Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/MNXsH6nMKbKaQ3Mn28I_TEXBG4A.roa
File: MNXsH6nMKbKaQ3Mn28I_TEXBG4A.roa (raw, json)
Hash identifier: 1ExDDfHgRsd1bTyI8EJf908/Gs5arj2k2Onzp9iNizE=
Subject key identifier: 30:D5:EC:1F:A9:CC:29:B2:9A:43:73:27:DB:C2:3F:4C:45:C1:1B:80
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 07B2
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/MNXsH6nMKbKaQ3Mn28I_TEXBG4A.roa
Signing time: Tue 13 Jun 2023 09:54:01 +0000
ROA not before: Tue 13 Jun 2023 09:54:01 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970 (0x7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 13 09:54:01 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=30D5EC1FA9CC29B29A437327DBC23F4C45C11B80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:32:bb:58:63:21:90:68:91:db:b9:7e:6c:61:
fc:5b:fb:39:83:9a:3b:24:89:98:6b:72:a9:21:3f:
b2:b3:8f:74:d4:c0:fa:b9:31:76:75:50:83:95:6e:
9f:97:f2:42:86:af:c5:c8:e4:0d:03:13:ed:00:ca:
ea:4c:29:cb:ee:41:9d:fe:68:28:5d:2e:e8:d6:98:
75:fc:6f:8c:ac:5d:6f:35:17:32:5e:47:1a:7f:12:
65:1a:76:69:93:c1:87:a8:9f:02:77:08:e2:0d:43:
2b:73:3a:5a:fb:14:87:9c:d3:ba:97:2b:4b:01:86:
fb:f6:e9:92:5e:59:74:2e:45:8e:45:1b:e8:08:ef:
23:bd:4f:ba:59:af:8f:63:9d:b3:e7:c1:66:93:2e:
3f:6c:d0:16:35:45:f9:d0:fd:c9:4b:20:6b:25:15:
cf:bc:cb:83:36:f8:f0:3b:e2:1e:fc:5a:5b:d0:95:
9a:b9:ef:4d:1d:b5:4c:0b:23:2d:25:52:11:14:6c:
4d:30:4f:5d:f1:ce:e7:bc:d8:9a:be:89:47:d7:ae:
8f:21:c8:fe:ed:c3:1e:20:4e:ba:cb:51:4b:55:b0:
88:2a:7d:11:b1:54:5d:d0:33:13:fe:da:34:e8:11:
40:7f:45:f8:9f:99:48:68:bf:02:11:60:20:bb:2e:
c5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:EC:1F:A9:CC:29:B2:9A:43:73:27:DB:C2:3F:4C:45:C1:1B:80
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/MNXsH6nMKbKaQ3Mn28I_TEXBG4A.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:e2:63:63:5c:60:dd:64:14:6c:ac:ef:a4:32:02:8a:ae:2b:
68:90:2b:af:f8:0f:13:2e:80:c4:50:a9:97:67:11:f8:a4:29:
ea:9b:03:f9:da:65:67:9f:9e:6e:4b:94:c2:17:75:a9:16:90:
f3:21:5e:d8:8a:55:70:91:8f:48:0f:dd:0e:f2:2f:70:3b:68:
fb:a8:70:27:aa:a7:de:6b:d6:10:e6:04:52:56:45:f2:ee:6a:
38:4c:7f:a6:4e:bc:2b:d3:9f:d4:a8:52:ee:77:fe:be:b8:38:
e9:21:7c:92:48:8f:f9:f9:a5:11:0f:99:48:a4:5b:80:d9:80:
2b:cd:08:60:1b:c9:58:6d:9f:0c:7e:69:22:0e:b0:88:b3:8c:
13:13:56:07:90:f5:10:02:66:f4:10:e7:43:e4:38:85:a9:37:
eb:1c:47:d4:4e:23:d3:67:36:83:ac:bd:9b:f1:5c:d2:e4:d1:
32:41:f2:8a:be:04:98:80:ad:d4:31:5f:5b:8a:0a:1f:97:f6:
34:55:7d:55:ef:d9:14:c8:4e:b7:ac:76:b4:dd:cf:35:75:33:
36:a1:0e:a0:dc:05:82:92:5e:91:ea:88:25:b9:ca:cb:3a:3f:
13:12:a0:bc:e6:05:14:50:9c:40:84:bc:36:f0:d2:aa:72:5a:
89:84:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org