Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/OnY5b5VuOETXS-YeuleZeuRGfFA.roa
File: OnY5b5VuOETXS-YeuleZeuRGfFA.roa (raw, json)
Hash identifier: BElIkkt1AOkVheD7ajQ7j+/DW2NDbzaAkEjp0U42HJM=
Subject key identifier: 3A:76:39:6F:95:6E:38:44:D7:4B:E6:1E:BA:57:99:7A:E4:46:7C:50
Certificate issuer: /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial: 08C6
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/OnY5b5VuOETXS-YeuleZeuRGfFA.roa
Signing time: Wed 14 Jun 2023 20:24:13 +0000
ROA not before: Wed 14 Jun 2023 20:24:13 +0000
ROA not after: Fri 07 Jun 2024 02:16:11 +0000
asID: 4842
IP address blocks: 43.250.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2246 (0x8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Validity
Not Before: Jun 14 20:24:13 2023 GMT
Not After : Jun 7 02:16:11 2024 GMT
Subject: CN=3A76396F956E3844D74BE61EBA57997AE4467C50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:86:c7:76:8d:50:f4:52:60:f2:7a:84:c0:
23:8f:03:52:cb:5b:bc:3d:d3:8d:13:97:e3:56:da:
ae:a8:f6:6b:aa:85:bc:b6:8d:4a:0b:8c:20:d6:5a:
1f:3f:e6:af:bc:8f:d8:92:05:11:3f:3d:d0:d5:e9:
3a:2d:fb:2b:11:51:4c:da:62:56:c8:b4:ff:fe:92:
d2:59:d8:30:e4:40:68:9c:c2:2d:59:91:d0:4f:3a:
10:30:3e:1a:95:ff:25:92:42:1c:3a:82:7d:c8:7d:
d9:bd:78:3f:f1:78:a7:e5:03:6b:80:3e:22:af:20:
cf:27:f3:a0:ae:58:35:d8:79:c2:74:24:5c:e5:bb:
fe:00:21:c9:68:1f:30:83:cd:f0:05:ab:25:07:66:
04:07:55:8a:86:d4:07:e8:a3:46:19:28:5c:df:f7:
40:7d:66:b9:09:b6:55:bd:ec:af:a3:0c:bd:61:65:
8e:69:e4:d7:a4:47:a8:f4:ca:b2:6c:22:7a:d7:08:
69:ff:ef:66:6a:71:00:d4:fb:28:2e:9c:85:9b:b9:
ec:9f:f7:af:b9:e1:7e:30:e7:d2:3a:ad:f2:ef:d2:
2d:c7:ef:c3:56:93:dc:cb:b2:09:df:c5:02:5e:8f:
3f:fc:3f:37:b8:a7:09:9a:28:6f:24:6b:34:f7:90:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:76:39:6F:95:6E:38:44:D7:4B:E6:1E:BA:57:99:7A:E4:46:7C:50
X509v3 Authority Key Identifier:
keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/OnY5b5VuOETXS-YeuleZeuRGfFA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.116.0/22
Signature Algorithm: sha256WithRSAEncryption
60:40:34:5b:c5:47:b8:48:96:1f:e5:99:1e:df:21:de:8c:51:
78:a6:cc:6b:82:d9:9c:53:ea:95:c1:91:be:a2:f2:2a:f1:a5:
ce:04:07:8f:6d:0c:c9:07:32:ea:ae:82:53:02:c8:ca:3c:70:
f3:6c:88:b8:29:68:98:e0:d2:0c:4c:21:9e:51:03:f5:e4:cb:
75:fc:59:3b:81:85:7a:dd:8e:e3:89:89:70:41:55:9c:fc:b1:
7b:2d:c3:b7:ff:db:91:67:a6:58:90:16:82:46:47:4a:60:78:
26:ba:1f:f3:fb:70:4d:42:48:96:d8:dd:a4:1c:e1:33:ff:c0:
d0:3e:b9:e0:5b:00:88:61:d4:23:2d:d5:ff:1a:e1:1c:45:2b:
5c:e6:08:70:d9:2e:c8:75:15:00:90:3c:46:b2:de:aa:4c:b6:
80:bd:02:20:31:c4:8d:04:2e:b4:7a:7b:b8:21:75:05:d1:a2:
19:a9:4d:c2:4e:54:54:13:0e:6c:73:09:21:af:31:a9:e1:b1:
2c:c4:4f:c9:1c:76:77:33:a4:87:67:f8:9e:45:8b:0a:c7:f2:
ea:3b:2f:5d:a5:ce:8a:20:30:d8:c6:6b:84:57:6b:43:2d:bd:
1c:45:29:e7:3d:ff:50:66:18:50:c3:e6:ab:7c:37:19:c4:7a:
c7:8e:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org