Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/OlkcNC70yQ7J_bPPsHTNH-7cxao.roa
File: OlkcNC70yQ7J_bPPsHTNH-7cxao.roa (raw, json)
Hash identifier: xiztMQ2Cftcj/00kajJMe3nqy/OYm3dX2R8h2xlTjSQ=
Subject key identifier: 3A:59:1C:34:2E:F4:C9:0E:C9:FD:B3:CF:B0:74:CD:1F:EE:DC:C5:AA
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08AE
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/OlkcNC70yQ7J_bPPsHTNH-7cxao.roa
Signing time: Wed 14 Jun 2023 17:24:06 +0000
ROA not before: Wed 14 Jun 2023 17:24:06 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222 (0x8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 17:24:06 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3A591C342EF4C90EC9FDB3CFB074CD1FEEDCC5AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:ac:c3:02:1d:51:81:50:fb:b4:c5:05:1e:
1e:e3:0d:2f:c7:1f:68:5e:9a:28:c3:b0:2b:77:13:
44:2b:3b:95:4d:15:26:98:2b:53:5c:50:c4:78:d9:
3d:90:1d:b5:8d:cf:2b:18:ee:8c:48:be:cb:d7:2b:
02:32:54:ce:0f:f4:0d:76:e1:2e:e7:7d:a4:0d:10:
10:45:0e:69:be:41:2b:ce:af:db:fc:ea:2b:d1:01:
d5:0c:3d:89:89:1d:0c:71:14:3d:0c:54:2c:ac:89:
ab:b3:89:11:0d:9d:c9:b8:45:e3:8f:81:d1:31:57:
be:6b:41:d7:22:d5:aa:83:df:04:a9:43:07:89:50:
b4:57:8a:4e:82:e3:ed:46:2a:69:f9:f7:14:21:ee:
3c:9f:06:8d:7c:0d:8d:4f:5d:a8:a5:52:e2:f4:6c:
50:6f:a4:72:9d:47:94:c7:bc:31:31:68:91:f8:95:
90:98:b1:b6:4a:75:c3:c8:00:e1:e4:71:d1:74:73:
02:51:52:64:ea:bf:a0:9f:e6:05:37:4a:a8:60:90:
75:1c:8e:46:7a:22:d5:7d:a2:98:43:21:7f:55:57:
08:51:78:ad:e7:9a:7d:59:34:c8:bc:c3:79:12:56:
fd:65:db:5b:12:cb:4e:41:77:c5:4a:c5:c0:a6:c5:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:59:1C:34:2E:F4:C9:0E:C9:FD:B3:CF:B0:74:CD:1F:EE:DC:C5:AA
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/OlkcNC70yQ7J_bPPsHTNH-7cxao.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:06:b2:d5:3b:77:1b:96:7f:ee:44:4e:94:f3:e2:bc:04:96:
9a:31:03:39:ab:e9:17:ed:39:da:39:fc:4b:1b:3d:24:0f:2d:
bb:77:41:dd:f1:79:42:4f:26:e2:9d:22:da:74:dd:bf:94:50:
0b:ed:d7:46:c4:ff:b0:a7:88:2a:bf:6b:1f:f6:50:eb:ef:66:
b1:e5:a8:67:c0:2e:ac:aa:00:69:dd:7d:f4:9a:a9:3f:a0:f8:
04:de:fe:cf:42:7d:c1:4f:86:1a:65:8e:8c:b9:ea:18:43:a1:
6f:00:4e:25:92:1b:17:2d:d7:42:52:c3:9a:3b:d5:87:0a:22:
9a:81:60:37:1a:6c:f0:76:6d:4b:79:41:90:51:cf:d4:d9:15:
27:22:52:c1:5f:c6:d2:a0:c5:f4:c3:a9:82:d3:27:e9:c8:93:
ab:ec:ad:46:7d:5e:10:e4:c0:7a:38:36:ef:63:b2:ae:e6:de:
e0:a0:1f:12:88:d1:2f:7a:75:2e:c1:2f:05:b3:49:ad:90:16:
fe:f2:ac:95:c9:91:1a:ea:e3:13:b5:a6:4f:45:39:44:0e:7d:
57:63:47:05:7d:35:5d:79:12:d8:e8:e1:b9:06:91:9a:d2:02:
85:0f:84:5e:c9:8b:b2:32:18:e7:8e:6b:9b:ac:27:62:9f:c4:
2e:33:ee:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org