Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/JR-Dut8ZySjNDs8UvQGuYfXDQsg.roa
File: JR-Dut8ZySjNDs8UvQGuYfXDQsg.roa (raw, json)
Hash identifier: 1YdD8L0eYglp2YYSdcMoB7WUz8seRpN4bc34fJOOKsE=
Subject key identifier: 25:1F:83:BA:DF:19:C9:28:CD:0E:CF:14:BD:01:AE:61:F5:C3:42:C8
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 0822
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/JR-Dut8ZySjNDs8UvQGuYfXDQsg.roa
Signing time: Tue 13 Jun 2023 23:54:03 +0000
ROA not before: Tue 13 Jun 2023 23:54:03 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2082 (0x822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 23:54:03 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=251F83BADF19C928CD0ECF14BD01AE61F5C342C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:40:a3:ff:5f:be:21:9f:5e:7b:6d:8a:e8:
5f:e6:42:0b:0f:cf:7b:48:ef:ac:bf:97:82:be:43:
2c:41:83:b3:d7:d7:35:d2:00:c3:f8:c3:d9:26:5d:
47:f7:7a:dc:09:34:f7:0b:01:4f:5c:34:49:51:fa:
92:bd:9c:00:e8:3d:7e:b1:2a:04:3c:db:53:cc:9f:
8c:86:8f:66:e0:b5:8b:de:5f:56:71:00:7c:66:3d:
cc:9c:fd:e2:97:1b:96:c0:99:bb:11:63:41:88:bb:
93:a1:2a:d5:e3:fd:91:95:c8:88:7a:36:03:83:08:
cc:6e:9a:c1:77:45:1f:62:82:a6:3e:2b:87:ae:06:
c5:c2:19:74:6a:09:77:cf:eb:3a:12:8c:39:12:b7:
cb:df:76:0c:7c:0c:2d:6d:aa:18:7a:ac:04:9e:59:
27:a5:4b:bb:c9:69:8e:6c:0f:44:de:ff:12:ed:b5:
68:69:bc:9e:65:14:a9:c0:f8:88:6c:8c:79:2b:95:
a2:3d:98:4a:a8:d3:a1:4c:ad:da:f2:9e:e6:c9:c7:
7d:52:51:9a:f1:84:e3:d3:d2:fb:cf:ee:8f:26:af:
7d:74:49:60:1b:8e:31:27:e6:99:94:fd:13:50:27:
ff:f4:1f:6c:38:c4:a4:a8:32:35:c0:41:40:fe:10:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1F:83:BA:DF:19:C9:28:CD:0E:CF:14:BD:01:AE:61:F5:C3:42:C8
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/JR-Dut8ZySjNDs8UvQGuYfXDQsg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:0e:27:46:87:55:c7:5b:e9:a3:f6:57:63:20:75:69:4b:fd:
23:e5:c1:d1:ab:34:65:f5:60:8d:f3:b1:cf:b0:27:fc:c2:af:
ed:62:74:5a:98:78:1e:6d:93:49:e4:54:5b:aa:68:45:8b:d7:
2d:c8:33:5e:08:d1:61:38:8b:17:74:28:0d:ca:a0:a3:e4:a7:
cc:7b:85:2f:a8:31:3d:99:14:ce:8e:58:ec:0b:c4:b8:bb:76:
e5:11:df:86:80:98:0f:68:fd:4f:ad:d1:3e:1c:72:25:1e:34:
a6:36:62:ad:90:12:86:96:26:c3:16:ad:6c:fc:8e:30:b5:4d:
3d:60:14:94:97:b5:9c:c7:8f:63:21:dd:97:44:a0:e7:a1:62:
e4:6a:e1:d1:be:df:4d:9a:cd:93:9b:9b:bd:da:d9:c5:4b:c5:
fc:6c:56:be:ae:ec:55:2e:57:32:f7:80:b6:6a:61:43:50:8b:
26:45:b5:48:3c:f0:2f:ce:f1:ca:2b:51:80:f5:6d:d5:16:01:
94:4c:06:cc:04:23:96:3a:1e:f0:fb:3e:ea:1d:aa:be:65:57:
5f:c1:14:e8:6d:9e:ba:62:6f:13:a0:21:5f:e6:3c:c7:22:b9:
6b:d2:d3:8c:ad:98:a7:2a:69:3d:80:ab:a2:08:e5:48:f5:7b:
46:69:d0:dd
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDdB
NjA4NDA5QjI1MUJDQjFBNkMwMzBBMUMyMUJBNDFDREJDQkY1NjAeFw0yMzA2MTMy
MzU0MDNaFw0yNDA2MDcwMjE2MTFaMDMxMTAvBgNVBAMTKDI1MUY4M0JBREYxOUM5
MjhDRDBFQ0YxNEJEMDFBRTYxRjVDMzQyQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXlECj/1++IZ9ee22K6F/mQgsPz3tI76y/l4K+QyxBg7PX1zXS
AMP4w9kmXUf3etwJNPcLAU9cNElR+pK9nADoPX6xKgQ821PMn4yGj2bgtYveX1Zx
AHxmPcyc/eKXG5bAmbsRY0GIu5OhKtXj/ZGVyIh6NgODCMxumsF3RR9igqY+K4eu
BsXCGXRqCXfP6zoSjDkSt8vfdgx8DC1tqhh6rASeWSelS7vJaY5sD0Te/xLttWhp
vJ5lFKnA+IhsjHkrlaI9mEqo06FMrdrynubJx31SUZrxhOPT0vvP7o8mr310SWAb
jjEn5pmU/RNQJ//0H2w4xKSoMjXAQUD+EHmDAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUJR+Dut8ZySjNDs8UvQGuYfXDQsgwHwYDVR0jBBgwFoAUB6YIQJslG8sabAMK
HCG6Qc28v1YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjM5
MS9CNllJUUpzbEc4c2FiQU1LSENHNlFjMjh2MVkuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0I2WUlRSnNsRzhzYWJBTUtIQ0c2UWMyOHYxWS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzOTEvSlItRHV0OFp5U2pO
RHM4VXZRR3VZZlhEUXNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv6dDANBgkqhkiG9w0BAQsFAAOCAQEAXw4nRodVx1vpo/ZXYyB1aUv9I+XB
0as0ZfVgjfOxz7An/MKv7WJ0Wph4Hm2TSeRUW6poRYvXLcgzXgjRYTiLF3QoDcqg
o+SnzHuFL6gxPZkUzo5Y7AvEuLt25RHfhoCYD2j9T63RPhxyJR40pjZirZAShpYm
wxatbPyOMLVNPWAUlJe1nMePYyHdl0Sg56Fi5Grh0b7fTZrNk5ubvdrZxUvF/GxW
vq7sVS5XMveAtmphQ1CLJkW1SDzwL87xyitRgPVt1RYBlEwGzAQjljoe8Ps+6h2q
vmVXX8EU6G2eumJvE6AhX+Y8xyK5a9LTjK2YpyppPYCrogjlSPV7RmnQ3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org