f:f0:8d:95:f9:2d:95:3b:b7:ac:f7:24:a4:
72:17:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org